Privacy Policy

1. Who we are

Veontra ("Veontra", "we", "us") operates veontra.com, the Veontra web app and the Veontra Copilot desktop app (together, the "Service"). Veontra is an AI workspace: document field and text extraction, document chat, audio transcription, text to speech, and AI generation of images, video, music and 3D models, plus a Developer API.

This Privacy Policy explains what personal data and content we process, why, which third parties are involved, and what choices you have. It applies when you visit our website, create an account, upload files, generate content, use the desktop app or the API, or manage billing.

2. Data we collect

We collect only the data needed to run the Service, secure accounts and bill paid plans.

• Account data: email address, optional first and last name, password hash (for email sign-up), Google account identifier when you use Sign in with Google, organization name, your role (owner or member) and account type (personal or organization).
• Security and verification data: IP address recorded at registration (used to grant one free trial per IP), email verification and password-reset token metadata, and Cloudflare Turnstile signals when you register.
• Content you provide: documents, images, audio files and other files you upload (including reference images, start and end frames, audio references and source images for 3D), prompts, lyrics and scripts you write, and screenshots or voice input you send from Veontra Copilot.
• Results we create for you: extracted fields and text, transcripts and translations, document chat answers, and generated images, videos, music, speech and 3D models, with their settings (model, quality, size, duration and similar).
• Usage and billing data: trial status, credit balance and usage, subscription status, Paddle customer and subscription identifiers, billing period dates and transaction references.
• Organization and referral data: email addresses you invite to your organization and invite status; referral codes, who signed up through your link and the credits rewarded.
• Developer API data: API keys you create, webhook URLs and delivery status, and request logs (method, path, status code and duration).
• Google account data (optional): when you use Sign in with Google or connect Google export, we receive your Google account identifier and email address and, for export, an OAuth refresh token (see Section 6).
• Technical data: cookies that keep you signed in, remember your language and track referral links; server and security logs; audit entries (for example document approval or export); website analytics through Google Analytics; and live chat conversations through Tawk.to (see our Cookie Policy).

3. How we use your data

We use the data above to create and manage your account, authenticate you, process your files and prompts and return the results, show extraction results for review, charge credits and process payments, run the referral program, provide support, prevent abuse, understand how the website is used and improve reliability.

We send transactional emails (verification, password reset, invites, billing) and may send service announcements and product updates. You can ask us to stop non-essential emails at any time by contacting us.

We do not sell your personal data and we do not use your files, prompts or generated content to train AI models. Content is sent to an AI provider only to perform the action you requested.

We use Google user data only to provide Sign in with Google and the Google export features you choose to enable. We do not use Google user data for advertising, sell it to data brokers, use it to train AI models, or transfer it for purposes unrelated to app functionality.

4. Legal bases (EEA/UK users)

Where GDPR or similar laws apply, we rely on: performance of a contract (providing the Service you signed up for); legitimate interests (security, fraud prevention, service improvement, analytics and product communications); and consent where required. You may withdraw consent at any time without affecting processing that is required to provide the Service.

5. Third-party service providers

We use trusted processors that help us operate Veontra. They process data only to provide their service to us. Which AI provider receives a request depends on the tool and model you choose.

• Paddle — payments, subscriptions, invoices and tax handling. Paddle receives billing details and payment information you enter in their checkout. We do not store full card numbers.
• Amazon Web Services — private storage of uploaded files and generated results (S3), and Amazon Textract to locate extracted fields on document pages.
• OpenAI — document extraction and document chat, audio transcription and translation, text to speech, GPT Image generation, lyrics drafts and Veontra Copilot.
• Google — Gemini API models (Nano Banana images, Veo video, Lyria music and Copilot), Sign in with Google, Google Sheets, Docs and Drive export, Google Analytics and Google Fonts.
• xAI — Grok Imagine image and video generation.
• Black Forest Labs — FLUX image and video generation.
• fal.ai — MiniMax Music and Sonilo music generation.
• Tripo — 3D model generation from text or images and retexturing.
• SMTP email provider — delivery of transactional and service emails.
• Cloudflare Turnstile — bot protection on registration.
• Tawk.to — live chat support on our website.

6. Google user data

Veontra offers optional Google integrations. Each is initiated by you through Google OAuth. We access Google user data only to provide the features below.

The use and transfer of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Sign in with Google — we receive your Google account identifier and email address to authenticate you and create or link your Veontra account.
• Google Sheets export (paid feature) — when you choose Export → Google Sheets and complete Google OAuth, we request the drive.file scope (access only to Google Drive files Veontra creates for your exports) and userinfo.email so we can show which account is connected.
• Google Docs export (paid feature) — when you choose Export → Google Docs and complete Google OAuth, we request the same drive.file and userinfo.email scopes to create and populate a new document you explicitly export.
• Google Drive export (paid feature) — when you save a generated image, video or music file to Google Drive, we use the same drive.file scope to upload only the file you chose.
• Google user data we collect: your Google email address and, for export, an OAuth refresh token stored in our database and linked to your Veontra user account.
• How we use Google user data: solely to authenticate you (Sign in with Google) or to create files with data you explicitly export. We do not access, read or modify your other Google Drive files.
• Sharing and transfer: Google user data is transmitted only to Google's APIs to perform actions you request. We do not sell, rent or share Google user data with third parties for their independent use, advertising, credit decisions or AI model training.
• Storage and security: Google OAuth tokens and the connected email are stored on our servers, protected by HTTPS in transit, tenant isolation and access controls limited to operating the integration.
• Retention and deletion: Google export connection data is kept while your account remains connected. You may disconnect in Veontra (which removes stored tokens from our systems) and revoke Veontra access at https://myaccount.google.com/permissions. Sign-in Google identifiers are retained while your account uses that login method.
• Policy updates: if we change how Veontra accesses, uses, stores or shares Google user data, we will update this Privacy Policy and the "Last updated" date on this page.

7. Public Gallery

Generated images, videos and music are private by default. If you choose to share a file, it appears in the public Gallery together with its prompt and generation settings, and other users can like it. Your name and email address are not shown.

You can stop sharing at any time; the file is then removed from the Gallery. Do not share content that contains personal data of others without their permission.

8. Storage, isolation and deletion

Each organization's files, results and generations are isolated. Other customers cannot access them.

When you delete a document, transcript or generation, we delete the stored files from our object storage and remove the related database records.

Veontra Copilot sends your message and optional screenshot to the AI provider to produce a reply; screenshots are not saved in your account.

If you need account-level deletion or a data export, contact us at the email below. Some billing records may be retained where required for accounting, tax or dispute resolution.

9. Security

We use industry-standard measures including encrypted connections (HTTPS), hashed passwords, httpOnly authentication cookies, tenant isolation, private file storage with time-limited signed links, and restricted access to stored Google OAuth tokens. No security method is perfect; please use a strong unique password and review AI results before relying on them.

10. Retention

We keep account data, files, results and generations while your account is active or until you delete them. Usage counters are kept for the current billing or trial period.

Google export tokens are kept until you disconnect the integration or delete your account. Email, security, API request and payment records may be kept longer where required by law or legitimate business needs (typically up to several years for financial records).

11. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict or export personal data, and to object to certain processing, including product emails and analytics. You may also lodge a complaint with your local data protection authority.

To exercise these rights, email us. We may need to verify your identity before fulfilling a request.

12. International transfers

Veontra and our providers may process data in countries other than yours, including the United States and the European Union. Where required, we rely on appropriate safeguards such as standard contractual clauses offered by our providers.

13. Children, changes and contact

The Service is not directed at children under 16, and we do not knowingly collect their data.

We may update this policy. Material changes — including changes to how we use Google user data — will be reflected on this page with a new "Last updated" date. Continued use after an update means you accept the revised policy.

For privacy requests and questions, contact us using the email below.