Vellum is operated by Jackson Dean. For privacy questions or requests, contact support@vellum.gallery.
What we collect and why.
When you request access, we collect your email address, optional name, optional description of your intended use, and your consent so we can review the request and contact you about the beta. When you sign in, we store account and session information to provide access and protect your workspace.
When you use the app, we store the project content you provide or generate, including reference images, briefs, messages, and output files. We also process usage records, errors, and operational information needed to run the service, enforce allowances, investigate failures, and prevent abuse.
AI and infrastructure providers.
To fulfill a generation or Agent request, Vellum sends the inputs needed for that task to its configured AI providers, including fal.ai for image generation and Anthropic for Agent features when enabled. Hosting, storage, and email providers process information needed to deliver the service. Do not upload material you do not have permission to send to these services.
Your project content is not placed on this public marketing website. We do not sell personal information. We do not promise that every third-party provider has the same retention or training policy; review their terms where this matters to your project.
Payments.
When paid billing is enabled, Stripe processes payment details through its hosted checkout and customer portal. Vellum stores customer and subscription references, payment event records, and credit balances needed to manage your plan. Vellum does not receive your full card number.
Cookies and measurement.
Vellum uses an essential session cookie to keep you signed in. Operational records and limited first-party event counts help us understand access requests, activation, billing, and service reliability. Public website events record only an allowed event name and page path, without visitor IDs, email addresses, private prompts, or images. These event records are retained for 30 days. The website respects Do Not Track and Global Privacy Control signals. We do not put advertising trackers on the beta website.
Retention and deletion.
Account and project information, including saved conversation messages, remains until you delete it or your account. Temporary generation-status events are pruned after a run has been finished for seven days; this does not delete its saved messages. Expired sign-in tokens and sessions are periodically removed. You can request account deletion in Account. Deletion removes active account and project records subject to any billing or active-run requirements shown there. Backups and records needed for security, legal, or payment obligations may persist for a limited operational period; contact us for a specific retention request.
Your choices.
You can update your name, sign out, export your work, manage a subscription, or request deletion from your account. You can also contact support@vellum.gallery to withdraw an access request, stop optional beta emails, request access to information we hold, or discuss a correction or deletion.
Changes and contact.
This notice may change as the beta develops. Material changes will be communicated through the service or by email when appropriate. Contact support@vellum.gallery with questions before uploading sensitive material.