Privacy policy
What VLN8N collects, why, who else can see it, and how to get it back or have it deleted.
In effect since 24 September 2026.
1. What this covers
This policy explains how VLN8N collects, uses and shares information when you use the service. Using the service means you accept this policy and our terms of service.
2. What we collect
- Account data — your name, email address, a hash of your password (never the password itself) and your preferences.
- Your content — the text and audio you send for processing, and the results that come back.
- Usage data — which tools you used, when, and how much you processed, so we can apply your plan's limits.
- Technical data — IP address, browser, operating system, language and error logs.
- Plan-request data — the plan and billing period you choose, plus the time of your request. This form does not collect card details.
- Cookies and local storage — your session, the anti-forgery token, and interface preferences such as the theme.
3. What we use it for
- running the service and the features you asked for;
- processing your text and producing the results you requested;
- signing you in, protecting your account and preventing abuse;
- applying your plan's usage limits;
- writing to you about updates, security and support;
- meeting legal obligations and enforcing our terms;
- looking at aggregated, de-identified usage to make the service faster and more reliable.
4. Our legal bases
Where the law requires a stated basis — in the EEA, the UK and Switzerland — we rely on: performance of a contract, to deliver the service you signed up for; legitimate interests, to keep it secure and improve it; consent, for optional cookies and marketing; and legal obligations where they apply.
5. Cookies and local storage
- Strictly necessary — your session cookie and the anti-forgery token. Without these you cannot sign in.
- Preferences — theme, open panel, remembered filters. These live in your own browser and never reach us.
- Analytics, optional — pseudonymous events, only if analytics is enabled on this installation.
You can manage cookies in your browser. Blocking the necessary ones will stop the service working.
6. Analytics and logs
We keep server and application logs for security, debugging and reliability. IP addresses may be stored for a short period to detect abuse and enforce rate limits. Logs are redacted: passwords, tokens and API keys are replaced before anything is written to disk.
7. AI and processing of your text
The service uses algorithmic and model-assisted processing to transform and analyse text and audio. We do not use your content to train models shared with other customers. We may use aggregated, de-identified data to improve quality and safety.
Check automated output before you publish it. It is a draft, not a verdict.
8. Who else sees it
- Suppliers — hosting, storage, security, analytics, payments, email delivery and AI providers. They are under contract and receive only what they need to do their part.
- Law and safety — where we must comply with the law, enforce our agreements, or protect someone's rights or safety.
- Business transfers — as part of a merger, acquisition or sale of assets, with the same protections carried over.
We do not sell your personal data, and we do not share your content for anyone else's advertising.
9. International transfers
Where data crosses a border, we use the safeguards the law requires, such as standard contractual clauses or an equivalent mechanism.
10. How long we keep it
We keep personal data only as long as we need it to run the service, for legitimate business needs, and to meet legal obligations. You can ask us to delete it. Some logs and backups persist for a limited time afterwards for security and continuity.
11. Security
We apply reasonable technical and organisational measures: passwords are hashed, sessions use HTTP-only cookies, every form is protected against cross-site request forgery, uploads are validated, and your files are readable only by your own account. No method of transmission or storage is completely secure, and we will not pretend otherwise.
12. Your rights
- access to, correction of, deletion of, and a copy of your personal data;
- objecting to or restricting some processing, and withdrawing consent where it applies;
- opting out of marketing email;
- if you are in the EEA, the UK or Switzerland, complaining to your supervisory authority.
You can export your account data yourself from your account page at any time. For anything else, write to Write to us. We may need to verify who you are before acting.
13. Children's privacy
The service is not aimed at children under 13, or under the age your jurisdiction sets. We do not knowingly collect their data. If you believe a child has given us data, tell us and we will delete it.
14. Who is responsible
VLN8N is the controller of the personal data processed through the service, unless we have told you otherwise.
15. Links to other sites
The service may link to sites we do not run. What they do with your data is governed by their policies, not by this one.
16. Changes to this policy
We may update this policy. A material change is marked by updating the effective date above and, where it matters, by telling you directly. Continuing to use the service after a change means you accept the updated policy.
17. Contact
Questions, or a request about your data? Write to Write to us, or use the contact form.