Privacy Policy

Vidova operates Vidova and is the controller of the personal data described in this policy. For questions or to exercise your rights, contact privacy@vidova.ai.

When a business customer invites team members to a workspace, that business may control the workspace content, and we process it on its instructions.

• Account data — name, email address, password (stored only as a salted hash) or sign-in details from Google if you use it, profile image, language and preferences.
• Your Content — prompts, uploaded images, audio, video and reference files, the outputs generated for you, projects and editor timelines.
• Billing data — plan, credit balance and transaction history. Card details are collected and stored by our payment processor; we never see or store your full card number.
• Usage and device data — pages and features used, generation settings, timestamps, IP address, browser and device type, approximate location derived from IP, and diagnostic logs.
• Communications — messages you send to support and your email preferences.

• To provide the service: authenticate you, run your generations, store your library, and meter and bill credits.
• To keep the platform safe: detect abuse, fraud and prohibited content, enforce rate limits and our Terms.
• To support you and send service messages such as receipts, security alerts and important changes.
• To understand and improve performance, reliability and features using aggregated or de-identified analytics.
• With your consent, to send product news and offers — you can unsubscribe at any time.
• To comply with legal obligations and respond to lawful requests.

We do not sell your personal data, and we do not use your prompts, uploads or outputs to train Vidova's own foundation models.

To fulfil a generation, we send the minimum necessary Inputs (your prompt, settings and any reference media) to the AI provider that runs the model you selected, and receive the output back. These providers act as our sub-processors or service providers and are contractually bound to process data only to provide the service.

Categories of sub-processors we use include:

• AI inference platforms and model providers — for example fal.ai and the developers of models offered in the studio (such as Google, OpenAI, Kuaishou, ByteDance, Black Forest Labs, ElevenLabs and others listed in the model picker).
• Large-language-model providers — for prompt enhancement, scripting and Autopilot features (for example Anthropic).
• Cloud hosting, databases and object storage — to run the application and store your files.
• Payments — Stripe and regional payment partners for billing.
• Email delivery, error monitoring and customer support tools.

Some model providers may temporarily retain inputs and outputs for abuse monitoring under their own policies. We select providers that do not use API data to train their models by default wherever such an option exists. A current list of sub-processors is available on request.

• Contract — to provide the service you signed up for.
• Legitimate interests — to secure the platform, prevent abuse and improve the product, balanced against your rights.
• Consent — for optional marketing and non-essential cookies; you may withdraw it at any time.
• Legal obligation — for tax, accounting and lawful requests.

We share personal data only with: sub-processors described above; professional advisers; authorities when required by law or to protect rights and safety; and a successor entity in a merger, acquisition or asset sale, subject to this policy.

Content you choose to publish or share via a link is visible to whoever you share it with.

We and our providers may process data in the United States and other countries. Where required, we rely on safeguards such as the European Commission's Standard Contractual Clauses and equivalent UK mechanisms.

We keep account data for as long as your account is active. You can delete individual generations and projects at any time. When you delete your account, we delete or anonymize your personal data and content within 30 days, and it is purged from backups within a further 30 days, unless we must keep certain records (for example invoices) to meet legal obligations.

Security and diagnostic logs are kept for a limited period, typically up to 90 days.

We use encryption in transit (TLS), hashed passwords, access controls with least privilege, rate limiting, and monitoring to protect your data. No system is perfectly secure; if we become aware of a breach affecting your personal data we will notify you and regulators as required by law.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, to withdraw consent, and to not be discriminated against for exercising these rights. California residents may request disclosure of the categories of data collected and opt out of any sale or sharing — we do not sell or share personal data for cross-context behavioral advertising.

To exercise your rights, email privacy@vidova.ai from your account email. We will verify your request and respond within 30 days. You can also lodge a complaint with your local data-protection authority.

We use strictly necessary cookies to keep you signed in, remember your language and protect against abuse. With your consent, we may use analytics cookies to understand product usage. You can control cookies in your browser settings; blocking essential cookies will prevent sign-in.

Vidova is not directed to children and is not intended for anyone under 18. We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will delete it.

We will post any updates here and change the date above. For material changes we will notify you by email or in the product before they take effect.