Vertale Privacy Policy

1. Introduction & Scope

This Privacy Policy describes our practices for information we collect through the Vertale Service, including when you sign in, watch and create content, communicate with others, and buy and spend tokens. It should be read together with our Terms of Use, which govern your use of Vertale.

This policy covers all visitors and registered users worldwide. Where a specific law gives you additional rights — such as the EU/UK General Data Protection Regulation (GDPR) or the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) — we explain those rights in the relevant sections below.

This policy does not apply to third-party websites, apps, or services that we do not own or control, even if they link to or from Vertale. Those third parties have their own privacy practices, and we encourage you to review them.

For the purposes of the GDPR, Bodrum Enterprise LP, a limited partnership registered in Scotland under number SL021919, is the 'controller' of personal data processed through the Service. You can reach our privacy team at info@bodrumenterprise.com or by mail at Suite 1227, 111 West George Street, Glasgow, Scotland, G2 1QX, United Kingdom.

2. Information We Collect

We collect information in three ways: information you provide directly, information generated when you use the Service, and information we receive from third parties such as our sign-in and payment providers. The categories below describe what we collect.

Account & profile information. You can create and access your account either by signing in with Google (Google OAuth) or by using a sign-in link we send to your email. If you sign in with Google, we receive your email address and basic Google profile information (such as your name and Google profile picture); if you sign in by email link, we use the email address you provide. When you set up your profile, we collect the @username/nickname you choose, your avatar, your bio, and your country. You can update most of this information in your account settings.

Content & messages. We collect and store the content you create, upload, or share on Vertale, including AI-generated video series and episodes, uploaded media, the prompts and inputs you use to generate content, comments, replies, and your likes and follows. We also collect the 1:1 direct messages you send and receive, including their content and metadata (such as the participants and timestamps). Direct messages on Vertale are not end-to-end encrypted; we can access message content to operate the Service, enforce our Terms, comply with law, and keep the community safe.

Payment information. When you buy tokens (our in-app virtual currency), payments are processed by our third-party payment processor. Vertale is the merchant/seller of record; the payment processor handles the transaction on our behalf. You provide your card or payment details directly to the payment processor, and Vertale does not collect or store your full payment card number. We receive and store payment records and related details from the payment processor, such as a transaction identifier, the amount, currency, date, payment status, the last four digits and brand of your card, and a billing country or postal code. We also maintain your token balance and a history of token purchases and how tokens are spent to generate content.

Automatically-collected device & usage data. When you use Vertale, we and our infrastructure providers automatically collect technical information, including your IP address, device and browser type, operating system, device identifiers, language settings, time zone, referring/exit pages, and approximate location derived from your IP address. We also collect usage data such as the episodes and series you view, watch time and playback events, searches, content you interact with (likes, comments, follows), feature usage, crash and diagnostic logs, and timestamps.

Cookies & local storage. We use cookies, local storage, and similar technologies to keep you signed in, remember your preferences, and secure the Service. See the 'Cookies & Similar Technologies' section for details.

3. How We Use Information

We use the information we collect to operate, maintain, and improve Vertale, and to keep it safe. Specifically, we use it to:

• Provide the Service — create and authenticate your account, display your profile, deliver the video feed, enable following, likes, comments, and direct messages.
• Power AI creation — process your prompts and inputs to generate AI video series and episodes, deduct and track tokens spent on generation, and use this content to develop, train, and improve our AI models and features (we do not train our AI on the content of your private 1:1 direct messages).
• Process payments — sell and credit tokens to your balance through our payment processor, maintain purchase and spending records, and handle billing issues, chargebacks, and any applicable refunds.
• Personalize your experience — recommend creators and content, remember your preferences, and tailor what you see.
• Communicate with you — send service-related messages such as account, security, transaction, and policy-update notices, and respond to your support requests.
• Maintain safety, security, and integrity — detect, investigate, and prevent fraud, abuse, spam, security incidents, and violations of our Terms (including our acceptable-use rules); moderate content; and enforce our policies.
• Analyze and improve — understand how the Service is used, debug and fix problems, develop new features, and conduct research and analytics.
• Comply with law — meet legal, regulatory, tax, and accounting obligations and respond to lawful requests.

AI training opt-out. You can opt out of having your content used to train and improve our AI models at any time in your account settings (under Data & AI). Opting out applies going forward. If you are in the EEA or the UK, you can also object to this processing by contacting us at info@bodrumenterprise.com.

4. Legal Bases for Processing (GDPR)

If you are in the EEA or the UK, we process your personal data only where we have a valid legal basis to do so. Depending on the activity, our legal bases are:

• Performance of a contract — to provide the Service you sign up for, including creating your account, hosting and delivering your content, enabling messaging, and processing token purchases and AI generation requests.
• Legitimate interests — to secure the Service, prevent fraud and abuse, moderate content, understand and improve how Vertale is used, and communicate with you about the Service, where these interests are not overridden by your rights and freedoms.
• Consent — for certain cookies and similar technologies and for any other processing where we ask for your consent; you can withdraw consent at any time without affecting prior processing.
• Compliance with a legal obligation — to meet our obligations under applicable laws, such as tax, accounting, and responding to valid legal requests.

Where we rely on legitimate interests, you have the right to object, and we will stop unless we have compelling legitimate grounds or need to establish, exercise, or defend legal claims.

5. How We Share Information

We do not sell your personal information for money. We share information only as described below.

Service providers. We share information with third-party vendors who process data on our behalf to run the Service — including hosting and infrastructure providers (which store your account data, content, and media and authenticate your sign-in), a payment processor (which handles your token purchases), and providers for analytics, error logging, and customer support. When you generate content, your prompts and the materials you upload are shared with a third-party AI provider that performs the generation on our behalf. We require these providers by contract to protect your information and to use it only for the services they provide to us.

Other users (public content). Vertale is a social platform. Information you make public — your @username/nickname, avatar, bio, the series and episodes you publish, your comments and replies, and your likes and follows — is visible to other users and may be viewed, shared, or re-published by them. Direct messages are shared with the recipients you send them to. Please be thoughtful about what you post and share.

Legal & safety. We may disclose information if we believe in good faith that it is reasonably necessary to comply with a law, regulation, legal process, or governmental request; to enforce our Terms and policies; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of Vertale, our users, or the public, including handling DMCA copyright notices. This includes reporting child sexual abuse material to the relevant authorities as required by law.

Business transfers. If Vertale is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, your information may be transferred as part of that transaction. We will notify you of any change in the controller of your personal data, and the recipient will be bound by this Privacy Policy unless and until it is updated.

Aggregated or de-identified data. We may share information that has been aggregated or de-identified so that it cannot reasonably be used to identify you, for purposes such as analytics and reporting.

6. Cookies & Similar Technologies

We and our providers use cookies, browser local storage, and similar technologies to operate and secure Vertale. We use them to:

• Authentication and security — keep you signed in (for example, through our authentication provider), protect your account, and detect abuse.
• Preferences — remember settings such as language, country, and playback choices.
• Analytics — understand how the Service is used (for example, which episodes and features are popular) so we can improve it. We use Google Analytics for this, and in regions that require consent (such as the EEA and the UK) these analytics cookies are set only after you agree through our cookie banner.

We use strictly necessary and functional cookies and local storage to sign you in, keep your account secure, and remember your preferences. We also use Google Analytics to measure and improve how Vertale is used, which collects information such as pages and episodes viewed, approximate location derived from IP address, device and browser type, and interaction events. We do not use advertising or cross-site tracking cookies, and we do not use analytics for personalized advertising. We use Google Consent Mode: for visitors in the EEA and the UK, analytics cookies are denied by default and are enabled only after you give consent through our cookie banner, which you can change or withdraw at any time. For visitors in regions that follow an opt-out model (such as the United States), analytics may run by default, and you can opt out using the cookie banner or your browser controls, including Global Privacy Control signals, which we honor where required. Most browsers also let you block or delete cookies and clear local storage through their settings, though blocking essential cookies may stop parts of Vertale — including sign-in — from working.

7. Data Retention

We keep your personal information for as long as your account is active and for as long as needed to provide the Service. We also retain certain information after account closure where we have a legitimate or legal reason to do so.

• Account and profile data is retained while your account exists and deleted or de-identified within a reasonable period after you delete your account, subject to the exceptions below.
• Content you publish may remain visible if it has been shared by, or interacted with by, other users, or where it is needed to provide the Service to them; we delete or disassociate content from your account following deletion where reasonably practicable.
• Payment and transaction records, including token purchase history, are retained as required to meet tax, accounting, audit, and anti-fraud obligations, typically for several years.
• Logs, safety, and moderation records are retained for the period needed to secure the Service, investigate abuse, and establish, exercise, or defend legal claims.
• Backups may persist for a limited time before being overwritten in the ordinary course.

When we no longer need your personal information, we delete it or de-identify it.

8. Data Security

We take reasonable technical and organizational measures designed to protect your information against unauthorized access, loss, misuse, and alteration. These include encryption in transit, access controls, and reliance on established infrastructure providers and a PCI-DSS-compliant payment processor, which handles your card details so that Vertale does not store your full payment card number.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please help protect your account by keeping your sign-in credentials secure and notifying us at info@bodrumenterprise.com if you believe your account has been compromised.

9. International Data Transfers

Vertale is operated using third-party infrastructure and service providers, and your information may be stored and processed in the United States and other countries where we or our providers operate. These countries may have data-protection laws that differ from those in your home country.

When we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum), or another lawful transfer mechanism. You can contact us at info@bodrumenterprise.com for more information about these safeguards.

10. Your Privacy Rights

Depending on where you live, you have rights over your personal information. You can exercise these rights by contacting us at info@bodrumenterprise.com. We will respond within the time required by applicable law and may need to verify your identity first. You can also access and update much of your profile information directly in your account settings.

EEA / UK rights (GDPR). If you are in the EEA or the UK, you have the right to: access the personal data we hold about you; rectify inaccurate or incomplete data; request erasure ('right to be forgotten'); restrict processing in certain circumstances; data portability (receive your data in a portable format and have it transmitted to another controller where technically feasible); object to processing based on legitimate interests or to direct marketing; and withdraw consent at any time where we rely on consent. You also have the right to lodge a complaint with your local data protection supervisory authority, though we'd appreciate the chance to address your concerns first.

California rights (CCPA/CPRA). If you are a California resident, you have the right to: know the categories and specific pieces of personal information we collect, use, and disclose; request deletion of your personal information; correct inaccurate personal information; opt out of the 'sale' or 'sharing' of personal information; limit the use and disclosure of sensitive personal information; and not be discriminated against for exercising your rights.

We do not sell your personal information in the traditional sense — we do not exchange it for money. Vertale does not currently use third-party cross-context behavioral advertising; to the extent any analytics or similar technologies could be considered 'sharing' under the CPRA, you may opt out by contacting us at info@bodrumenterprise.com and by using available browser controls (such as Global Privacy Control signals, which we honor where required). You may use an authorized agent to submit a request on your behalf, subject to verification.

11. Children

Vertale is intended only for adults. You must be at least 18 years old to use the Service, and the Service is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from someone under 18, we will delete it as quickly as reasonably possible.

Because the Service is for adults only, you must be 18 or older regardless of where you live, even though some countries set a lower digital-consent age (for example, 13–16 in parts of the EEA and UK). We may use age-assurance measures and may suspend accounts we reasonably believe belong to anyone under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@bodrumenterprise.com so we can take appropriate action.

12. Third-Party Links

Vertale may contain links to third-party websites, apps, and services, and user content may reference or link to external sites. We do not control and are not responsible for the privacy practices of those third parties. This Privacy Policy applies only to Vertale. We encourage you to read the privacy policies of any third-party services you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the 'Last updated' date and, where appropriate, provide additional notice (such as through the Service or by email).

Your continued use of Vertale after an update takes effect means you accept the revised Privacy Policy. If you do not agree with the changes, please stop using the Service and you may close your account.

14. How to Contact Us

If you have questions, concerns, or requests about this Privacy Policy or your personal information, please contact us:

• Privacy inquiries and rights requests: info@bodrumenterprise.com
• General contact: info@bodrumenterprise.com
• Mailing address: Suite 1227, 111 West George Street, Glasgow, Scotland, G2 1QX, United Kingdom
• Data controller: Bodrum Enterprise LP, a limited partnership registered in Scotland under number SL021919