Last updated 6 November 2026
Privacy
Grace AI Labs Limited (RC 9316938) makes Van-Goh and decides how your data is used. We are registered with the Nigeria Data Protection Commission (NDPC) as a data controller and processor of major importance, registration NDPC/DCP/14948. We follow the Nigeria Data Protection Act 2023. Our data protection officer is Divine Matthew: divine@graceagent.co.
We collect only what Van-Goh needs to work. We don't sell your data, show you ads or use advertising trackers.
What we collect, and why
Your email address
Why
To sign you in, send sign-in codes and "your video is ready" emails, and answer you
Our reason under the law
To provide the service you asked for
Your briefs, photos, screenshots, logos, clips and brand colours
Why
To make your videos
Our reason under the law
To provide the service
Your videos and their versions
Why
To keep them in your studio for you
Our reason under the law
To provide the service
Your purchases: plan, amount, currency, the payment provider's reference (never card details)
Why
To add your credits, and for tax and accounting records
Our reason under the law
To provide the service; the law (records)
Which browser asked to sign in, such as "Chrome on Windows"
Why
To show it in the sign-in email, so you can spot a sign-in that wasn't you
Our reason under the law
Keeping your account safe
Technical logs: pages requested, how long they took, errors
Why
To keep the site fast and working
Our reason under the law
Running a reliable service
For free videos: a scrambled network address and a mark in your browser
Why
To give free videos once per person
Our reason under the law
Preventing abuse
| What | Why | Our reason under the law |
|---|---|---|
| Your email address | To sign you in, send sign-in codes and "your video is ready" emails, and answer you | To provide the service you asked for |
| Your briefs, photos, screenshots, logos, clips and brand colours | To make your videos | To provide the service |
| Your videos and their versions | To keep them in your studio for you | To provide the service |
| Your purchases: plan, amount, currency, the payment provider's reference (never card details) | To add your credits, and for tax and accounting records | To provide the service; the law (records) |
| Which browser asked to sign in, such as "Chrome on Windows" | To show it in the sign-in email, so you can spot a sign-in that wasn't you | Keeping your account safe |
| Technical logs: pages requested, how long they took, errors | To keep the site fast and working | Running a reliable service |
| For free videos: a scrambled network address and a mark in your browser | To give free videos once per person | Preventing abuse |
Who helps us, and where your data is
A few companies run parts of Van-Goh for us. They get only what their part needs, and work under contracts that protect it.
Microsoft Azure
What it does for Van-Goh
Runs the website and stores your files, videos and account
Where
European Union: the Netherlands (files) and Ireland (database)
Microsoft Azure (Communication Services)
What it does for Van-Goh
Sends our emails
Where
European Union
Microsoft Azure (Front Door)
What it does for Van-Goh
Serves the public pages from a location near you, such as Lagos
Where
Microsoft's locations worldwide; public pages only, never your studio
Anthropic (Claude)
What it does for Van-Goh
Reads your brief and pictures to plan and direct your video
Where
United States
Microsoft Azure AI
What it does for Van-Goh
Makes pictures for some videos
Where
United States
ElevenLabs
What it does for Van-Goh
Makes the voice and music for some videos
Where
United States
BACHS
What it does for Van-Goh
Takes payments. Your card or bank details go to BACHS directly, never to us
Where
See BACHS's own privacy policy
| Company | What it does for Van-Goh | Where |
|---|---|---|
| Microsoft Azure | Runs the website and stores your files, videos and account | European Union: the Netherlands (files) and Ireland (database) |
| Microsoft Azure (Communication Services) | Sends our emails | European Union |
| Microsoft Azure (Front Door) | Serves the public pages from a location near you, such as Lagos | Microsoft's locations worldwide; public pages only, never your studio |
| Anthropic (Claude) | Reads your brief and pictures to plan and direct your video | United States |
| Microsoft Azure AI | Makes pictures for some videos | United States |
| ElevenLabs | Makes the voice and music for some videos | United States |
| BACHS | Takes payments. Your card or bank details go to BACHS directly, never to us | See BACHS's own privacy policy |
So your data is stored outside Nigeria, in the European Union, and parts of it are processed in the United States while a video is made. The Nigeria Data Protection Act allows this with safeguards, which these companies' business terms provide.
How long we keep things
Your account, uploads and videos
How long
While your account is open; deleted within 30 days of closing it
Sign-in links and codes
How long
They work once, for 20 minutes
Staying signed in
How long
30 days on that browser, or until you sign out
Purchase records
How long
As long as tax and accounting law requires, even after an account is closed
Technical logs
How long
30 days
Free-video checks (the scrambled network address)
How long
30 days
| What | How long |
|---|---|
| Your account, uploads and videos | While your account is open; deleted within 30 days of closing it |
| Sign-in links and codes | They work once, for 20 minutes |
| Staying signed in | 30 days on that browser, or until you sign out |
| Purchase records | As long as tax and accounting law requires, even after an account is closed |
| Technical logs | 30 days |
| Free-video checks (the scrambled network address) | 30 days |
Your browser
Van-Goh keeps only what it needs in your browser:
- a sign-in cookie, so you stay signed in
- your choice of naira or dollars
- for 2 minutes after the site updates, what you had typed, so it can be put back when the page reloads
- for free videos, a mark that free videos were used on this browser
No advertising cookies and no outside tracking or analytics companies. Because everything here is needed for the site to work, we don't show a cookie banner.
Your rights
Under the Nigeria Data Protection Act you can ask us to:
- show you the data we hold about you, and give you a copy you can take elsewhere
- correct anything that's wrong
- delete your data (we keep only what the law makes us keep, such as purchase records)
- stop or limit some uses of it, or withdraw your consent where we relied on it
Write to divine@graceagent.co from your account's email address. We answer within 30 days. If you're not happy with our answer, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.
Keeping it safe
Everything travels encrypted, and your files and database are encrypted where they're stored. Only the parts of Van-Goh that need your data can reach it. There are no passwords to steal: you sign in through your email. If your data is ever exposed, we'll tell the NDPC within 72 hours and tell you quickly if you're at risk.
Children
Van-Goh is for people 18 and older. If we learn that a child has made an account, we'll delete it.
Changes
If we change how we use your data in a way that matters to you, we'll email you before it takes effect.
Contact
Grace AI Labs Limited, Garnet Plaza, Lekki, Lagos State. divine@graceagent.co.
See also: Terms