Legal · draft
Privacy policy
Last updated: 22 October 2026
Draft, not legal advice
This text is a working draft prepared for the product build. It has not been reviewed by counsel and is not a substitute for jurisdiction-specific advice. No billing or public generation launches before review.VividProp processes account data, organisation data, property photos and generated media to provide the service. This draft describes the intended practices of the hosted product.
1. Data we process
- Account data: name, email, hashed password or social-login identifier, session records.
- Organisation data: workspace name, members, roles, invitations, billing country and locale.
- Property content: property details, photographs, scene plans, scripts, generated media and exports.
- Usage and billing: credit ledger, job records, provider request identifiers, invoice references.
- Technical data: IP-derived rate-limit keys, user agent, audit records for sensitive actions.
2. Why we process it
To authenticate users, isolate organisations, generate and store the media you request, measure credit consumption, prevent abuse, provide support and meet legal obligations.
3. Processors
The hosted service is expected to use: a cloud/VPS host, an object-storage provider, a transactional email provider, Stripe for billing, and video/voice providers selected per generation mode. The final list, locations and transfer mechanisms will be published before billing opens.
4. Retention and deletion
Media is retained while the project exists in the workspace. Deleted projects are removed from active storage within a defined window and from backups on a documented rotation. Invoice and fraud-prevention records may be retained longer where required by law. Account deletion is available subject to those obligations.
5. Security
Organisation isolation is enforced server-side, sessions use HttpOnly cookies, panel access requires a separate account and two-factor authentication, and access to sensitive media is logged. No system is perfectly secure; we describe controls rather than promising impossibility.
6. Your rights
Depending on your jurisdiction you may request access, correction, export or deletion of personal data, and object to certain processing. Contact [email protected]. A Data Processing Agreement will be available for business customers before launch.
7. Contact
[email protected] — the controller entity, registered address and representative details are to be completed before publication.