Webioapp
Log inStart free

Privacy Policy

Last updated October 28, 2026

This Privacy Policy describes how Creatively Personalized LLC (“we”, “us”, “our”) collects, uses, discloses and protects information through this website and the Webioapp service (the “Service”). By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information we collect

Personal information

We may collect personal information that can identify you, such as your name, email address, postal address, telephone number and payment details. This information is collected when you register for an account, use the Service, subscribe to our updates, or otherwise interact with us. In practice, the Service collects:

  • Account. Your email address, used to sign you in with a one-time code and to contact you about your account.
  • What you say and type. During a voice session your audio is streamed to the voice model and transcribed. Unless you turn off “Save conversations” in Settings, the transcripts and the messages you type to the assistant are stored with your account, together with the tasks they started, a record of how the assistant handled each request (the steps it took, the tools it used and what they returned) and any feedback you sent, so our team can see how the Service is used and improve it. Your audio itself is not stored.
  • Memory. Unless you turn off “Remember my preferences” in Settings, short notes about you that every new task follows: preferences and details picked up from what you ask in your tasks, and anything you ask the assistant to remember or add yourself. You can read, add, change, delete and clear them in Settings, under Memory.
  • Files. Documents, images, audio and video you upload, and the files the Service generates for you.
  • Voices. If you design or clone a voice, a short sample of it and the words it says, and for a clone the consent you agreed to before it was made and when you agreed.
  • Billing. Your plan, credit balance and a ledger of credits granted and spent. Card details go directly to Stripe and never reach our systems.
  • Support. The name, email address and message you send us through the contact form.
  • Referrals. If you sign up through someone's invite link, we record that they invited you and whether your account went on to subscribe, so we can grant the referral bonuses. The person who invited you sees only how many people signed up and subscribed through their link, never who.

Usage data

We may collect information on how the Service is accessed and used. This may include your IP address, browser type, device information, pages visited, time spent on pages, which features are used, how long sessions last, errors that occur, and other diagnostic data.

2. How we use your information

  • Service provision and improvement. We use your information to operate and maintain the Service: sign you in, carry out the tasks you ask for, keep your history and files available to you, bill you, deliver customer support, and understand how the Service is used so we can improve its overall quality and performance.
  • Keeping free credits fair. When you sign up or sign in, Vercel BotID checks that the request comes from a person, and we note which browser and network a new account comes from (the network only as a one-way hash; kept 90 days, or for as long as it lets through a sign-up our team allowed), so bots and people making account after account cannot collect the free credits. A sign-up this holds back is reviewed by our team.
  • Communication. We may use your personal information to communicate with you regarding updates, security alerts, promotional materials and other administrative messages. You may opt out of receiving marketing communications at any time.

We do not sell your data and we do not use your content to advertise to you.

3. How we share your information

We may share your information with trusted third-party service providers who assist us in operating the Service, processing payments or performing analytics. These third parties are obligated to keep your information confidential and use it only for the purposes for which it was disclosed. Today they are:

  • AI providers that do the work you ask for. Voice sessions run on OpenAI’s Live API, or on Google’s Gemini Live when OpenAI’s is unavailable. Task prompts, attachments and the text needed to complete a task are sent to model providers through the Vercel AI Gateway (including OpenAI, Google and Anthropic models), or through OpenRouter to the same models when the gateway is unavailable, to Replicate and fal.ai for image and video models, to ElevenLabs’s models for speech, transcription, sound effects, dubbing and music, run through the Vercel AI Gateway, Replicate or fal.ai, or by ElevenLabs directly, and to Replicate for speech in the voices you design or clone (with their samples) and when a speech model is unavailable. Each receives only what the task needs.
  • Stock library. When a task looks for stock photos, illustrations, footage or animations, Pixabay receives the few words describing what to find; nothing else about you or your request.
  • Infrastructure. Supabase hosts our database, authentication and file storage; Vercel hosts the application and checks sign-ups for bots; Amazon Web Services is used for some rendering and email.
  • Payments. Stripe processes payments and holds your card details.
  • Analytics. PostHog collects product analytics and session replays. Replays include the text you type and the content the assistant shows; passwords and login codes are masked. Analytics events never include transcripts, message text or file contents.
  • Advertising. Meta (Facebook) receives page views and conversion events (signing up, buying credits) so we can measure and improve our ads. These events carry a hashed version of your email address and account id, your IP address and browser information, and Meta’s own cookies. Google Analytics receives page views and the same conversion events (with the amount paid, never your email or name), and we share them with Google Ads to measure our ads there. None of these events include what you say or do in the Service.

We may also disclose your information:

  • To people you choose. When you share a finished task by link, anyone with the link can view that task’s results. Nothing else about your account is exposed. You can stop sharing at any time.
  • For legal requirements. If required to do so by law or in response to valid requests by public authorities, such as a court or government agency, or to protect the rights, safety or property of our users or ourselves.
  • In business transfers. In the event of a merger, acquisition or asset sale, your information may be transferred to the relevant third party as part of the transaction, provided that the receiving party agrees to uphold the confidentiality of your personal data.

4. Data security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. Files live in private storage reachable only through short-lived signed links issued to you, and access to our systems is limited to the people who need it. No method of transmission or storage is completely secure, so we cannot promise absolute security.

5. Data retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes and enforce our agreements. When the data is no longer required, we securely delete it. Specifically:

  • Uploads are deleted 7 days after upload.
  • Generated files are deleted 90 days after they were made.
  • Files a task makes along the way and does not give you as a result are deleted 7 days after the task finishes.
  • Saved conversations are deleted 12 months after their last message, and the record of how the assistant handled a request 12 months after it was made.
  • Memory notes stay until you delete or clear them, or close your account.
  • Voices stay until you delete them or close your account.
  • Billing records are kept for as long as the law requires us to keep them.

6. Your choices

  • Delete files and voices from inside the app.
  • Turn off “Save conversations” in Settings to stop your conversations being saved from then on.
  • Read, add, change, delete or clear what the assistant remembers in Settings, under Memory, or turn “Remember my preferences” off there so new tasks use none of it and nothing new is kept.
  • Stop sharing a task by revoking its link.
  • Opt out of marketing communications at any time.
  • Ask us to export or delete your account and its data through our contact page. We will confirm your identity through the email address on the account.

7. Cookies

We use cookies to keep you signed in and to run analytics. The Meta Pixel also sets advertising cookies (_fbp and, after you arrive from an ad, _fbc) that let Meta attribute a signup or purchase to an ad, and Google Analytics sets its own (_ga and _ga_*) that let Google Ads do the same. You can block these cookies in your browser and control how Meta and Google use them in your Facebook ad settings and your Google Ads settings. An invite link sets a cookie (va_ref) holding only the invite code, so the account you create is credited to the person who invited you; it is removed once your account exists. Signing up or in sets two cookies that serve only the bot check above: va_device, a random id for your browser, and va_bot_check, the id of that check.

8. Third-party links

The Service may contain links to third-party websites or services that are not operated by us. We are not responsible for the content or privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

9. Children

The Service is not directed at children under 13, and we do not knowingly collect their data.

10. Changes to this Privacy Policy

You can review the most current version of the Privacy Policy at any time on this page. We reserve the right, at our sole discretion, to update, change or replace any part of this Privacy Policy by posting updates and changes to our website. It is your responsibility to check this page periodically for changes. When the changes are material we will also tell you by email or in the Service before they take effect. Your continued use of or access to the website or the Service following the posting of any changes constitutes acceptance of those changes.

11. Contact

If you have any questions or concerns about this Privacy Policy, please contact Creatively Personalized LLC through our contact page.