Privacy Policy

Your privacy is important to us. This policy explains how VizStory collects, uses, and protects your personal information.

Last updated: August 18, 2025

Privacy at a Glance

What we collect

Only essential data for service functionality

How we protect it

Industry-standard encryption and security measures

Your rights

Full control over your data and privacy settings

Contact us

alexwong1127@gmail.com for privacy concerns

1. Information We Collect

1.1 Information You Provide

  • Account Information: Email address, name, password when you create an account
  • Content Data: Videos, images, text, and scripts you upload for analysis
  • Communication Data: Messages when you contact our support team
  • Payment Information: Billing details processed through secure third-party providers

1.2 Information We Collect Automatically

  • Usage Data: How you interact with our platform, features used, time spent
  • Device Information: IP address, browser type, operating system, device identifiers
  • Log Data: Server logs, error reports, performance metrics
  • Cookies: Essential cookies for functionality, analytics cookies with consent

1.3 Third-Party AI Services

When you use our AI features, your content may be processed by third-party AI services (OpenAI, Anthropic, Google, etc.). We ensure these providers meet our privacy standards and delete your data after processing.

2. How We Use Your Information

We use your information to:

  • Provide and improve our video analysis and AI services
  • Process your content through AI models for script analysis and storyboard generation
  • Manage your account and provide customer support
  • Send important service updates and security notifications
  • Analyze usage patterns to improve platform performance
  • Prevent fraud, abuse, and ensure platform security
  • Comply with legal obligations and enforce our Terms of Service

Legal Basis (GDPR)

We process your data based on: (a) Contract performance, (b) Legitimate interests, (c) Legal compliance, and (d) Your explicit consent where required.

3. How We Share Your Information

We do not sell your personal information. We may share data in these limited circumstances:

3.1 Service Providers

  • AI processing services (OpenAI, Anthropic, Google Gemini, etc.)
  • Cloud hosting providers (Supabase, Vercel)
  • Payment processors (Stripe, PayPal)
  • Analytics services (with anonymized data)

3.2 Legal Requirements

When required by law, court order, or to protect our rights and users' safety.

3.3 Business Transfers

In case of merger, acquisition, or asset sale, with advance notice to users.

4. Data Security

We implement industry-standard security measures:

  • Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Access Controls: Strict authentication and authorization protocols
  • Regular Audits: Security assessments and vulnerability testing
  • Data Minimization: We collect and retain only necessary data
  • Secure Deletion: Permanent deletion when data is no longer needed

Important: While we use best practices, no system is 100% secure. Please use strong passwords and report any security concerns immediately.

5. Data Retention

Retention Periods:

  • Account Data: Until account deletion or 3 years of inactivity
  • Content Data: Until you delete it or account closure
  • Usage Logs: 12 months for security and analytics
  • Support Communications: 2 years for quality assurance
  • AI Processing Data: Deleted immediately after processing

Automatic Deletion:

We automatically delete data when retention periods expire or when you request deletion.

6. Your Privacy Rights

You have the following rights regarding your personal data:

Access & Portability

Request a copy of your data in a portable format

Rectification

Correct inaccurate or incomplete information

Erasure

Delete your account and associated data

Restriction

Limit how we process your information

Objection

Object to processing based on legitimate interests

Withdraw Consent

Revoke consent for optional data processing

How to Exercise Your Rights

Contact us at alexwong1127@gmail.com with your request. We'll respond within 30 days (GDPR) or as required by applicable law.

7. International Data Transfers

VizStory operates globally. Your data may be transferred to and processed in countries other than your residence, including the United States.

Safeguards for EU Users:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions where available
  • Additional technical and organizational measures

Data Processing Locations:

Primary servers in EU and US regions with appropriate protections.

8. Children's Privacy

VizStory is not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal information from children under these ages.

If you believe we have collected information from a child under the applicable age, please contact us immediately at alexwong1127@gmail.comand we will delete such information promptly.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors.

Notification of Changes:

  • Email notification for material changes
  • Prominent notice on our platform
  • 30-day notice period for significant changes

Your continued use of VizStory after the effective date constitutes acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: alexwong1127@gmail.com

Subject Line: Privacy Policy Inquiry

Response Time: Within 30 days

EU Representative

For EU users with GDPR-related inquiries, you may also contact our EU representative (details available upon request).

This Privacy Policy is effective as of August 18, 2025and applies to all users of VizStory services worldwide.