Last updated: August 26, 2026
Vormly is operated by Vormly AI Labs LLC, a Wyoming limited liability company registered at 30 N Gould St Ste R, Sheridan, Wyoming 82801, USA. That company is the one responsible for the personal data described below — the controller, in the language of data protection law — and "we" and "us" on this page mean it. Privacy questions, access requests and deletion requests all reach us at support@vormly.ai, or by post at the address above.
We collect the information you provide when creating an account (name, email) and the content you create with the service (prompts, generated images, video and audio). When you buy something we keep the transaction record — what was bought, the amount, the payment status, and the processor's reference ids — but never card numbers, which stay with the payment processor. We also record technical information that arrives with every request: your IP address, the country it resolves to, and your browser's user-agent string. Sign-ins are logged with the IP and country they came from. We do not collect precise location — the country is derived from the IP by our infrastructure provider and is no more specific than that. We do not collect sensitive personal data beyond what the service needs. Vormly is not directed at children: the service requires you to be 18 or older, and we do not knowingly collect personal information from anyone under 18 — if we learn that we have, we delete it.
Your information is used to provide and improve Vormly, process your generations, manage your account and credits, and send you important updates. IP addresses and sign-in records are used to keep accounts secure and to detect abuse of the free tier. Country is used in aggregate to understand where our users are and to shape regional availability and pricing. We do not sell your personal data to third parties.
Your data is stored on Cloudflare's global infrastructure, encrypted in transit and at rest. Generated files are stored in Cloudflare R2 with access controlled by your account. Sign-in records are kept only as long as the session itself: sessions expire after seven days and expired records are removed. Account information is kept until you delete your account.
Generation requests are processed by third-party AI providers — including Google, OpenAI, ByteDance, Kuaishou, Alibaba, MiniMax, xAI, Black Forest Labs and Suno. Your prompt and any reference files you upload are sent to the provider that runs your request, and may be routed through infrastructure partners we use to reach those providers; a current list of these partners is available on request at support@vormly.ai. Payments are processed by Stripe or by Waffo Pancake, a merchant of record; we never see or store your card details. Transactional email is sent through Resend. Sign-in with Google uses Google's OAuth service. Our support chat is provided by tawk.to: it loads only once you interact with the page, and when you start a conversation the messages you send — together with the account details we attach so we can answer without asking you to recite them (your name, email, plan and credit balance) — are processed by tawk.to on our behalf. Cloudflare provides our hosting, storage and bot protection, and therefore processes your IP address on our behalf.
We use essential cookies for authentication and session management, and local storage for preferences such as your theme, sidebar state and recent work. We do not currently run third-party advertising or analytics cookies; product usage is measured with our own first-party records. If that changes, this policy will be updated before it does.
When we email you, links in that message carry an identifier so we can record that the message was clicked. It tells us which emails are useful and which ones to stop sending. We do not use tracking pixels, so we cannot and do not detect whether you opened an email. Every non-essential email carries an unsubscribe link, and unsubscribing takes effect immediately.
You can access, update or delete your account data at any time from your account settings, and export the files you have generated. Deleting your account removes your profile, your content and the sign-in records attached to it. To request a copy of your data or complete deletion, contact us at support@vormly.ai.
We may update this privacy policy from time to time. We will notify registered users of significant changes via email. Continued use of Vormly after changes constitutes acceptance of the updated policy.
Questions about privacy? Contact us at support@vormly.ai