Privacy notice

The party responsible for your data is Zuri Sasson Lobatón, an individual who operates Vilko from the State of Mexico, Mexico. For anything privacy-related —including exercising your rights over your data— write to info@vilko.ai — we answer.

If a company takes over operating Vilko in the future, we'll update this notice with its registered name.

Account: your name and email, handed to us by Google when you sign in. We never receive or store your Google password.

Your work: what you type in the chat to describe your ad, the scripts, looks and cast sheets you approve, and any files you upload (your logo, photos of your product).

Usage: how many videos you generate, how many takes had to be regenerated, and how long each project took. We use this to bill correctly and to improve the system.

Technical: IP address, browser type and pages visited, for security and abuse detection.

We do not collect sensitive data. We do not use facial recognition or biometrics.

To create and maintain your account.

To produce the videos you ask for — which means sending your descriptions to the AI providers listed below.

To bill your plan and issue your invoice.

To tell you when your video is ready or when something failed.

To detect and stop abuse of the service.

Only if you accept it in the cookie notice: to measure which of our ads bring people to Vilko (see “Cookies”).

We do not sell your data. An advertising platform only gets what “Cookies” describes, and only if you accept it.

For Vilko to work, your content passes through providers acting as data processors:

Supabase — database and accounts. Servers in the United States.

Vercel — site hosting.

Anthropic (Claude) — the conversation with you, the script, the sheets, the review of every take, the changes you ask for, and reading the photos, web pages and PDFs you send.

Atlas Cloud — video generation (Seedance, by ByteDance) and the sheet and look images (Google's Nano Banana Pro, ByteDance's Seedream and, as a fallback, OpenAI's GPT Image).

BytePlus (ModelArk) — alternate video engine, only if the main one is unavailable.

Google (Gemini) — watching and listening to the videos and audio you upload as references, and reviewing your finished video's audio.

ElevenLabs — music, sound effects, voice and subtitles.

Topaz Labs — upscaling the video to high resolution.

OpenAI — only the transcription of voice dictation, if you use it.

Resend — the email that tells you your video is ready.

Stripe — payments. We never see or store your card details.

Cloudflare (Turnstile) — on the sign-in page, checks that you're a person and not a bot.

Each has its own terms. We choose providers whose business tiers do not train on customer data, but review their policies yourself if you handle sensitive material.

Meta, only if you accept it — the pixel on our public pages and a notice when you sign up or pay (with your email hashed), to measure our ads. It isn't needed to use Vilko, and Meta handles it under its own terms.

On servers in the United States. If you are in Mexico or the European Union, that means an international data transfer, and by using Vilko you authorize it.

Your videos and projects stay saved for as long as you have your account, even if you cancel your plan, in case you come back.

Earlier versions of a video (the ones used to undo a change) are deleted automatically over time; the final version stays.

Billing records are kept as long as tax law requires.

You can delete your account and everything in it anytime from My account → Delete my account: it's deleted right away, including the photos and voices you uploaded. If you have a plan, it's canceled and you won't be charged again. You can also ask at info@vilko.ai.

At any time and at no cost, you can ask us to access, correct, delete, or restrict the use of your data.

If you are in the EU (GDPR), California (CCPA/CPRA) or Mexico (LFPDPPP), your local rights apply, including data portability.

Write to info@vilko.ai. We respond within 20 business days.

We use the bare minimum: one to keep you signed in, one to remember your chosen language, and one of our own that remembers which campaign or ad brought you here (for example, the campaign's name) so we know which advertising works; it lasts 90 days and, if you sign up, that campaign is noted on your account. To count visits without knowing who you are, your browser keeps a random number.

Only if you accept it in the notice that appears on the page, we also use Meta's pixel, which sets its own cookies to measure which ads work. If you say no, it doesn't load and everything works the same. In the European Union, the United Kingdom and Switzerland it never loads. To change your answer, clear vilko.ai's cookies in your browser and we'll ask again.

Vilko is not directed at anyone under 18 and we do not knowingly create accounts for them.

If we change something material, we'll email you before it takes effect. The date above always reflects the current version.