Privacy Policy
Your face is personal. Here is how we handle it.
Last updated October 7, 2026
On this page
Who is responsible
1607027 B.C. LTD. operates Vesperk and Vemmy from British Columbia, Canada. This policy covers our websites and Discord app. Email [email protected] with privacy questions, access requests, corrections or complaints.
What we collect
Discord sign-in gives us your account ID and display name. We also process sign-in sessions, saved face names, permission records, saved face photos, GIFs and pictures you submit, the results of the automated face check, daily upload and check counts, generated results, job status and credits. We process messages, attachments and interactions that you send to the bot. Website sign-in does not request your Discord email, friends list or unrelated message history. Infrastructure providers process request information, including IP addresses, to operate and protect the service. When you sign in with the Discord app or a Vemmy button, we process a sign-in code or link, the request time and the browser and device type, which Vemmy shows you in Discord. When you use Vemmy or the website, we save your Discord display name for your account page, support and safety reviews.
Why we use it
We use account information to sign you in, select the correct saved face, deliver GIFs and manage credits. An AI model checks your media for a clear face before we make the GIF or picture you request. Upload and check counts limit abuse and cost. When you have unused credits, Vemmy may send you a reminder in your Discord DM about every two days, and members get a note when plan credits reset; tap Stop reminders on any reminder, or turn them back on in My account. Limited records help with support, trial eligibility, fraud prevention, billing disputes and legal duties. We also use your information, including the photos, GIFs and pictures you send and the results we make, to run, protect and improve Vemmy. For example, we may review stored media for abuse, safety and support, fix problems, measure quality and speed, and develop new features. We decide how best to use it to keep Vemmy safe, reliable and efficient. We do not sell your personal information or use your face to identify you across unrelated services.
Permission for photos
Use your own adult face or get the adult subject’s permission before you upload it. We ask you to confirm permission when saving a face. The automated check looks for usable faces and for nudity. It does not identify anyone. Removing a face prevents future selection. Use Delete private data or contact us to request removal of all your private media.
Who processes your information
Discord handles sign-in, messages and files sent through Discord. Stripe handles checkout and payment information. Replicate uses technology from Google to check your uploads and review your results. Replicate processes the media needed for those checks, including media that does not pass. Replicate and its generation service receive the selected face and the GIF or picture needed for each result. Amazon Web Services hosts infrastructure, encrypted media and backups. Cloudflare handles traffic and security. We share information needed for these services, support, legal obligations and abuse handling. We do not send your full face library with each generation.
Processing outside Canada
Providers can process or store information outside Canada, including in the United States. That information can be subject to foreign law and lawful access. We remain responsible for our selection and use of providers. Their own policies also apply when you use their services directly.
Payments
We store subscription status, orders, credit records and limited payment identifiers used to prevent repeat trials. Stripe receives the card details you enter. We do not store full card numbers or security codes. Deleting private data does not erase financial history or reset trial eligibility.
Optional advertising measurement
You can allow us to measure Google ads and verified purchases in Privacy choices. Until you allow this, we do not load the Google tag or send advertising measurement to Google. With your permission, we save permitted ad click identifiers, campaign labels, acquisition time and your choice. We link this record internally through website sign-in and checkout. A separate matching choice allows server measurement of a payment after a free trial without another website visit. Without that choice, measurement is limited to the permitted browser tag. We send verified paid product revenue after discounts, excluding tax, the payment currency and a unique transaction identifier. Free trials, unpaid payments, cancelled checkout and later automatic subscription renewals do not count as acquisition purchases. We use fixed page names and remove private URL fields. We do not send photos, GIF content, messages, Discord identifiers, card details, sign-in credentials or tokens to Google advertising measurement. This implementation does not use Google Analytics or personalized advertising.
Optional purchase matching
A separate choice allows purchase matching with ad click identifiers and an optional hashed payment email. This choice permits server matching when you leave the website before a payment. If Stripe provides a payment email, we normalize it and hash it with SHA-256 before sending it through Google’s dedicated matching field. We do not request your Discord email or scrape email, address or phone fields from pages. A hashed email can still be personal data. Google can match it against information it holds to measure the ad result. Google’s privacy policy and customer-data terms apply to its processing. You can withdraw either measurement or matching in Privacy choices. Withdrawal stops later sharing; it does not automatically erase measurement already sent to Google.
Retention and deletion
Saved faces stay until you remove them. We keep each GIF or picture we make for you, the GIF or picture you sent for it and its check result, also when making it failed, until you delete your private data. Check results for media that never became a GIF are kept for up to 24 hours. Daily upload and check counts are kept for 24 hours and remain after you delete private data, so deletion does not reset daily limits. Other temporary media, such as GIFs you sent but never confirmed, is removed after it expires. Removal may take time. Website sessions expire after seven days unless you sign out sooner. Limited billing, trial, job, abuse, security and deletion records can remain for accounting, disputes and legal duties. Restricted encrypted backups may hold earlier copies until their retention period ends. Providers, Discord and people who downloaded a GIF may keep separate copies. Sign-in buttons work once, for one hour, and are deleted after seven days. Sign-in codes expire after ten minutes. Remembered browsers last up to 400 days.
Security
Stored private media is encrypted and linked to its owner. Account changes require authenticated sessions and security checks. The checking and generation services must access media while processing your request. No system can guarantee complete protection. Keep your Discord account secure. Never send support a password, full card number or security code.
Your controls and rights
Remove individual faces in Account → Faces. Use Delete private data to review billing and remove private media and website sessions. Email us to request access, correction, deletion or details about our handling of your information. We may verify account ownership first. We will explain any records we must retain or request we cannot fulfill. You can contact the Office of the Information and Privacy Commissioner for British Columbia about an unresolved concern.
Cookies, age and updates
The site uses essential sign-in and privacy-choice cookies, an appearance preference saved only when you choose one, and optional Google advertising measurement only after permission. See Cookies for details. Vemmy is for adults aged 18 or older; do not upload a child’s face. Contact us if you believe we hold a child’s information. We will bring material policy changes to your attention when required.
Questions? [email protected]