Privacy Policy

1. Introduction

VidBolt.ai ("VidBolt," "we," "our," or "us") is the data controller responsible for the personal information collected through our AI-powered video creation platform (the "Service"). This Privacy Policy explains what data we collect, why we collect it, how we use and share it, and what rights you have over your information.

By using VidBolt, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices, please do not use the Service.

2. Information We Collect

Account Information

When you sign in via Google OAuth, we receive and store the following from your Google account:

• Full name
• Email address
• Profile picture URL
• Google account identifier

Content You Create

We store the content you produce and upload while using VidBolt, including:

• Project titles, scripts, and scene configurations
• AI-generated images, audio narration files, and rendered videos
• Uploaded images used as scene visuals
• Style preferences, voice selections, and project settings

Technical & Usage Data

We automatically collect certain technical information when you interact with the Service:

• Browser type, operating system, and device information
• IP address and approximate geographic location
• Pages visited, features used, and interaction timestamps
• AI generation usage metrics (model calls, token consumption, generation counts)
• Error logs and performance diagnostics

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction that requires a legal basis for processing personal data, we rely on the following grounds:

• Contract Performance: Processing your account data and content is necessary to provide the Service you have requested.
• Legitimate Interests: We process usage analytics and technical data to maintain, secure, and improve the platform, provided this does not override your fundamental rights.
• Legal Obligation: We may process data to comply with applicable laws, regulations, or valid legal processes.
• Consent: Where required (e.g., for optional marketing communications), we will obtain your explicit consent before processing.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To authenticate your identity and manage your account
• To process your scripts, generate AI content, and render videos
• To store and serve your projects and generated assets
• To monitor platform performance, diagnose errors, and improve reliability
• To track AI provider usage for cost management and rate-limit enforcement
• To communicate with you about service updates, security alerts, or support inquiries
• To comply with legal obligations and enforce our Terms of Service

5. Data Sharing

We do not sell your personal information. We share data only in the following circumstances:

• AI Providers: Script text and prompts are sent to Google Gemini for text and image generation. Narration text is sent to ElevenLabs for speech synthesis. These providers process data according to their own privacy policies.
• Infrastructure Providers: Hosting, storage, and database providers that help us operate the platform receive data as necessary to provide their services.
• Analytics: We may use analytics services to understand how the platform is used. Data shared for analytics is aggregated or anonymized where feasible.
• Legal Requirements: We may disclose data if required by law, regulation, subpoena, or court order, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to the same privacy commitments.

6. AI & Sub-Processors

VidBolt uses the following key sub-processors to deliver the Service:

Each sub-processor is contractually obligated to handle data in accordance with applicable data protection laws. We evaluate sub-processors for adequate security practices before engaging them.

7. Data Retention

• Account Data: Retained for as long as your account remains active. Upon deletion, personal data is removed within 30 days.
• Generated Content: Projects, images, audio, and videos are retained while your account is active. After account deletion, stored assets are purged within 30 days.
• Usage & Analytics Data: Aggregated usage metrics may be retained indefinitely for product improvement. Personally identifiable usage logs are deleted within 90 days of collection.
• Billing Records: When payment processing is introduced, transaction records will be retained as required by applicable tax and financial regulations (typically 7 years).

8. Data Security

We implement technical and organizational measures designed to protect your data, including:

• TLS encryption for all data transmitted between your browser and our servers
• Encrypted object storage for generated assets
• Role-based access controls limiting employee access to user data
• Regular security reviews and dependency auditing
• Monitoring and alerting for unauthorized access attempts

While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk.

9. Cookies & Tracking

VidBolt uses cookies and similar technologies for the following purposes:

• Essential Cookies: Required for authentication, session management, and core platform functionality. These cannot be disabled.
• Analytics Cookies: Help us understand how users interact with the platform so we can improve the experience. These may be opted out of where applicable.

We do not use advertising cookies or third-party tracking pixels for targeted advertising. You can manage cookie preferences through your browser settings, though disabling essential cookies may prevent you from using the Service.

10. Children's Privacy

VidBolt is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a user under 16 has provided personal data, we will take steps to delete their account and associated data promptly. If you are a parent or guardian and believe your child has created an account, please contact us at hello@vidbolt.ai.

11. Your Rights

GDPR Rights (EEA & UK)

If you are located in the EEA or United Kingdom, you have the right to:

• Access — Request a copy of the personal data we hold about you.
• Rectification — Request correction of inaccurate or incomplete data.
• Erasure — Request deletion of your personal data ("right to be forgotten").
• Restriction — Request that we limit how we process your data in certain circumstances.
• Portability — Receive your data in a structured, machine-readable format and transfer it to another controller.
• Objection — Object to processing based on our legitimate interests.

CCPA Rights (California)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose about you.
• Request deletion of your personal information.
• Opt out of the sale of personal information (we do not sell personal data).
• Non-discrimination for exercising your CCPA rights.

To exercise any of these rights, please contact us at hello@vidbolt.ai. We will respond to verified requests within the timeframes required by applicable law (typically 30 days for GDPR, 45 days for CCPA).

12. International Transfers

Your data may be processed and stored in countries outside your country of residence, including countries that may not provide the same level of data protection. When we transfer data internationally, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or rely on adequacy decisions to ensure your data remains protected in accordance with applicable law.

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the effective date at the top of this page and, where appropriate, providing additional notice via email or an in-app notification. We encourage you to review this policy periodically.

14. Contact Information

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at:

VidBolt.ai
Email: hello@vidbolt.ai

If you are in the EEA and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.