Privacy policy
Last updated: 2026-11-04
Draft: this page will be reviewed before launch.
This policy explains what personal data Vircasi collects, why, who processes it, and the choices you have.
What we collect
Account data: your email address and, if you sign in with Google, your name and profile picture.
Your work: the characters you create, your slider settings, the text you type (for example in Chat to tune or a role description) and the images made for you.
Payments: the amount, currency and date of your purchases and the payment provider's reference. Card details are handled by Stripe; we never see or store them.
Usage data: basic logs such as requests, errors and generation times, and, when you visit or sign in, your IP address, approximate country, browser and device type, used to run, secure and improve the service and to prevent abuse.
How we use it
To run the studio and keep your characters, to sign you in, to count credits and process purchases, to prevent abuse and keep the service secure, to answer you when you contact us, and to improve image quality. We do not sell your personal data and we do not use it for advertising.
Who processes it
Most images are made on servers we operate. When they are busy or unavailable, an image request (its text description and the reference images it needs) may be sent to image models from other providers through OpenRouter.
Text you type to change a face or describe a role is sent to an AI language model (DeepSeek or Google Gemini) to turn it into slider changes or a look description.
Sign-in uses Google (if you choose it) and Resend, which sends our sign-in emails. Payments use Stripe. Our website is delivered through Cloudflare.
These providers process data on our behalf for these purposes only. Some of them are in other countries, including the United States, so your data may be processed outside the country where you live.
Cookies
We use a cookie to keep you signed in and remember small preferences in your browser. We do not use advertising or tracking cookies.
Keeping and deleting
We keep your account and characters until you delete them or ask us to delete your account. Logs are kept only as long as we need them to run and secure the service; visit and sign-in logs are deleted after about three months. Purchase records may be kept longer where tax or accounting law requires it.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, or to stop a particular use of it, by writing to [email protected]. Depending on where you live, you may also have the right to complain to your data protection authority.
Age
Vircasi is for adults aged 18 and over. We do not knowingly collect data from anyone younger; if you believe a minor has an account, tell us and we will delete it.
Changes
We will post changes here and, if they matter, tell you by email.
Questions: [email protected]