Privacy Policy

Vantra Studios
Last updated: 15 August 2026

This Privacy Policy explains how Vantra Studios ("Vantra", "we", "us") collects, uses, and protects information when you use Vantra Hub, the Vantra mobile app, vantrastudios.com, or any related Vantra Studios service.

We treat your data like we'd want our own treated. This policy is plain English on purpose.

1. Information we collect

You give us

DataWhy
Email addressAccount login, transactional communication, project enquiries, app/AI access, and marketing only where you opt in
Username, display name, bioPublic profile
Profile photo / avatarPublic profile
Posts, comments, messagesCore social features
Face reference photos (for collabs)Train your AI identity model
Voice recordings (if you opt in)Custom voice generation
Collab project contentGenerate episodes between you and a chosen collaborator
Project enquiry detailsRespond to briefs, quotes and customer requests
Marketing preferencesRecord whether you opted in, opted out, or are transactional-only

Automatically

DataWhy
Login timestampsSecurity, abuse prevention
Session activityMake features work (real-time presence, etc.)
First-party usage analytics (when allowed)Understand visits, page views, downloads, campaign sources, conversions and feature usage
Device type / browserCompatibility and bug fixing
Approximate location (country/region/city where available)Regional analytics, localisation and fraud/security signals; never precise GPS
Pseudonymous visitor/session IDsMeasure returning visits and customer journeys without using cross-site advertising identifiers
Referral and campaign parametersUnderstand whether a visit came from Instagram, QR campaigns, search, direct links or other Vantra campaigns

What we do NOT collect

2. AI identity training and biometric data

Vantra's collab feature trains a personal AI model ("identity LoRA") from face photos you upload. This is biometric data and we treat it with extra care.

3. How we use your data

We use the data you give us to:

We will never sell your data, never use your face for advertising, and never train general AI models on your private content.

4. Third parties we share data with

We use these services to operate Vantra. Each receives only the data necessary to perform its function.

ProviderPurposeData shared
SupabaseDatabase and storageAll data we hold
NetlifyHosting and serverless functionsRequest metadata
StripePayment processing for eligible purchases and Vantra CreditsPayment and checkout information required to process the transaction
ReplicateAI image and video generationYour face photos (during training), prompts (during generation)
Anthropic (Claude)AI assistant featuresConversation messages with the AI
ElevenLabsVoice generation (when you use voice features)Voice samples and text prompts
Resend or another configured email delivery providerTransactional emails and opted-in marketing campaignsEmail address, message content, delivery/unsubscribe events

Vantra AI may also use additional third-party AI infrastructure providers as services are added. We share only the information needed to perform the requested AI task and apply the provider-specific processing terms configured for that service. We do not share data with advertisers, data brokers, or marketing companies.

5. Vantra Audience Engine and direct marketing

Vantra operates a first-party customer and audience system called the Vantra Audience Engine. It keeps website analytics, customer contacts, marketing permissions, prospect research and campaign performance separate so that an email address collected for an account, purchase or project enquiry is not automatically treated as marketing consent.

6. Cookies, local storage and first-party analytics

Vantra uses account/session storage and local preferences needed to make the service work. Where you allow first-party analytics, Vantra creates a random visitor identifier in your browser and records events such as page views, downloads, campaign source, selected calls-to-action and engagement. We may also process a short-lived, one-way daily hash derived from network information for abuse prevention and basic de-duplication; we do not store that value as a reusable advertising identifier.

We do not use third-party advertising pixels or sell browsing activity to advertisers. The website provides a Privacy Choices control so you can choose essential-only operation or allow first-party analytics.

7. Vantra Amplify

When you use a Vantra Amplify share link, Vantra may attach a random share identifier and campaign parameters to the link. Where first-party analytics is allowed, this lets us measure project landings, account creation and checkout activity attributable to a shared Vantra link. Billing records may retain the share identifier when a purchase is completed so Vantra can measure campaign revenue and prevent attribution fraud. The identifier is used inside Vantra and is not sold to advertisers.

8. Vantra Live, Passport, Premieres, Drops and Rewards

Vantra Live may use first-party interaction signals, such as which Vantra sections you visit, to reorder content for you. These signals are used inside Vantra and are not sold to advertisers. Vantra Passport links your account with your credit wallet, saved items, premiere RSVPs, rewards and referral activity. Premiere reminder emails are sent only when you request that specific reminder. Vantra Drops marketing remains optional and separate from transactional account activity.

Referral and promotional-credit records may be retained to prevent duplicate claims, fraud and reward abuse. Marketplace seller applications may include the contact and product information you voluntarily submit for review.

8. Vantra AI conversations, routing and memberships

When you use Vantra AI, we may store your prompts, Vantra AI responses, selected Vantra mode, conversation titles, credit usage, request timing and technical usage records so you can maintain conversation history, receive support, prevent abuse and allow Vantra to meter costs and improve platform operations. Vantra may route AI requests through approved third-party model or infrastructure providers. Provider API credentials are kept server-side and are not exposed to customers.

If you purchase a Vantra membership, we store your membership tier, billing status, Stripe customer/subscription identifiers, renewal period, included-credit grants and applicable Vantra AI discount. Raw payment-card details are handled by our payment processor rather than stored by Vantra.

9. Your rights

Regardless of where you live, you have these rights over your data:

We respond to data requests within 30 days.

EU/EEA/UK users

You have rights under GDPR including the right to lodge a complaint with your local supervisory authority.

California residents

You have rights under CCPA. We do not sell your personal information. To exercise CCPA rights, email us.

Australian users

Where the Australian Privacy Act 1988 and Australian Privacy Principles apply to Vantra, we handle personal information in accordance with those requirements. Commercial electronic messages are also subject to applicable Australian spam rules.

10. Security

We use industry-standard security measures including TLS encryption in transit, password hashing (PBKDF2-SHA256 with 100,000 iterations), and access controls on our backend services. No system is perfectly secure — if we ever experience a breach affecting your data, we will notify you within 72 hours where required by law.

11. Data retention

We keep your data while your account is active. When you delete your account, we delete your data within 30 days, except where:

12. International transfers

Vantra Studios is based in Australia. Some of our service providers, which may include Supabase, Stripe, Anthropic, OpenAI, Google and media-generation infrastructure providers, may process data outside Australia depending on the service and configuration used. We rely on standard contractual clauses and provider commitments to safeguard your data during international transfers.

13. Children's privacy

Vantra is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will delete it. AI identity features (face training) are restricted to users 17 and older.

15. Changes to this policy

We may update this Privacy Policy. Material changes will be communicated by email or in-app notice. Continued use after changes means you accept the updated policy.

16. Contact

Privacy questions: privacy@vantrastudios.com
General contact: hello@vantrastudios.com
Vantra Studios · Brisbane, Queensland, Australia

Vantra Store & Commerce

When you use Vantra Store, we may process product, cart, order, delivery, customer-service and transaction information required to operate the store. Checkout, order management and fulfilment may involve contracted commerce, payment, supplier and delivery providers. We minimise the information shared with fulfilment providers to what is reasonably required to supply the order. Marketing consent remains separate from transactional communications.