Privacy Policy

Last updated: August 2026

1. Information About the Data Controller

Sapon Group s. r. o., with its registered office at Nedanovce 4, 958 43 Nedanovce, Slovakia (Company ID: 57074551, VAT ID: SK2122560616, Tax ID: 2122560616) operates the service and acts as the Data Controller responsible for processing your personal data under the EU General Data Protection Regulation (GDPR).

Contact for privacy inquiries: support@vividoo.app

2. Personal Data We Collect

We collect and process the following categories of personal information:

Account Data: Email address, user profile information, and authentication identifiers.
Billing & Transaction Data: Name, billing address, tax ID/VAT details, and payment history. Payment card details are handled directly and securely by our payment processor, Stripe, and are never stored on our servers.
User Content & Input Data: Text prompts, uploaded images, and design parameters provided to generate AI outputs.
Technical & Usage Analytics: IP address, browser type, device details, operating system, and system log data collected automatically during your interaction with the web application.

3. Legal Basis and Purpose of Processing

Your data is processed under the following legal bases pursuant to Art. 6 GDPR:

Performance of Contract (Art. 6(1)(b)): Providing access to the app, generating AI outputs, managing accounts, and processing subscription transactions.
Legitimate Interests (Art. 6(1)(f)): Ensuring infrastructure security, detecting fraudulent activity, optimizing system performance, and providing customer support.
Legal Obligation (Art. 6(1)(c)): Retaining billing records for corporate tax and financial accounting compliance.
Consent (Art. 6(1)(a)): Sending direct marketing communications or deploying non-essential cookies where required.

4. Third-Party Service Providers and Sub-Processors

We share data with specialized third-party sub-processors strictly necessary to operate our service:

Payment Processing: Stripe, Inc. (handles checkout, recurring billing, and invoice generation).
Database & Hosting Infrastructure: Supabase, Inc. and Cloudflare, Inc. (database storage, authentication, edge functions, and secure content distribution).
AI Infrastructure Providers: Cloud-based GPU models that process text prompts and uploaded media solely to render your requested generation outputs. Uploaded input files are not used to train public base models without express consent.

5. Data Retention and International Transfers

Account and usage records are retained for as long as your account remains active.
Accounting and tax documentation is stored for up to 10 years to fulfill legal obligations.
Temporary files generated during active sessions are automatically cleaned up from operational caches.
Transfers of data outside the European Economic Area (EEA) are conducted under approved safeguards, such as Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework.

Subject to applicable law, you hold the following data protection rights:

Right of Access: Request a copy of your personal data.
Right to Rectification: Correct inaccurate or incomplete records.
Right to Erasure: Request deletion of your personal account and stored files.
Right to Object / Restrict: Object to or limit specific processing activities.
Right to Data Portability: Receive your personal data in a structured, machine-readable format.
Right to Lodge a Complaint: Contact your national data protection authority (in Slovakia: Úrad na ochranu osobných údajov SR).

7. Contact Us

To exercise any of your privacy rights or request information regarding your personal data, submit a request to support@vividoo.app.