1. Introduction
VIKTORIA MUSE ("we," "us," or "our") operates the VIKTORIA MUSE AI marketing content platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By accessing or using the Service you agree to this Privacy Policy. If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Information You Provide
- Account data — name, email address, and profile picture provided during registration via Clerk.
- Brand data — brand names, website URLs, social media handles, brand guidelines, and tone-of-voice settings you submit.
- Generated content — marketing copy, social posts, email drafts, ad copy, and other content created through the Service.
- Payment data — billing information processed by Lemon Squeezy; we do not store full credit card numbers on our servers.
- Communications — messages you send to our support team.
2.2 Information Collected Automatically
- Usage data — pages visited, features used, generation counts, timestamps, and session duration.
- Device data — browser type, operating system, screen resolution, and language preferences.
- Log data — IP address, access times, referring URLs, and error logs.
3. How We Use Your Information
- To provide, maintain, and improve the Service.
- To generate AI-powered marketing content tailored to your brand.
- To process payments and manage your subscription.
- To send transactional emails (e.g., receipts, security alerts).
- To respond to support requests and communicate with you about the Service.
- To detect, prevent, and address fraud, abuse, or technical issues.
- To comply with legal obligations and enforce our Terms of Service.
4. AI Processing & Third-Party AI Providers
To generate content, we send prompts and brand context to third-party AI providers, including:
- Anthropic (Claude models)
- OpenAI (GPT models)
- Google (Gemini models)
These providers process data solely to return generated content and do not use your data to train their models when accessed via their API services. We select providers that offer data-processing agreements and enterprise-grade privacy controls. Please review each provider's privacy policy for details on their data handling practices.
5. Data Storage & Security
Your data is stored using the following infrastructure:
- PostgreSQL — primary database for account, brand, and content data.
- Redis — caching layer for session data and rate-limit counters.
- Cloudflare R2 — object storage for uploaded assets and media files.
We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. No method of transmission over the internet is 100 % secure; we cannot guarantee absolute security.
6. Third-Party Services
We use the following third-party services to operate the platform:
- Clerk — authentication, user management, and single sign-on.
- Lemon Squeezy — payment processing, subscription management, and invoicing.
Each third-party service operates under its own privacy policy. We encourage you to review their policies to understand how they handle your data.
7. Cookies & Tracking Technologies
We use cookies and similar technologies for the following purposes:
- Essential cookies — required for authentication, security, and core functionality.
- Functional cookies — remember your preferences and settings.
- Analytics cookies — help us understand how the Service is used so we can improve it.
You can control cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service.
8. Data Retention
- Account data — retained for as long as your account is active, plus 30 days after deletion to allow recovery.
- Generated content — retained until you delete it or close your account.
- Usage & log data — retained for up to 90 days for operational and security purposes.
- Payment records — retained as required by applicable tax and accounting laws (typically 7 years).
9. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Deletion — request deletion of your personal data, subject to legal retention requirements.
- Export — request a machine-readable export of your data (data portability).
- Restriction — request that we restrict processing of your data in certain circumstances.
- Objection — object to processing based on legitimate interests.
To exercise any of these rights, contact us at support@viktoriamuse.com. We will respond within 30 days.
10. GDPR Compliance
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional provisions apply:
- Legal basis — we process your data based on contractual necessity (to provide the Service), your consent (where applicable), and our legitimate interests (to improve and secure the Service).
- International transfers — your data may be transferred to and processed in countries outside the EEA. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses.
- Data Protection Officer — you may contact our DPO at support@viktoriamuse.com.
- Supervisory authority — you have the right to lodge a complaint with your local data protection authority.
11. Children's Privacy
The Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will delete that information promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Effective date" above. Your continued use of the Service after changes constitutes acceptance of the revised policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us: