Privacy Policy

Last updated: October 2026

1. Who we are

VeyraGen ("we", "us") operates the AI product-photo platform available at https://veyragen.com. We are the data controller for the personal data described in this policy.

Xquissive AI B.V. Β· Joubertstraat 15, 3143 CL Maassluis, the Netherlands Β· Chamber of Commerce 68640463 Β· VAT NL002015071B39

For photos of people that you upload yourself, you are the controller and we process them on your behalf (article 9 of the terms).

2. What data we collect

  • Account information: your email address and name
  • Payment and billing information, processed by Stripe; we never store card details
  • What you upload and make: product photos, photos of people if you upload them, prompts, your conversations with the Agent and the images you generate
  • Data from your Shopify store, if you connect it: your products and product photos
  • Messages you send us, for example through the contact form
  • Technical data: IP address, browser type and device data via cookies

3. How we use your data

  • To provide and improve the platform
  • To analyse your photos and prompts, and to make and check your images
  • To process payments and manage subscriptions
  • To send transactional emails (payment receipts, account alerts)
  • To prevent fraud and ensure security
  • With your consent, to measure how the site is used, so we can improve it

We process this data to perform our agreement with you, to meet legal obligations such as the tax retention duty, and for our legitimate interest in a service that is secure and works. For analytics cookies we ask your consent, which you can withdraw at any time.

4. Data retention

We keep your account, your uploads and the images you make for as long as your account exists. When you delete your account, we erase that data within 30 days of the deletion. Invoices and billing records are kept for seven years, as Dutch tax law requires. You can always ask us to delete your data.

5. Services we use

These services process data for us, each for the task listed with it:

  • Supabase – database, accounts and sign-in, in Ireland (EU)
  • Vercel – hosting of the site and the studio, with servers in Dublin (EU)
  • Stripe – payments, subscriptions and invoices
  • Bunny.net – storage and delivery of your uploads and images
  • Kie.ai – image models that make your images; receives your uploads and the brief for a shoot
  • WaveSpeed – image models for premium images and as a fallback for Kie.ai; receives your uploads and the brief for a shoot
  • OpenAI – analysis of your photos and prompts, checking the images made and the conversations with the Agent
  • Shopify – only if you connect your store: we read your products and add the images you publish to your store
  • EmailOctopus – only if you want news and tips: the newsletter, with your email address, first name, plan and language
  • Google Analytics – only if you accept analytics cookies: measuring how the site is used, with a random visitor ID, the pages you view, your device and browser, and whether you sign up, buy a plan or credits, make images or connect Shopify
  • Our email provider (SMTP) – sending emails about your account and your payments

Some of these services also process data outside the European Economic Area, for example in the United States. Such transfers are covered by appropriate safeguards, such as the standard contractual clauses (SCCs) of the European Commission.

6. Your rights (GDPR)

If you are in the EEA, you have the right to access, rectify, erase, and port your personal data, and to object to or restrict its processing. To exercise these rights, contact us using the details below. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your country.

7. Cookies

We use essential cookies for authentication and session management. These need no consent.

Only if you accept them, Google Analytics sets analytics cookies (_ga and _ga_…, valid for two years). They show us how visitors use the site. We do not share this data for advertising: Google's advertising signals are off. If you decline, we do not load Google Analytics. You can change your choice at any time; if you withdraw your consent, we remove the Google Analytics cookies from your browser.

8. Contact

Questions? Use our contact form.