Privacy

Version dated 5 November 2026. The service is in an invitation-only closed test.

Loading payment status. Availability and price are checked before checkout.

Account and sign-in

When you sign in through Telegram, we use your verified Telegram ID. For email sign-in, we store your email address and verification status. Your account stores your balance, purchases, invitation or gift access, referral source and technical events. To protect sign-in, we process IP addresses and enforce request limits; the rate-limit table uses hashed IP and email identifiers.

Sign-in codes are valid for 10 minutes; the database stores their HMAC verification value. Messages are sent through Gmail from the service’s configured sender: Google receives the recipient’s address and email content. We never request your email password. Verifying email in your profile links sign-in methods to one account; separate existing accounts are not merged automatically.

Photos, projects and cloud album

Finished projects are saved automatically on your device and synced to private Cloudflare R2 storage. A project snapshot includes the original photo, result, selected settings, written preferences and references. Cloudflare D1 stores project ownership, technical records, accounts, balances and purchases. Access to cloud projects is checked against your account.

If a connection fails, a project may remain only on your device until the next successful sync. Cloud copies are available when you sign in to the same account through Telegram or verified email. Earlier local albums can be imported using a separate button. Editor drafts, favourite products and some settings remain in your browser; clearing browser data may delete them and any projects that have not synced.

Generation and search

At your request, photos, references, written preferences and design settings are sent to OpenRouter and the selected model provider. Search also uses item descriptions, your selected region and budget; queries may be sent to Serper or web search through OpenRouter. Providers may process data outside your country. AI providers have different retention periods; we do not promise that every provider stores no data. Only upload materials you have the right to submit for processing.

Product images load from external websites, which may receive your IP address and browser technical details. Store terms apply when you visit a store. Vpisano shows similar products and does not guarantee exact matches, availability or unchanged prices.

Analytics

After sign-in, usage events are collected automatically: screen visits and interactions with design, search, invitations and payments. Events are stored in D1 and sent to PostHog in the US region using a pseudonymous account identifier. Payment events also include order ID, plan, amount and status. This version has no separate analytics toggle.

PostHog events do not include email addresses, original Telegram IDs, names, photos, written preferences, sign-in codes or card details. Screen and session recording are not enabled. A pseudonymous identifier links events from the same user and does not mean complete anonymity.

Cookies and local data

Sign-in uses the vpisano_session cookie with HttpOnly and Secure on HTTPS, lasting up to 30 days. Signing out revokes the current session but does not delete projects or the account. IndexedDB and localStorage hold local copies and settings. Installing the PWA does not require Telegram; cloud features require internet access.

Deletion and retention

Deleting a project removes its cloud file and local album record; other devices require a successful sync. A deletion marker remains in the database to prevent an older device from uploading it again. Separately downloaded copies and editor drafts may remain on your device. Deletion from Vpisano does not automatically delete data already processed by an external provider.

Cloud projects remain until deleted. No unified automatic retention period has yet been set for accounts, technical events or purchase records. Expired codes cannot grant access, but technical records are not always deleted immediately upon expiry. Contact support to request a copy of your data, account deletion or retention information. Self-service deletion of the entire account is not yet available.

Payments

When payments are available, Robokassa processes payment details. Vpisano stores order information, payment confirmation and auto-renewal consent, but does not receive your bank card number.