Last updated: November 4, 2026
Vault Corp ("we") is the controller of the personal data described here. This policy covers socialfansgeek.com, AI Studio, our API and MCP server, our emails and support chats. Questions or requests: support@socialfansgeek.com (subject "Privacy request").
1. What we collect
| Data | Examples | Source |
|---|
| Account and contact | name, email, password (hashed), country | you |
| Orders | links and usernames you want promoted, order history, balance | you |
| Payments | billing name and address, last 4 digits, transaction IDs, crypto wallet ID | you and our payment processors; we never store full card numbers |
| AI Studio content | photos, videos, prompts, voice you upload, and the results we generate | you |
| Support | emails, chat and WhatsApp messages | you |
| Device and usage | IP address, browser, pages visited, approximate location from IP | automatically, through cookies and logs |
| Advertising | cookie and device IDs, clicks on our ads | Google and other ad platforms |
We do not use face recognition to identify anyone, and we do not create biometric templates from your photos. AI models process images only to produce the result you asked for.
2. Why we use it, and our legal basis (EU/UK)
| Purpose | Legal basis |
|---|
| Create your account, deliver orders, run AI tools, give support | contract |
| Prevent fraud, abuse and misuse of AI tools; secure the site | legitimate interests |
| Keep tax and payment records | legal obligation |
| Product and service emails to customers | legitimate interests (you can unsubscribe any time) |
| Analytics and advertising cookies, remarketing | consent where required |
3. Who we share it with
We do not sell personal data for money. We share data only with providers that help us run the Services, under contracts that limit their use:
- Payment processors: NMI (cards) and Cryptomus (crypto).
- AI model providers: OpenRouter and the model companies it routes to (such as Google and Black Forest Labs), only the prompt and files needed for your request.
- Promotion suppliers: only the public link or username for your order, never your name or email.
- Hosting and databases: Replit and its cloud providers.
- Email: Resend (transactional and marketing email) and Google Workspace (support).
- Analytics and ads: Google (Analytics, Ads, Search Console).
- Authorities, when the law requires, and a buyer of our business if it is ever sold.
Under California and other US state laws, using Google Ads remarketing cookies can count as "sharing" for cross-context behavioural advertising. You can opt out by emailing support@socialfansgeek.com with the subject "Do Not Sell or Share". A footer opt-out link and support for Global Privacy Control signals are being added.
4. How long we keep it
| Data | Kept for |
|---|
| AI Studio uploads (photos, videos, voice) | 30 days, then deleted (automatic clean-up rolling out November 2026; ask us to delete sooner any time) |
| AI Studio results | 90 days, or until you delete them or your account |
| Account and order data | while your account is open, then up to 3 years |
| Payment and tax records | as long as tax law requires (usually 7 years) |
| Server logs | up to 12 months |
5. Your rights
Wherever you live, you can ask to see, correct, download or delete your data, and to stop marketing emails. EU and UK residents may also object to or restrict processing, withdraw consent, and complain to their data protection authority. California and other US state residents may also opt out of sale or sharing, limit use of sensitive data, and will not be treated differently for using these rights. Email support@socialfansgeek.com (subject "Privacy request") from your account email; we answer within 30 days (45 days where US state law allows). An authorised agent may act for you with written proof.
6. International transfers
We are based in the United States and our providers may process data in the US and other countries. For EU and UK data we rely on the EU-US Data Privacy Framework where a provider is certified, or on Standard Contractual Clauses.
7. Security
We use HTTPS, hashed passwords, access controls and payment processors that meet PCI DSS. No system is perfectly secure; we will tell you and the authorities about a breach where the law requires.
8. Children
The Services are for adults (18+). We do not knowingly collect data from children. Contact us and we will delete it.
9. Cookies
| Type | Used for | Default |
|---|
| Essential | login, cart, checkout, security | always on |
| Analytics | understanding how the site is used | on; opt out in your browser settings |
| Advertising | Google Ads conversion tracking and remarketing | on; opt out in your browser or Google Ad Settings |
You can block or delete cookies in your browser and turn off ad personalisation in Google's Ad Settings. A cookie consent banner using Google Consent Mode is being added, so EU and UK visitors can accept or reject analytics and ad cookies before they load.
10. Changes
We will post changes here with a new date and email you about important ones.
11. Contact
Vault Corp, 252 E 63rd St, New York, NY 10065, USA. Email support@socialfansgeek.com.
.png)
.png)
