Privacy Policy

Vidsou is operated by Melhem Studios LLC, a Maryland limited liability company at 306 W Redwood St, Ste 201, Baltimore, MD 21201, USA. This policy explains how we handle personal information when you browse the website, create an account, use the Service, buy credits or contact us. Questions and privacy requests: hello@vidsou.com.

1. Information we collect

We collect information directly from you, through your use of the Service, and from the providers that support sign-in, payments and generation:

• Account information: your email address, account identifiers, sign-in information and records of your acceptance of our terms and your confirmation that you are 18 or older, handled through our sign-in and checkout providers.
• Your content and generated media: descriptions, lyrics, songs, photographs, product images, reference pictures, voice recordings and voice-over text, and the songs, takes, frames, clips, videos and ads generated for you.
• Preferences: “My style” notes, ratings and reasons, chosen takes, genres, characters and formats.
• Payment information: customer and subscription identifiers, purchases, invoices, amounts and payment status. Our payment provider processes your card details; Vidsou never receives or stores your full card number.
• Technical information: IP address, browser and device information, pages requested, timestamps, processing and error information, and internal account or job identifiers.
• Communications: support messages, complaints, privacy requests and related correspondence.

Content you submit may include information about other people. You are responsible for having the authority and permissions needed to submit it.

2. How we use information

• To sign you in and operate the Service.
• To generate, edit, process, store and deliver the media you request.
• To manage credits, subscriptions, payments and refunds, and to tell you about your account (for example, before a plan renews or when a paid plan ends).
• To run the referral program: if you joined through someone's referral link, we record which account referred you so we can credit them; they see only totals, never your identity. To stop self-referrals, we compare a few signals between the referring and the referred account: a random browser ID, the card fingerprint our payment provider supplies (never the full card number) and the billing name and postal code. These signals are personal information because they can be linked to an account. We use them only to prevent referral fraud, and only authorised staff reviewing referrals can see them. Rewards that look like self-referrals are not paid. Shared devices, payment methods or households can cause an innocent match: if a reward was refused and you believe the referral was genuine, email hello@vidsou.com and we will review it.
• To apply your saved creative preferences.
• To provide support and investigate technical problems.
• To detect misuse, protect security and enforce our Terms.
• To estimate your country and US state from your IP address, so we can apply the availability limits in our Terms (for example, AI generation is not available in California). The lookup uses a location database kept on our own servers (DB-IP), and your IP address is not sent to anyone for it.
• To keep operational records and understand how the Service is used.
• To meet legal obligations and to establish, exercise or defend legal claims.

We do not sell personal information, share it for cross-context behavioural advertising or use it for targeted advertising. We do not publicly show your content or output as promotional examples without your permission.

3. Personalisation, voices and faces

“My style” notes, ratings, feedback and chosen takes are turned into a short creative profile, which is included in the instructions sent to our AI text provider when preparing lyrics, prompts and shot lists. In My style you can edit or delete your notes, clear your preferences and switch personalisation off; deleted notes are not used in future jobs. For other preference or feedback data, email hello@vidsou.com.

“Sing it yourself” mixes your recorded singing with an instrumental. It does not clone your voice, create speech from your voice or train a model on your recording.

Vidsou does not create or store voiceprints, face templates or recognition identifiers. Image and video models may process your photographs to create media, and a vision model may inspect generated frames for quality problems. Vidsou does not use this processing to identify people.

Videos you download from Vidsou include a short statement in the file's metadata that they were made with AI by Vidsou, with the creation date, the parts made by AI and a video ID. It does not include your name or email. The video ID can be linked to your account in our records, so the statement is not anonymous to us.

4. Service providers

We use these service providers, each only for its specific task:

• Sign-in and account security: Clerk, including sign-in emails and sign-in with Google where offered.
• Payments: Stripe, and Link (a Stripe company) where checkout shows “Sold through Link”: checkout, subscriptions, invoices, the billing portal and fraud prevention.
• Hosting: Railway (servers, file storage and the database, in Virginia, United States) and Google Cloud Storage (the nightly encrypted backup, in Iowa, United States).
• Email: Google Workspace (our support mailbox and business correspondence) and Resend (account emails and internal reports).
• OpenAI: writing lyrics, prompts, captions and shot lists; reading pictures to describe them and checking generated frames for quality problems; generating and editing images, including pictures of characters and shop photos; AI voice-overs; and speech-to-text that times lyrics and checks whether a generated song sings your lyrics in order.
• Google (Gemini API): generating songs and ad music (Lyria models). Google does not use these prompts or responses to improve its products; it keeps them for a limited period to detect and prevent abuse, and may store them temporarily in countries where it has facilities.
• fal: backup song and ad-music generation when Google cannot produce a take (ElevenLabs music models); scene images (FLUX models); moving clips made from still pictures (ByteDance Seedance, Kling and MiniMax Hailuo models); removing the background from product photos; and splitting songs into vocals and music for Sing it yourself. fal runs some models itself and may pass a request to the model’s developer; how each model handles data is described in section 5.

Which provider handles a job depends on the feature and the models available, and a backup model from the providers above may handle a job if another one fails. To generate a song, we send your description and lyrics to Google (Lyria models), or to ElevenLabs Music through fal when the song is sung in a language Lyria does not support or when Google cannot produce a take. When you write your own lyrics, we also send the generated vocal takes to OpenAI for transcription to check whether the lyrics were sung in order; this check runs even when you have not selected on-screen lyrics. Image and video models receive the relevant prompts, photographs, product images, reference pictures or generated frames. Photographs you upload are sent to OpenAI when Vidsou describes, checks or edits them or uses them as a reference for new pictures (for example a shop photo or a character photo), and to fal when they are turned into moving clips or their background is removed.

Music you upload and your own voice recordings (your recorded singing and your recorded voice-overs) are stored and mixed on our hosted infrastructure in the United States. They are sent to an AI provider only in these cases: when you switch on Lyrics on the video, the part of the video's track that is used is sent to OpenAI's speech-to-text service to time the words; if that track is music you uploaded or a take that contains your own singing, that audio, including your voice, is part of what is sent. For Sing it yourself, the Vidsou-made song (not your recording) is sent to fal to separate the vocals, and its guide vocal to OpenAI to time the lyrics. Recorded voice-overs for ads are never sent to AI providers. Singing shots and lip-sync are not currently available. Before enabling them, we will update the relevant notices and obtain any required permissions.

Providers receive only the information needed for their task. Their processing may include security checks, abuse prevention, technical operation and legally required retention, and some (such as the payment provider) process limited information independently for purposes like payment compliance and fraud prevention. We may change providers as needed to operate the Service; we will update our disclosures and give notice or obtain consent where applicable law requires. This section lists the providers we use today, and we update it when that changes. For purchases marked “Sold through Link”, Link (Sold through Link, LLC, a Stripe company) acts as the merchant of record for the payment and handles your payment details, tax information, receipts and payment support under its own privacy policy.

5. AI training and provider retention

Vidsou does not use your content or generated media to train its own AI models. Our AI providers work under their own API terms and our account settings, and their rules on training, retention and service improvement differ between providers and models; we do not promise that every provider has identical practices or zero retention. Providers may keep submitted information or results where their terms allow, for example for safety, abuse prevention and legal compliance, and authorised provider staff may review it where those terms permit. A no-training commitment does not necessarily mean information is deleted at once or never reviewed. Some providers process data outside the United States and your country. Email hello@vidsou.com if you want to know which provider handles a particular feature or job.

6. Other disclosures

We may disclose information:

• to providers supporting the functions described in this policy;
• when required by law, court order or other valid legal process;
• when reasonably necessary to investigate misuse or to protect rights, security or safety;
• to professional advisers where needed for legal, accounting or business matters;
• in connection with a sale, merger, financing or reorganisation of our business, subject to appropriate protections;
• at your direction or with your permission.

Authorised Vidsou staff can access account information and content when needed for support, fixing problems, handling abuse and legal compliance. Your media is served through account access controls. Files sent to AI providers may also be stored at links created by those providers; such links are hard to guess but are not protected by your account sign-in. The preset characters' images are public. Vidsou has no public customer gallery, share links, comments or messaging.

7. Storage, retention and deletion

Vidsou's application, files and database are hosted in Virginia, United States, and a nightly encrypted backup copy is kept with a separate cloud provider in Iowa, United States. Our sign-in, payment, email and AI providers run their own systems, which may be outside the United States. We keep information according to its purpose, your account activity, your deletion requests and legal requirements:

• Videos: on accounts without a paid plan, videos are deleted 30 days after they were last changed. Paid accounts keep them while the plan is active and for 30 days after it ends; when a paid plan ends, we email you the date.
• Songs and other content: songs (including takes you did not choose), uploads, voice recordings, product photos and related material stay until you delete them or ask us to. Intermediate frames and clips generally stay with their project until it is deleted.
• Preferences: style notes stay until you delete them; other ratings and preference records until you clear them, ask us to delete them or delete your account.
• Billing records: purchases, invoices, credit and refund records are normally kept for 7 years after the year of the transaction, for accounting and tax. This is our standard schedule, not an automatic deletion deadline: where tax or other law requires longer, we keep them longer.
• Acceptance and age records: a limited record — your account identifier, when you accepted, the version and language of the documents shown and your 18+ confirmation — is kept while your account exists and for 7 years after it is closed, because questions about what was agreed can arise for several years after an account ends. We do not keep the rest of the account, or collect identity documents, for this purpose.
• Unused purchased-pack value after deletion: We keep the limited records needed to identify the owner and the remaining purchased value until that value is refunded, redeemed or otherwise handled as applicable law requires, including any required unclaimed-property process. Making a claim does not cause the record or balance to be deleted. Records of the payment or other resolution then follow the applicable accounting and legal retention periods.
• Dispute, fraud and referral case records: records of an actual payment dispute, fraud investigation or refused referral are kept for 3 years after that case is finally resolved, or longer while a legal claim is open or the law requires it. Each case has its own period: a new, unrelated referral or payment does not extend older records.
• Routine referral signals: the browser ID, card fingerprint and billing comparison we check for referrals are deleted 13 months after they were last seen (the last sign-in from that browser, or the last payment that recorded that card or billing detail), unless they are part of a case described above.
• Logs and correspondence: application logs are kept by our hosting provider for 30 days, and email delivery logs by our email-sending provider for up to 60 days. Support emails are kept while needed to answer you and to handle any related refund, dispute or legal request, and for no more than 3 years after your last message.

You can delete songs and videos in My library, remove a recorded voice-over from its ad, clear your preferences in My style and delete your account, which also cancels your subscription. Email hello@vidsou.com to delete anything else. Deletion may take time to complete across operational systems and backups (deleted information leaves our routine backups within about 37 days; a few older backup copies made before our public launch are kept until we delete them, no later than December 31, 2026); we keep remaining copies only as permitted by applicable law and for the purposes described in this policy, and information under a legal duty to preserve it may be kept longer. Deleting something in Vidsou does not delete copies an AI provider has already processed; those follow the provider's retention rules and your legal rights, and we handle provider-related deletion requests as the law requires.

If you download your content and publish or send it through another service, that service's privacy practices apply to its copy. Deleting content from Vidsou does not delete copies you or others have placed elsewhere. This does not limit our responsibility for disclosures made by Vidsou or by providers acting for us.

8. Cookies and browser storage

We use cookies and browser storage for sign-in, security, recognising visitors and saving your settings:

• Sign-in cookies (our sign-in provider): account sessions and security — for the session or as set by the provider.
• Language cookie: your chosen language — one year.
• Guest cookie: recognises a visitor who is not signed in — one year.
• Browser ID cookie: a random identifier used only to prevent referral abuse — 13 months, which covers the 12 months in which referral rewards can be earned plus one month. The matching record on our servers is deleted on the same schedule (see “Routine referral signals” in Section 7).
• Home-page music setting: whether the music is on or off — until you clear your browser storage.
• Install-app prompt: remembers that you closed it — 30 days.
• Payment provider cookies on its checkout and billing pages: payments and fraud prevention — as set by the provider.

We do not use advertising pixels, third-party behavioural analytics or third-party media embeds for tracking. You can manage cookies and storage in your browser; blocking sign-in or security storage may stop features from working. We do not change the processing needed to run the Service in response to browser “Do Not Track” signals, but where the law requires us to honour a privacy preference signal, we do.

9. Security

We use encrypted connections and account access controls. Administrative access is used only to run the Service, provide support, fix problems and handle abuse. We try to keep recordings, prompts and file links out of application logs; error information may include internal account or job identifiers and provider error messages. No system is completely secure; if a breach affects your personal data, we will notify you and the authorities as the law requires. Protect your sign-in details and avoid submitting sensitive information that a feature does not need.

10. Your privacy rights

Depending on where you live, you may have the right to access, correct, get a copy of or delete your personal information, and other privacy choices the law provides, including rights about sensitive information, targeted advertising, the sale of information and certain profiling. We do not sell personal information or use it for targeted advertising.

Email hello@vidsou.com to make a request. We may ask for information reasonably needed to verify your identity and authority, and an authorised agent may make a request where the law allows. We respond within legal deadlines and explain any permitted extension or refusal. Where you have a right to appeal, reply with the subject “Privacy appeal”; we will explain the outcome and any regulator you can complain to.

We will not unlawfully discriminate or retaliate against you for using your rights, although deleting information a feature needs may mean we cannot keep providing that feature. Vidsou does not use automated decision-making to suspend or close accounts. Some restrictions apply automatically: if you tell us you are under 18, the app is locked for that account; purchases and AI features are refused in California and when your location cannot be confirmed; new uploads and generation pause for everyone while an urgent safety report waits for review; and providers’ safety systems may refuse individual generation requests. If you think a restriction was applied to you by mistake, email hello@vidsou.com.

11. Children

The Service is for adults aged 18 and over. If you believe someone under 18 has an account, email hello@vidsou.com; we will investigate, close an ineligible account and delete its information, subject to legal retention duties. If you submit a child's photograph or other information, you must have the necessary authority and permissions. Sexual or exploitative content involving minors is prohibited.

12. Changes and contact

We post changes here with a new date and give notice of material changes as the law requires. A policy change does not by itself allow a new, incompatible use of information we already hold; before any such use, we get your consent or take the other steps the law requires.

Privacy questions and requests: hello@vidsou.com · Melhem Studios LLC, 306 W Redwood St, Ste 201, Baltimore, MD 21201, USA

Open-source and data licence notices: Credits.