Privacy
Last updated 2026-08-25
Vesia is a tool for designing and running a synthetic persona — a character who does not exist, whose photographs are generated rather than taken. This page says what we hold, who else sees it, and when it is deleted. It is written to be read, not to be survived.
What we hold
- Your account. The email address you sign in with, and which plan you are on. We do not ask for your name, your address, or your date of birth.
- What you designed. The answers you gave when casting a persona — look, style, the world they live in. On a free account these are also demand research, and if your account is deleted they survive only as anonymous totals with nothing in them that points back to you.
- The work itself. Reference photographs, trained models, generated photographs and clips, and the notes you write when you reject something. Those notes go back into our automated checks, so a fault you catch is caught for the next person before they see it.
- When you were last here. Recorded to a few hours, and used for one thing: knowing whether a free account has been abandoned.
What we do not hold
No card details — when payment arrives, the card is handled by the payment provider and never reaches us. No tracking of you around other websites. No advertising profile. Nothing about you is sold, and nothing about you is used to train a model that anyone else benefits from.
Photographs of real people
Vesia does not accept a photograph of a real person as the starting point for a persona, and personas are not built to resemble anybody. Every face here begins as a description and is generated. If you believe a persona resembles a real person, tell us and we will investigate it.
Every image says it was made by a machine
Each photograph carries a standard AI-disclosure inside the file itself, in the field platforms read to label a post as AI-generated. It travels with the image wherever you post it, and it cannot be switched off. It records that a machine made the image, that Vesia was the tool, and the date. It does not record you, your account, or which persona it is.
Who else touches it
Generating a photograph means sending a description to a company that can generate photographs. These are the ones we use, and what actually reaches each of them:
| Who | What reaches them | Where |
|---|---|---|
| Supabase | Your account, your personas, every photograph and video, and the text you write when you judge them. | UK (London) — see the note below the table |
| Vercel | Runs the site itself. Sees requests as they happen; stores none of your photographs. | EU and US regions |
| fal.ai | Generates the images and video. Receives the scene description and, for a photograph of an existing persona, that persona's trained model. | US |
| Anthropic | Writes captions and runs the automated quality checks. Receives the photograph being checked and the text of the brief. | US |
| Railway | Runs our face-matching service, which reads a photograph to confirm the person in it is the persona it should be. | EU (Amsterdam) |
When things are deleted
Nothing is kept forever by accident. Every kind of file we store has a rule, and a job runs every night that enforces it:
| What | Kept for | What survives it |
|---|---|---|
| Trained models that a newer training has replaced | 60 days | About 234MB each and re-derivable from the reference photos, which are canon and are never touched. The current model of every persona is exempt for ever, however old it is. The row survives — version, cost, sha256 and training settings stay readable — only the weights file goes. |
| Photos that were rejected | 30 days | Rejection is the trash; 30 days is the window in which somebody could still change their mind. The row survives, because every rate on the findings page is computed from rejected work — only the image and its thumbnails go. The clock starts at the rejection, not at the photo. |
| Free seed candidates from someone who never subscribed | 30 days | The eight faces the free funnel generates. The one they PICKED is exempt for ever — it is the persona's canon and everything else is derived from it — and so is anything belonging to a paid or comped account. The row survives; only the image goes. The clock starts when the candidate was made, because a candidate nobody picked in a month is a candidate nobody is going to pick. |
| Free accounts nobody has come back to | 90 days | The only class that deletes somebody's actual work, so the only one with a hand on its shoulder: nothing is purged until they have been warned and 14 days have passed since. Paid, comped and operator accounts are exempt whatever they do. The account row and the sign-in survive, so a returning owner is told their work has gone rather than finding an account that looks mysteriously empty. |
A free account that has been quiet for 90 days has its work deleted — but never as a surprise. We write to you first and wait at least 14 days. Paid accounts are not deleted for going quiet.
Deleting everything, whenever you want
There is a button. It is on your account page, it shows you exactly what will go before it goes, and it removes your personas, every photograph, every preview and every trained model. It works on a free account from the first day you have one — not only once you are paying.
What survives is anonymous totals that contain nothing identifying, and — once payments exist — the financial records we are legally required to keep. If you would rather ask than click, email us and it is done within 30 days.
Getting a copy
Approved photographs and your persona's written description can be exported at any time. Reference sets and trained models are available too, as a deliberate full-package export rather than a stray click.
Where it is kept
Vesia is a Cyprus company, so your data is handled under EU data protection law. Our database and your photographs sit in London — outside the EU since Brexit, but in a country the EU formally recognises as offering equivalent protection, which is what allows the data to be held there.
Generating a photograph also means sending a description to the companies in the table above, some of which are in the United States. That is what the table is for: it says who, and what actually reaches them.
Asking us something
Access, correction, deletion, or a complaint: privacy@vesia.ai. You can also complain to a regulator. Ours is the Cypriot Commissioner for Personal Data Protection; you may instead go to the authority where you live, and in the UK that is the ICO.