Privacy Policy

Overview

Vidpixo operates vidpixo.com, an online AI video and image platform built for TikTok and social-commerce sellers. It turns text prompts, product photos and reference images into shoppable videos, product images and related creative assets.

This Privacy Policy explains what personal data we collect, why we collect it, how we share it, and the choices and rights you have. It covers our website, our web application, and the generation, editing and storage features we provide (together, the "Service").

Data controller: vidpixo.com. For any privacy question, contact support@vidpixo.com.

Information We Collect

1. Account and profile information

• What we collect: email address, password (stored only as a salted hash), display name, avatar, language and interface preferences, and any other details you add to your profile.
• Why: to create and secure your account, authenticate you, and provide customer support.
• Third-party sign-in: where you sign in with a third-party provider (such as Google or GitHub, if enabled), we receive a basic profile and an account identifier from that provider. We never receive your password for that provider.

2. Content you upload and content you generate

• What we collect: product photos, reference images, video clips, prompts, scripts, product notes and other inputs you submit; and the images, videos and other outputs the Service generates for you.
• Why: to run the generation, editing and upscaling features you request, to show your task history, and to let you download and manage your results.

3. Usage and task data

• What we collect: which features and models you use, the prompts and parameters submitted, task status and timestamps, error and diagnostic logs, and credit consumption records.
• Why: to operate and debug the Service, prevent abuse, keep accurate billing records, and understand how features are used.

4. Device and technical data

• What we collect: IP address, browser type and version, operating system and device type, language, referring pages, and approximate location derived from IP.
• Why: to deliver and secure the Service, keep it working across devices, and detect fraud and abuse.

5. Payment and billing data

• What we collect: order and transaction identifiers, the plan or credit pack purchased, amount, currency, billing country, invoice records and subscription status.
• Why: to process payments, prevent fraud, issue invoices, and comply with tax and accounting obligations.
• Card data: full card numbers and payment credentials are entered on our payment provider's hosted checkout page and are not stored on our servers.

How We Use Information

We use the information described above to:

• provide, operate and maintain the Service;
• authenticate you and keep your account secure;
• process payments, credits and subscriptions;
• run the generation, editing, storage and delivery features you request;
• respond to your support requests;
• detect, investigate and prevent fraud, abuse and violations of our Terms of Service;
• monitor performance, fix bugs and improve features;
• comply with legal, tax and accounting obligations; and
• send service messages such as security alerts, billing notices and material policy changes.

Third-Party Service Providers

We share personal data with service providers that process it on our behalf, or as independent parties, only as needed to run the Service. These categories may include:

• AI model and inference providers — the prompts, reference media and generation parameters you submit are transmitted to third-party AI providers, and to the upstream model providers they route requests to, so that the content you asked for can be generated. These providers process that data under their own terms and privacy policies.
• Cloud storage and content delivery — uploaded and generated media is stored on object-storage and CDN infrastructure (for example Cloudflare R2 or Amazon S3) so that it can be served back to you.
• Payment processors and merchant-of-record partners — to take payments, manage subscriptions and issue invoices. Where a partner acts as merchant of record, it may be the party you contract with for the purchase and may handle billing data under its own privacy policy.
• Authentication and identity providers — where you choose a third-party sign-in method.
• Email delivery providers — to send transactional messages such as verification, password reset and billing notices.
• Analytics and performance services — where enabled, to understand aggregate traffic and page performance.
• Customer support tooling — where enabled, to handle support conversations and retain support history.

We may also disclose information where required by law, to respond to lawful requests, to protect our rights and the safety of our users or others, or as part of a merger, acquisition or sale of assets (in which case we will notify you as required by law).

We do not sell your personal information.

Cookies and Similar Technologies

We use cookies and similar technologies for session management, language and preference storage, security, and — where enabled — analytics and support tooling. For the categories we use, why we use them, and how to control them, see our Cookie Policy.

Data Retention

We keep personal data only as long as needed for the purposes described above:

• Account and profile data — for as long as your account is active, then removed from active systems within 30 days of deletion.
• Uploaded and generated media — retained so you can access your history and results, and removed when you delete it or delete your account, unless a longer period is required by law.
• Task, usage and diagnostic records — retained for a limited period for debugging, abuse prevention and service integrity.
• Billing and transaction records — retained as required for tax, accounting and dispute-resolution purposes, which may be longer than the retention period for other data.

Where data has been aggregated or anonymised so that it can no longer identify you, we may retain it for longer.

Data Security

We take the security of your information seriously. Our measures include encryption in transit, hashed password storage, access controls, scoped credentials for storage and infrastructure, and monitoring for abuse. However, no method of transmission over the internet and no method of electronic storage is completely secure, and we cannot guarantee absolute security.

International Data Transfers

We and our service providers may process and store data in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards, such as standard contractual clauses, and we require our providers to protect the data to a comparable standard.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights:

• Access — request a copy of the personal data we hold about you, including account, order and credit records.
• Rectification — correct inaccurate personal data from your profile settings, or by contacting us.
• Erasure — request deletion of your personal data, or deactivate and permanently delete your account.
• Portability — request an export of your personal data in a commonly used, machine-readable format.
• Restriction and objection — ask us to restrict or object to certain processing.
• Withdraw consent — withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
• Non-discrimination — we will not discriminate against you for exercising these rights.

How to exercise your rights: email support@vidpixo.com from the address registered to your account. We will verify your identity and respond within 30 calendar days. For complex requests we may extend this by a further 30 days, and we will tell you the reason for the extension.

Account deletion: you can delete your account from your account settings. Account information and personal data are permanently removed from active systems within 30 days, except where retention is required by law (for example, transaction records kept for tax and accounting purposes). Media already delivered to you, and content you have downloaded, cannot be retrieved after deletion.

Children's Privacy

The Service is intended for business and professional use and is not directed to children. You must be at least 18 years old, or the age of majority in your jurisdiction, to create an account and purchase credits. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology or legal obligations. When we make material changes, we will update the revision date on this page and, where appropriate, notify you by email or in-product notice. Continued use of the Service after an update means you accept the updated policy.

Contact Us

For any question or request about this Privacy Policy or our data practices:

Vidpixo — vidpixo.com

Email — support@vidpixo.com