Vidoly AI Privacy Policy

Vidoly AI (hereinafter referred to as "we", "us", or "Vidoly AI") is committed to protecting your privacy. This Privacy Policy aims to explain how we collect, use, share, and protect your personal information when you use our application (including client and web versions, hereinafter referred to as "the Product"), as well as your relevant rights regarding this information. By using the Product, you indicate that you have read, understood, and agreed to comply with all the terms of this Privacy Policy.

I. Interpretation and Definitions

1.1 Words with initial capital letters have the meanings agreed upon below, and their meanings remain consistent whether used in singular or plural form.

1.2 Definitions:

1. The Product: Refers to the Vidoly AI application (including client and web versions).
2. Personal Information: Refers to any information related to an identified or identifiable individual, including but not limited to device information, usage data, contact information, etc.
3. Device: Refers to any device that can access the Product, such as computers, mobile phones, tablets, etc.
4. Usage Data: Refers to data generated when you use the Product and related to your interaction behavior.
5. Cookie: Refers to small files placed on your device by the Product to record your usage behavior and optimize the user experience.
6. Service Provider: Refers to third-party partners that provide us with data analysis, technical support, and other related services.
7. You: Refers to the individual accessing or using the Product; if you access or use the Product on behalf of a company or other legal entity, it refers to such company or other legal entity (as the case may be).

II. Information We Collect

When you use the Product, we will collect the following types of information in accordance with the principles of "legality, legitimacy, and necessity", and will not collect information unrelated to the functions of the Product.

2.1 Device Information

To ensure the normal operation and performance optimization of the Product, we may collect information related to your device, including but not limited to: device model, operating system version, time zone, unique device identifier, device operating status, application installation and usage statistics, crash logs, etc.; we will collect relevant crash logs and anonymized device usage data through Firebase Analytics (Google Analytics tool) and Crashlytics (crash statistics tool) to further optimize product performance.

2.2 Usage Data

To improve the Product's functions and enhance the user experience, we may collect data on your interactions with the Product, including but not limited to: functional modules used, session duration, operation records, click behavior, preferences for commonly used functions, etc.; among them, the anonymized usage data we collect through Firebase Analytics (Google Analytics tool) is only used to analyze product usage trends and optimize service functions, and does not contain any information that can identify your personal identity.

2.3 Information Related to Device Permissions

If you use specific functions of the Product (such as image upload, video generation, voice input, etc.), we may request access to relevant permissions of your device, as follows:

1. Camera and Photo Permissions: We will only request access when you use functions such as image upload and video generation to obtain the image/video materials you upload to support function implementation.
2. Microphone Permission: We will only request access when you use functions such as voice input and audio-related functions to obtain your voice/audio materials.
3. Push Notification Permission: Used to send you product updates, function prompts, service-related notifications, and you can turn off this permission in device settings at any time.

You can manage or revoke the above permissions in device settings at any time. Disabling certain permissions may restrict or prevent the normal use of the corresponding functions of the Product, but will not affect the use of other core functions.

2.4 Information Related to Third-Party Login

If you choose to log in to the Product through third-party services such as Google Sign-In or Sign in with Apple, we will collect the necessary information associated with your third-party account (including but not limited to name and email address) to complete login verification, identity authentication, and create and manage your account on the Product. The scope of collection is subject to the authorization of the third-party service, and we will not additionally collect other irrelevant information in the third-party account.

2.5 Instructions on Facial Data and Biometric Identification

We do not collect or process any facial recognition data or biometric identifiers (such as iOS Face ID, fingerprint recognition, etc.) for artificial intelligence analysis or other commercial purposes; if you use "Sign in with Apple", the relevant biometric verification is independently processed by Apple Inc., and we do not access or store any relevant biometric data.

Images/videos containing human faces that you upload through the Product are only used to support functions such as AI video generation and stylized processing, and are temporarily stored on our servers for processing. After the video generation is completed, they will be automatically deleted and will not be retained for a long time.

2.6 Use of Cookies and Tracking Technologies

We use Cookies and similar tracking technologies (such as beacons, tags) to track your activities on the Product, store your usage preferences, and optimize the Product's performance and user experience. You can refuse all Cookies or prompt for Cookie sending through browser settings, but refusing Cookies may affect the normal use of some functions of the Product.

2.7 Information Processed by the Shopify App

When a Shopify merchant installs or uses Vidoly Virtual Try On, we process information needed to provide the embedded app and storefront features, including the merchant's Shopify shop domain, Shopify shop identifiers, app installation and permission information, Shopify authentication and session information, and product information required to display a try-on experience. Shopify authentication tokens are handled on our server and are not displayed to storefront visitors.

When a shopper uses the try-on feature, the shopper or merchant may upload a photograph and the app may process the relevant product image, task information, and generated try-on result. These images may contain identifiable people. We use them only to provide the requested virtual try-on processing and related support. We do not use them to identify a person or create a biometric identifier.

III. How We Use Your Information

The information we collect is only used for the following purposes, will not be used beyond the scope described below, and the use period is only the reasonable period necessary to achieve the corresponding purposes:

1. Provide and optimize the Product's functions: Used for the normal operation, function iteration, and bug fixes of the Product to ensure that you can normally use all core functions and additional functions.
2. Enhance the user experience and optimize product performance: Analyze usage habits based on your usage data, optimize operation processes, provide personalized function recommendations, and improve the operating speed and stability of the Product.
3. Provide customer support and respond to inquiries: Used to handle the inquiries, complaints, feedback, and other requests you submit, and quickly solve the problems you encounter during use.
4. Monitor and analyze product usage: Used to analyze the usage trends and function utilization rates of the Product, identify problems during use, and provide data support for product improvement.
5. Marketing Promotion (Optional): Send you product update notifications, special offers, relevant service information, etc. If you do not wish to receive such information, you can unsubscribe at any time through the Product settings or by contacting us.
6. Compliance and Security Assurance: Used to prevent, identify, and handle fraud, illegal use, and other behaviors, protect the security of your account and personal information, and fulfill relevant legal obligations.

IV. How We Share Your Information

We attach great importance to the security of your personal information and will not sell, rent, or disclose any of your personal information. We will only share your information in the following limited circumstances in accordance with relevant laws and regulations, and will strictly limit the scope of sharing:

4.1 Sharing with Service Providers: Only share with trusted service providers, and only share the information necessary for them to provide services (specifically including data analysis service providers such as Firebase Analytics (Google Analytics tool) and Crashlytics (crash statistics tool). We will only share anonymized usage data and crash logs necessary for service implementation with them, and will not include any information that can identify your personal identity); we will sign strict confidentiality agreements and data processing agreements with such service providers to clarify their data protection responsibilities and prohibit them from using or disclosing your information beyond the agreed scope.

4.2 Sharing as Required by Law: If it is necessary to disclose your information to fulfill legal obligations, comply with court judgments or rulings, or protect the legitimate rights and interests of us, you, and other users, as well as public interests, we will disclose the necessary information in accordance with legal procedures within the scope permitted by law.

4.3 Other Circumstances: With your explicit written consent, we may share the information within the scope you specify in accordance with your request.

V. Data Security

5.1 We adopt industry-standard security protection measures, including but not limited to data encryption, access control, security audits, vulnerability protection, etc., and establish a sound data security management system to protect your personal information from risks such as leakage, tampering, loss, and abuse.

5.2 Please note that no data transmission or storage method can achieve 100% security, and we cannot guarantee the absolute security of data. We shall not be liable for any leakage of personal information caused by reasons beyond our control, such as force majeure, third-party attacks, security vulnerabilities of your own device, or leakage of account credentials.

5.3 You are responsible for properly keeping your device and the Product's account credentials (such as passwords, verification codes, etc.), regularly maintain device security, and avoid account theft; if you find any security abnormalities in your account or leakage of personal information, you should immediately notify us, and we will take corresponding security measures in a timely manner.

VI. Data Retention

6.1 We will only retain your personal information for a reasonable period necessary to achieve the purposes agreed in this Privacy Policy, fulfill legal obligations, resolve disputes, and execute relevant agreements, and will not retain any personal information unrelated to the service for an excessively long time. After the expiration of the above reasonable retention period, we will strictly delete or anonymize your personal information in accordance with relevant laws and regulations to completely clear it and no longer use it for any purpose. The retention period of various types of information will be reasonably set based on service needs, as follows.

6.2 Specific Retention Rules:

1. Personal Identification Information (such as email address, third-party login information): No fixed retention period, only retained for a reasonable period necessary to achieve the collection purpose, fulfill legal obligations, or resolve disputes (usually no more than 12 months); after you cancel your account, we will completely delete your personal identification information within a reasonable period (usually no more than 30 working days).
2. Usage Data and Device Information: Usually retained for a short period (usually no more than 6 months). Only when used to enhance the security of the Product and optimize service functions can the retention period be appropriately extended (the cumulative period after extension shall not exceed 12 months); during the extended retention period, we will anonymize such data, delete all information that can identify your personal identity, and only retain anonymized data for data analysis.
3. Images, Videos, and Other Materials Uploaded by You: Only temporarily stored on our servers to support the normal implementation of relevant functions (such as image/video processing, AI video generation); after the processing of relevant functions is completed, we will immediately and automatically delete such materials (usually no more than 72 hours) and will not retain any such content for a long time.
4. Shopify App Connection Data: Shop domains, Shopify identifiers, installation records, permission records, and authentication/session data are retained while the app is installed or for as long as necessary to provide the service, maintain security, resolve disputes, or comply with law. After uninstall, we delete or anonymize the shop's app data in accordance with applicable law and Shopify's shop redaction request.
5. Retention for Legal Obligations: If it is necessary to extend the retention period of personal information due to compliance with relevant laws and regulations, resolution of disputes, execution of legal agreements, and our relevant policies, we will strictly follow the requirements of relevant laws, extend the retention period within the permitted scope (the extended period shall be subject to legal requirements), and adopt strict security protection measures during the extended period to ensure that your personal information is not leaked or abused.

VII. Your Rights to Personal Information

In accordance with the requirements of relevant laws and regulations, you have the following rights to your personal information, and we will facilitate your exercise of these rights:

7.1 Right of Access: You have the right to log in to your account on the Product at any time to access your personal information and usage records; if you cannot access it through the account, you can contact us for assistance in inquiry.

7.2 Right of Correction: If you find that your personal information is incorrect or incomplete, you have the right to request correction of your personal information through account settings or by contacting us at any time, and we will correct it in a timely manner after verification.

7.3 Right of Deletion: You have the right to request us to delete your personal information. The specific deletion methods include: (1) Through the account settings of the Product, independently delete operable personal information and usage records, or directly apply for account cancellation in the application settings; (2) Contact us to request assistance in deleting all or part of your personal information; (3) Uninstall the Product to stop our further collection of your device information and usage data. If you cancel your account, we will delete all your personal information in accordance with the "Data Retention" clause of this Privacy Policy.

7.4 Right to Unsubscribe: If you do not wish to receive marketing promotion information sent by us, you can unsubscribe at any time through the Product settings or by replying to the promotion information. After unsubscribing, we will no longer send you relevant marketing information.

7.5 Right to Refuse: You have the right to refuse our collection and use of part of your personal information or device permissions, and can revoke relevant permissions through device settings, but this may affect the use of corresponding functions.

7.6 Right to Appeal: If you believe that our personal information processing behavior has infringed upon your legitimate rights and interests, you can contact us to appeal. We will respond within 3 working days after receiving the appeal and handle it in a timely manner after verification.

VIII. Third-Party Services

8.1 The Product may integrate third-party services (such as third-party login, data analysis, payment services, etc.). Such third-party services are independently operated and subject to their respective privacy policies, and have no connection with us.

8.2 We will not share your personal information with third-party service providers (unless otherwise agreed in the "IV. How We Share Your Information" clause of this Privacy Policy). When you use third-party services, their collection and use of your information are the sole responsibility of the third party, and we shall not bear any joint and several liability.

8.3 We recommend that you carefully read the privacy policy of the third party before using third-party services to understand their information collection and use rules and protect the security of your personal information.

8.4 Shopify and AI Processing Providers: For the Shopify App, Shopify processes merchant and storefront requests under Shopify's own terms and privacy policy. To generate a requested try-on result, the relevant uploaded image, product image, and task data may be sent to our hosting and AI processing providers. These providers process the data only to deliver the requested service, under contractual or technical safeguards, and may process it outside your country.

VIII-A. Shopify Data Deletion and Compliance Requests

Merchants can request deletion of app data by contacting [email protected]. When Shopify sends a valid data access or deletion request, we use the information in that request to locate the relevant shop, customer, order, image, task, result, or session data and respond or delete it as required by applicable law and Shopify's requirements.

When a merchant uninstalls the Shopify App, we stop using the shop's connection and delete or anonymize the associated app data, subject to legally required retention. We do not ask shoppers to provide Shopify admin credentials.

IX. Content Restrictions

To maintain a safe, compliant, and responsible platform environment and prevent privacy risks, you agree to comply with the following restrictions when uploading, generating, or sharing content (including images, videos, texts, etc.) using the Product, and shall not upload, generate, or share any non-compliant content:

1. 9.1 Prohibit uploading, generating, or sharing illegal content: Including but not limited to content that promotes or assists illegal activities, fraud, violence, or the sale of illegal goods or services.
2. 9.2 Prohibit uploading, generating, or sharing content that invades privacy: Including but not limited to content that discloses others' personal information without consent, secretly records, or leaks others' privacy.
3. 9.3 Prohibit uploading, generating, or sharing harmful or inappropriate content: Including but not limited to content that incites hatred, discrimination, explicit pornography, extreme violence, insults, or defames others, or endangers the physical and mental health of minors.
4. 9.4 Prohibit uploading, generating, or sharing content that infringes intellectual property rights: Including but not limited to content that infringes others' copyrights, trademarks, portrait rights, etc.
5. 9.5 Prohibit uploading, generating, or sharing false or misleading content: Including but not limited to intentionally false or deceptive content, or content that impersonates others.
6. 9.6 Prohibit uploading, generating, or sharing content containing sensitive personal information: Including but not limited to sensitive information such as race, ethnic origin, political views, religious beliefs, health data, or sexual orientation.
7. 9.7 If you violate the above agreements, we have the right to delete the non-compliant content, suspend or terminate your account usage rights. If the circumstances are serious, we will report to the relevant competent authorities, and you shall bear the corresponding legal responsibilities.

X. Changes to This Privacy Policy

10.1 We may update this Privacy Policy from time to time to adapt to product iterations, changes in laws and regulations, and privacy protection needs. The revised Privacy Policy will be more conducive to protecting your personal information.

10.2 For material changes (including but not limited to changes to core clauses such as the scope of information collection, purposes of use, sharing methods, and your rights), we will notify you 7 days in advance through pop-ups, push notifications, official website announcements, etc., within the Product to ensure that you are aware of the changes; for non-material changes, we will announce them within the Product, and they will take effect immediately after the announcement.

10.3 After the revised Privacy Policy takes effect, your continued use of the Product indicates that you accept the updated Privacy Policy; if you do not agree to the updated Privacy Policy, you should immediately stop using the Product and contact us to cancel your account, and we will handle your personal information in accordance with the provisions of this Privacy Policy.

10.4 Whether changed or not, the updated Privacy Policy will include a clear "Effective Date" for your reference.

XI. Contact Information

If you have any questions, objections, or need to exercise your rights to personal information (access, correction, deletion, etc.), submit inquiries, complaints, or feedback, you can contact us via the following email:

Email:[email protected]

We will respond within 3 working days after receiving your message and resolve the relevant issues for you in a timely manner.

By using the Product, you confirm again that you have read, understood, and agreed to all the contents of this Privacy Policy and recognize our personal information processing rules.