Last updated: October 2026 • Drafted for MVP architecture transparency.
Uploaded source videos, brand logos, audio files, and generated MP4 outputs remain the property of the customer or their authorised agency client. Vellustream AI does not use customer-uploaded media to train foundational AI models unless explicitly authorised in writing.
All media files are stored in private storage buckets protected by Row-Level Security (RLS). Files are only accessible via short-lived, cryptographically signed URLs. Temporary scratch files created during FFmpeg video rendering are automatically purged upon job completion.
Authenticated users can export their complete account data in JSON format or trigger immediate account and media file deletion at any time from the Studio Account & Privacy page (/settings).
Notice: This document is a functional engineering placeholder and does not constitute certified legal compliance. Before opening public paid subscriptions, Vellustream Studio must complete a formal UK GDPR / Data Protection Act 2018 review, execute Data Processing Agreements (DPAs) with sub-processors (Supabase, Stripe, Google Cloud / OpenAI), and appoint a privacy contact.