Privacy policy
Last updated: October 31, 2026. This text reflects the public policy at https://veolora.com/privacy.
About this privacy policy
This privacy policy explains what Veolora collects when you use veolora.com, the short-drama ad studio and done-for-you orders, why it is used, who processes it and how long it is kept. It applies together with the terms of service.
Your workspace and data
Your draft ad, studio choices and interface preferences stay in this browser. Clearing browser data removes them.
Cloud accounts store your name, email, hashed password, brand library files with their names, tags, descriptions and thumbnails, short-drama task records and usage in Cloudflare D1 and R2. Records and files left from tools Veolora no longer offers stay private in your account and are removed when you delete it. Passwords are never stored in plain text. Secure session cookies are used for sign-in. Email codes are sent through Cloudflare Email Sending; codes expire after 10 minutes and are stored as hashes. Google sign-in requests only your basic profile and verified email, and stores an encrypted provider account record. It does not request Gmail or Drive access. Sign-in IP addresses and browser information are used for security and rate limiting.
Short-drama ads
The short-drama studio keeps your brief, story ideas, plan and stitching choices in this browser. When you are signed in and ask for story ideas or a plan, only the product to feature (with the brand and shop name removed), the style and the length are sent to Cloudflare Workers AI; your address is not sent.
When you film a shot, Veolora stores a task record in D1 with the plan and shot identifiers, the shot description, its length, the credits used, its status and timestamps. The shot description is checked by the automatic prompt review described below, then sent with any character reference images and the logo you chose from your library to the configured video provider, which may keep inputs and outputs under its own policies. Finished shots are copied to private Cloudflare R2 storage in your account and can only be played or downloaded while you are signed in. The finished film is stitched in your browser and is not uploaded. Shot files and task records stay until you delete your account, which removes them.
Brand library
Files you upload to the brand library are stored privately in your account in Cloudflare R2; their details and small preview images are stored in D1. Completed originals have no scheduled expiry and remain until you delete the file or your account, subject to service availability and the current 500 MB / 100-file account quota. Images may be up to 5 MB and videos up to 100 MB. Interrupted upload reservations are cleaned up after 24 hours.
Initial tag suggestions use file names, media type and dimensions. Content descriptions and custom tags are supplied by you; uploads do not perform AI analysis or submit paid generation. A logo or reference image you choose for a shot is sent to the video provider only when that shot is filmed.
Done-for-you orders
When you send a done-for-you order, we store your email, an optional link, your brief, the interface language and any uploaded image or video. Files are kept privately in Cloudflare R2 under a random order identifier and are never public; only the Veolora operator account can open them. Uploaded files are deleted 60 days after the order is created, and unfinished uploads are removed within a day. A notification with the order details is sent to our support inbox through Cloudflare Email Sending. The email and order details are kept for billing, support and dispute handling. If you are signed in, the order is linked to your account.
AI and analytics
When you ask for story ideas or a shot plan, the inputs described above are sent to Cloudflare Workers AI. When you film a shot, its description and the reference images it uses are sent to the configured video provider. When generation content review is enabled, the shot description and a random request identifier are sent to Creem before the video provider. Original videos, reference images, account emails and credentials are not sent to the text review endpoint. Review rejection or unavailability blocks new generation. We retain the review reference, decision, character count, billed units and timestamp for 90 days to support safety audits; these records do not contain the prompt text, email, original media or credentials. Generated shots are stored privately in your account and are not reviewed by people before you can preview or download them. Service operators view a specific generated clip only when it is reported or needed to investigate abuse; brand library originals are not automatically reviewed. Records of earlier output reviews are kept for 90 days. The operator maintains blocked prompt phrases in a live policy list; policy changes are also logged. Concept imagery is clearly labeled. Umami measures page visits and action counts without sending product briefs, account emails or passwords as custom events. Browser privacy settings may block analytics.
Cookies and browser storage
Signing in sets a session cookie that is HTTP-only, Secure and limited to veolora.com; it ends when you sign out. Veolora does not use advertising cookies. The browser also keeps your language, theme and button-effect choices, a hint that you are signed in, and your draft short-drama ad in local storage, and a checkout reference in session storage while a payment is open. Umami counts visits without cookies. Clearing site data removes all of these.
Security
Pages and uploads travel over HTTPS. Passwords and email sign-in codes are stored only as hashes. Brand library files, generated shots and order files are served only to the signed-in owner, or to the operator account for orders, and never through public links. Requests that change data must come from veolora.com, and sign-in, uploads and AI requests are rate limited.
Children
Veolora is made for businesses and adults. It is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, email us and we will delete it.
Future payment processing
Purchases are not open yet. When you choose to purchase after launch, Veolora sends your account identifier, email, selected offer and order reference to the owner's payment hub and its configured payment provider. Card details are entered on the payment provider's hosted checkout, not stored by Veolora. Veolora keeps verified transaction references, subscription state, credit grants and reversals for billing support. Account deletion removes local account links; necessary payment references may remain for refunds and reconciliation.
How long data is kept
Browser drafts and studio plans stay until you clear site data. Library materials, short-drama shots and task records stay until you delete them or your account. Done-for-you order files are deleted 60 days after the order. Prompt review records and earlier output review records are kept for 90 days. Email sign-in codes expire after 10 minutes. Payment references that billing and refunds depend on can remain after account deletion.
Your choices and data requests
You can delete files from the brand library, and delete your whole account in settings; deleting the account removes your brand library, generated videos and the records of earlier tools. To ask for a copy of your data or a correction, email us. Veolora does not sell personal data or share it for cross-context behavioral advertising. Cloud backups may retain data according to Cloudflare retention policies.
Changes to this privacy policy
We may update this privacy policy when the product or its providers change. The date at the top shows the latest version, and material changes will be announced on the site before they apply.
Questions about this privacy policy
For privacy and data requests, or questions about this privacy policy, email privacy@veolora.com.