Privacy Policy

1. Who we are

Voasis (voasis.io and app.voasis.io, the "Service") is an AI ad creative platform operated by MYTALEO LLC, a Wyoming limited liability company with its principal address at 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, USA. MYTALEO LLC is the data controller for the personal data described in this policy.

For any privacy question or request, contact us at ceo@voasis.io.

2. Data we collect from you

Account data: your email address, display name and workspace name, and, if you sign in with Google, the basic profile information Google shares with us (email and name). We use passwordless authentication, so we never store a password for you.

Billing data: your subscription plan, credit purchases, billing history and Stripe customer reference. Payments are processed by Stripe; we never see or store your full card number.

Content you provide: prompts, creative briefs, scripts, audio, product photos, logos, brand website URLs you ask us to research, documents you upload as knowledge, and other assets you upload to create content.

Generated content and derived data: the videos, images, voiceovers and transcripts the Service generates for you, brand research profiles built from the websites you submit, and the metadata around each generation (model used, credits spent, timestamps).

Team and referral data: workspace membership, invitations you send (the invitee's email address), which workspace you are acting in, and, if you use the referral program, your referral code and the signup and conversion status of people who used it. Referrers see only a masked version of a referred user's email address.

Usage and technical data: log data such as IP address, browser type, pages visited and API activity, collected by us and our hosting providers for security, debugging and capacity planning.

Waitlist data: if you join the waitlist, your email address, signup timestamp and signup source.

3. Advertising-intelligence data about third parties

The Service includes market-research features that collect and display publicly available advertising information about brands: ad creatives (images and videos), ad copy, advertiser page names and profile images, ad formats, run dates, and platform transparency metrics such as approximate reach. This data originates from public platform transparency resources, primarily the Meta Ad Library, accessed directly or through licensed data providers.

We archive copies of these public ad creatives on our own storage because platform-hosted links expire, and we process them further for research purposes, for example transcribing the audio of video ads and computing statistics about a brand's creative output.

This data is business information about advertisers, but it can incidentally include personal data, such as the names or likenesses of people appearing in public advertisements or the names of advertiser pages. We process it on the basis of our legitimate interest in providing market-transparency and competitive-research tools built on information the advertisers themselves made public.

If you appear in, or own the rights to, an advertisement stored in the Service and want it removed, or if you are an advertiser who wants your ads excluded, contact ceo@voasis.io and we will handle your request promptly. Our Terms of Service describe the formal takedown process.

4. How we use your data

To provide the Service: authenticate you, run generations you request, store your content, operate workspaces and teams, power the research features, and show your history.

To process payments and manage subscriptions, credits, upgrades, downgrades and cancellations through Stripe.

To communicate with you: transactional emails (magic links, receipts and billing notices, team invitations, subscription changes) and product updates about Voasis. You can opt out of non-essential product emails at any time.

To keep the Service secure and reliable: abuse prevention, fraud detection, debugging and monitoring.

To improve the Service: we analyze aggregated, de-identified usage patterns. We do not use your uploaded content or generated output to train our own or anyone else's AI models.

To comply with legal obligations, including tax and accounting rules.

5. Legal bases

Where GDPR or similar laws apply, we process personal data on these bases: performance of our contract with you (providing the Service you signed up for), our legitimate interests (securing and improving the Service, communicating with our customers, and providing market-research tools built on public advertising data), your consent (marketing emails to waitlist members, which you can withdraw at any time), and compliance with legal obligations (billing records).

6. AI processing

When you generate content, the relevant inputs (your prompt, brand profile data, audio, and any product photos or logos you attached) are transmitted to specialized AI model providers to perform the generation. We access video, image and language models, as well as voice synthesis, dubbing and speech-to-text services, from established AI providers through secure gateways.

These providers process your inputs to return the generated result. We use API configurations that do not permit our customers' content to be used for the providers' model training, to the extent the providers offer such controls.

When you use the brand research feature, the public website URL you submit is fetched and its public content is analyzed to build your brand profile. When you use the research features, audio from publicly available video ads is transcribed by speech-to-text providers.

7. Who we share data with

We share personal data only with the service providers that run Voasis, and only to the extent needed. They fall into these categories: our database and authentication provider, our hosting provider, Stripe (payments), our content storage and delivery providers, the AI model providers and gateways that perform generation, voice and transcription providers, licensed advertising-data providers (sourcing public ad-library data), our transactional email provider, and Google (if you choose Google sign-in). Each processes data under contractual data-protection obligations. A current list of processors is available on request at ceo@voasis.io where the law requires disclosure.

We may also disclose data if required by law, to protect our rights or users' safety, or as part of a merger, acquisition or asset sale (in which case this policy continues to apply until amended).

We do not sell your personal data, and we do not share it with third parties for their own advertising.

8. Public share links

If you create a public share link for a video, brand profile or other content, anyone who has the link can view that content without an account. Share pages are excluded from search-engine indexing, but a link you distribute can be reshared by its recipients. You can revoke a share link at any time in the app; revocation disables the page.

9. International transfers

Our primary database is hosted in the European Union. Some of our processors, including our payment processor, hosting providers and the AI model providers, process data in the United States and other countries. Where personal data of EU or UK residents is transferred internationally, we rely on our processors' compliance mechanisms, such as Standard Contractual Clauses or Data Privacy Framework certification.

10. Retention

Account and content data are kept while your account is active. If you delete your account, or ask us to, we delete your personal data, uploaded assets and generated content within 30 days, except data we must keep longer for legal reasons.

Billing and transaction records are retained as required by tax and accounting law, generally up to 7 years.

Generated media you delete in the app is removed from our storage on deletion (subject to short-lived backups and a brief trash grace period shown in the app).

Archived public advertising data is retained while it remains relevant to the research features, and is removed on valid takedown or exclusion requests.

Aggregated, de-identified data that cannot be linked back to you may be retained indefinitely. Waitlist emails are kept until you ask to be removed or until the waitlist is retired.

11. Security

We protect your data with encryption in transit (TLS), encryption at rest with our storage providers, row-level access controls in our database, scoped API keys, and the principle of least access for our own tooling. No system is perfectly secure; if we learn of a breach affecting your personal data we will notify you and the relevant authorities as required by law.

12. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, receive a copy in a portable format, restrict or object to certain processing, and withdraw consent where processing is based on consent.

If you are in the EU, UK or a similar jurisdiction, you also have the right to lodge a complaint with your local data-protection authority. If you are a California resident, you have equivalent rights under the CCPA/CPRA, including the right to know, delete and correct; we do not sell or "share" personal information as defined by the CPRA, and because we do not engage in cross-context behavioral advertising, browser signals such as Global Privacy Control do not change how we process your data.

These rights also extend to individuals who appear in public advertisements processed by our research features; see section 3 for how to request removal.

To exercise any right, email ceo@voasis.io from the address associated with your account and we will respond within the legally required timeframe (at most 30 days in most cases).

13. Children

The Service is not directed at children and may not be used by anyone under 18. We do not knowingly collect data from minors; if you believe a minor has provided us data, contact us and we will delete it.

14. Cookies

We use only technically necessary cookies and browser storage: authentication session cookies (scoped to voasis.io), your active-workspace selection, and interface preferences such as theme and sidebar state. We do not use advertising or cross-site tracking cookies, so no cookie consent banner is required.

15. Changes

We may update this policy as the Service evolves. The date above always reflects the latest version. For material changes we will give notice on this page, in the app, or by email before they take effect.

16. Contact

MYTALEO LLC, 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, USA. Email: ceo@voasis.io.