Privacy Policy

Vantra Studios

Last updated: 10 May 2026

This Privacy Policy explains how Vantra Studios ("Vantra", "we", "us") collects, uses, and protects information when you use Vantra Hub, the Vantra mobile app, vantrastudios.com, or any related Vantra Studios service.

We treat your data like we'd want our own treated. This policy is plain English on purpose.

1. Information we collect

You give us

Data	Why
Email address	Account login and notifications
Username, display name, bio	Public profile
Profile photo / avatar	Public profile
Posts, comments, messages	Core social features
Face reference photos (for collabs)	Train your AI identity model
Voice recordings (if you opt in)	Custom voice generation
Collab project content	Generate episodes between you and a chosen collaborator

Automatically

Data	Why
Login timestamps	Security, abuse prevention
Session activity	Make features work (real-time presence, etc.)
Usage analytics	Understand which features people use
Device type / browser	Compatibility and bug fixing
Approximate location (city)	Localised features (timezones, etc.)

What we do NOT collect

We don't collect precise GPS location.
We don't read your contacts, calendar, or photo library beyond what you explicitly upload.
We don't track you across other websites or apps.
We don't sell your data to anyone, ever.

2. AI identity training and biometric data

Vantra's collab feature trains a personal AI model ("identity LoRA") from face photos you upload. This is biometric data and we treat it with extra care.

Explicit consent. Before we train anything, you see a clear consent screen explaining what's about to happen and how to delete it.
Storage. Your face photos and trained identity model are stored in our private Supabase storage buckets. Only you and Vantra's automated generation service have access.
Use. Your identity model is only used to generate collab episodes within projects you've personally approved. It is not used in any other way.
Sharing. Your identity model is never shared with third parties, never sold, never used to train any general AI model, and never made available to other users.
Deletion. You can delete your AI identity at any time from Settings. Deletion is immediate and removes the trained model, all face references, and any LoRA files we've stored. Cached copies on Replicate's infrastructure are deleted within 30 days per their retention policy.
Children. You must be 17 or older to upload face photos. Vantra is not designed for use by minors for AI identity features.

3. How we use your data

We use the data you give us to:

Provide the Vantra service (logins, posts, collabs, episodes).
Train your personal AI identity model when you opt in.
Send service-related emails (verification, password reset, security alerts, collab notifications).
Investigate abuse, fraud, or security issues.
Improve Vantra (anonymous aggregated analytics).
Comply with legal obligations.

We will never sell your data, never use your face for advertising, and never train general AI models on your private content.

4. Third parties we share data with

We use these services to operate Vantra. Each receives only the data necessary to perform its function.

Provider	Purpose	Data shared
Supabase	Database and storage	All data we hold
Netlify	Hosting and serverless functions	Request metadata
Replicate	AI image and video generation	Your face photos (during training), prompts (during generation)
Anthropic (Claude)	AI assistant features	Conversation messages with the AI
ElevenLabs	Voice generation (when you use voice features)	Voice samples and text prompts
Resend	Transactional emails	Email address, message content

We do not share data with advertisers, data brokers, or marketing companies.

5. Cookies and tracking

Vantra uses minimal cookies, only for keeping you logged in and remembering your preferences. We do not use advertising cookies, third-party tracking pixels, or cross-site analytics. We do not share data with Meta, Google, TikTok, or other advertising platforms.

6. Your rights

Regardless of where you live, you have these rights over your data:

Access. See what data we hold about you. Email privacy@vantrastudios.com.
Correction. Update inaccurate data through your profile settings or by emailing us.
Deletion. Delete specific content from in-app, or delete your entire account from Settings → Delete Account.
Portability. Request an export of your data by emailing us.
Objection / withdrawal of consent. Withdraw consent for AI identity training at any time by deleting your AI identity.

We respond to data requests within 30 days.

EU/EEA/UK users

You have rights under GDPR including the right to lodge a complaint with your local supervisory authority.

California residents

You have rights under CCPA. We do not sell your personal information. To exercise CCPA rights, email us.

Australian users

We comply with the Australian Privacy Act 1988 and the Australian Privacy Principles.

7. Security

We use industry-standard security measures including TLS encryption in transit, password hashing (PBKDF2-SHA256 with 100,000 iterations), and access controls on our backend services. No system is perfectly secure — if we ever experience a breach affecting your data, we will notify you within 72 hours where required by law.

8. Data retention

We keep your data while your account is active. When you delete your account, we delete your data within 30 days, except where:

Legal obligations require retention (e.g. fraud investigation, tax records).
Aggregated, anonymised analytics may persist (data that no longer identifies you).
Backups may temporarily retain data for up to 90 days before being overwritten.

9. International transfers

Vantra Studios is based in Australia. Some of our service providers (Replicate, Anthropic, Supabase) may process data in the United States or European Union. We rely on standard contractual clauses and provider commitments to safeguard your data during international transfers.

10. Children's privacy

Vantra is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will delete it. AI identity features (face training) are restricted to users 17 and older.

11. Changes to this policy

We may update this Privacy Policy. Material changes will be communicated by email or in-app notice. Continued use after changes means you accept the updated policy.

12. Contact

Privacy questions: privacy@vantrastudios.com
General contact: hello@vantrastudios.com
Vantra Studios · Brisbane, Queensland, Australia