Privacy Policy

1. Introduction and Scope

Vidsoftlabs ("Vidsoftlabs", "we", "us", or "our"), a company based in India, respects your privacy and is committed to protecting the personal data of everyone who uses GenVid, our AI-powered text-to-video and image-to-video generation application available on iOS and Android (the "App" or the "Service"). This Privacy Policy explains what information we collect, how we use and share it, how long we retain it, and what rights and choices you have, whether you use GenVid as a guest or as a registered user.

This Privacy Policy applies to all information collected through the App, our website at vidsoftlabs.com, and any related services, features, or communications (collectively, the "Service"). It should be read together with our Terms of Use, which governs your use of GenVid generally.

By downloading, accessing, or using GenVid — including as an anonymous guest user — you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

The information we collect depends on whether you use GenVid as a guest or as a registered user, and includes certain data collected automatically from all users regardless of account type.

2.1 Guest Users (Anonymous Authentication)

When you use GenVid without creating an account, we assign your device a Firebase Anonymous Authentication identity and collect:

• Firebase Anonymous UID — a unique identifier that lets us associate your activity, credits, and generated content with your device/session without collecting your name or email;
• Device type and operating system version — for compatibility, debugging, and analytics purposes;
• App usage patterns — such as features used, screens viewed, and generation frequency;
• Video generation prompts — the text and/or image inputs you submit, which are sent to Runway for AI processing; and
• Generated video metadata and files — including the resulting video file, its duration, resolution, generation timestamp, and the prompt or image used to create it.

2.2 Registered Users

If you create a registered account (e.g. via Sign in with Google or Sign in with Apple), we collect everything described in Section 2.1, plus:

• Email address or linked account information — provided by your chosen identity provider (Google or Apple), used to identify your account and enable sign-in across devices; and
• Credit transaction history — records of Credit purchases, promotional grants, and consumption, used for billing support, fraud prevention, and account records.

2.3 Information Collected Automatically From All Users

Regardless of whether you use GenVid as a guest or registered user, we and our service providers automatically collect:

• IP address — recorded in backend server logs for security, rate-limiting, and diagnostic purposes;
• FCM push notification token — a device-specific token used to deliver push notifications via Firebase Cloud Messaging;
• Crash and error reports — collected via Sentry and Firebase Crashlytics, including device information, stack traces, and app state at the time of a crash or error; and
• In-app purchase (IAP) receipts — purchase receipt data processed by Apple and Google when you buy Credits or subscriptions.

We do not directly collect or store your payment card number, bank details, or other financial instrument information — these are handled exclusively by Apple and Google, as described in Section 5.

3. How We Use Your Information

We use the information described in Section 2 for the following purposes:

• Providing the Service — authenticating your session, processing your prompts through Runway to generate video content, and storing and delivering your Generated Content;
• Content moderation and safety — automatically screening prompts, images, and Generated Content via OpenAI's moderation systems and Google Cloud Vision to detect and prevent prohibited or harmful content;
• Account and billing management — maintaining your registered account, tracking Credit balances and transaction history, and processing in-app purchases through Apple and Google;
• Communications — sending push notifications via Firebase Cloud Messaging (e.g. generation-complete alerts, promotional messages, and service updates), where you have not withdrawn consent;
• App performance and reliability — diagnosing crashes and errors using Sentry and Firebase Crashlytics, and monitoring app usage patterns to improve stability and performance;
• Security and fraud prevention — using IP addresses and server logs to detect abuse, prevent fraud, enforce rate limits, and protect the integrity of the Service;
• Legal compliance and enforcement — retaining records as necessary to comply with applicable law, respond to lawful requests, and enforce our Terms of Use; and
• Product improvement — analyzing aggregated, de-identified usage data to improve GenVid's features, performance, and generation quality.

We do not sell your personal data to third parties, and we do not use your prompts or Generated Content to train third-party AI models beyond what is strictly necessary to generate your requested output, except where you have separately and explicitly opted in.

4. Legal Basis for Processing

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction that requires a documented legal basis for processing personal data, we rely on the following legal bases under Article 6 of the General Data Protection Regulation ("GDPR"), as applicable:

Where we rely on your consent (for example, for marketing push notifications), you may withdraw that consent at any time as described in Section 8, without affecting the lawfulness of processing carried out before your withdrawal.

If you are located in India, our processing of your personal data is additionally governed by the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and, once notified and effective, the Digital Personal Data Protection Act, 2023.

5. Third-Party Services and Data Processors

GenVid relies on the following third-party service providers to operate, secure, and improve the Service. Each provider processes only the categories of data necessary to perform its function, under contractual and/or policy commitments consistent with this Privacy Policy.

These providers act as independent data processors or controllers with respect to the data they handle on our behalf, and their use of your information is governed by their own privacy policies linked above, in addition to any data processing terms we have in place with them. We select providers that maintain industry-standard security and compliance practices, but we do not control, and are not responsible for, their independent processing activities.

6. Data Sharing and Disclosure

We do not sell your personal data. We share information only in the following circumstances:

• With the third-party processors listed in Section 5, strictly to the extent necessary for them to perform the function for which they are engaged (e.g. sending your prompt to Runway to generate a video, or sending a crash report to Sentry);
• With Apple and Google, to process in-app purchases and, where you sign in via those providers, to authenticate your account;
• For legal reasons — where required to comply with a subpoena, court order, legal process, or governmental or regulatory request, including under the Information Technology Act, 2000 and the IT Rules, 2021, or to protect the rights, property, or safety of Vidsoftlabs, our users, or the public, including reporting content involving child sexual abuse material (CSAM) to the National Center for Missing & Exploited Children (NCMEC) or equivalent authorities as required by law;
• In connection with a business transfer — such as a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, in which case personal data may be transferred as a business asset, subject to standard confidentiality arrangements; and
• With your consent — for any other purpose disclosed to you at the time we collect the data or with your explicit, opt-in agreement (for example, using anonymized Generated Content for promotional purposes).

We do not permit our third-party processors to use your data for their own independent marketing purposes, except where you separately interact with those providers directly (for example, through your own Apple ID or Google Account settings).

7. Data Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods are as follows:

Where data is retained beyond these periods for legal, tax, security, or dispute-resolution purposes, we limit such retention strictly to what is necessary for that purpose and delete or anonymize the data thereafter.

8. Your Privacy Rights

Regardless of where you are located, you have the following rights with respect to your personal data, which you can exercise via the App's in-app settings or by contacting us at kajalchiragsoft@gmail.com:

8.1 Account Deletion and Video Export

You may delete your account at any time via in-app settings → Account → Delete Account. Before deleting your account, we strongly recommend exporting or downloading any Generated Content you wish to keep, as videos become subject to permanent deletion per the retention schedule in Section 7 once deletion is initiated.

8.2 Push Notification Consent

You may withdraw consent for push notifications at any time via your device's notification settings or via in-app notification preferences. Withdrawing consent will stop future push notifications but will not affect notifications already delivered.

8.3 GDPR Rights for EU/EEA and UK Residents

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you additionally have the right, subject to applicable exceptions, to: obtain a copy of your personal data in a portable format (data portability); lodge a complaint with your local supervisory authority; and object to processing based on legitimate interests, including profiling. To exercise these rights, contact us at kajalchiragsoft@gmail.com. We will respond within the timeframes required by the GDPR (generally one month).

8.4 CCPA Rights for California Residents

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), including the right to: know what personal information we have collected, used, and disclosed about you in the preceding 12 months; delete your personal information; correct inaccurate personal information; and not be discriminated against for exercising these rights. We do not sell or "share" (as defined under the CCPA) your personal information for cross-context behavioral advertising. To submit a request, contact us at kajalchiragsoft@gmail.com. We may need to verify your identity before fulfilling your request.

8.5 Response Time

We aim to respond to all privacy-related requests within 30 days. Where verification of identity is required (e.g. for registered accounts), we may request additional information before processing your request.

9. Children's Privacy

GenVid's eligibility requirements (see our Terms of Use) prohibit use by anyone under 13 years of age. If we become aware that we have inadvertently collected personal data from a child under 13, we will take prompt steps to delete that information and, where applicable, terminate the associated account.

If you are a parent or guardian and believe your child under 13 has provided personal data to us, please contact us immediately at kajalchiragsoft@gmail.com so we can investigate and take appropriate action.

10. International Data Transfers

Vidsoftlabs is based in India, and your data may be collected, processed, and stored in India as well as in other countries where our service providers operate infrastructure, including the United States and the European Union (for example, Microsoft Azure data centers, Firebase/Google Cloud, Runway, OpenAI, and Sentry). By using GenVid, you understand that your personal data may be transferred to, stored in, and processed in countries other than your country of residence, which may have different data protection laws than your home jurisdiction.

Where we transfer personal data of individuals located in the EEA, UK, or Switzerland to countries that have not been recognized as providing an adequate level of data protection, we rely on appropriate safeguards, such as Standard Contractual Clauses or equivalent mechanisms offered by our service providers, to ensure your data continues to be protected in accordance with this Privacy Policy and applicable law.

We take reasonable steps to ensure our third-party processors maintain a level of data protection consistent with this Privacy Policy, regardless of where the data is processed.

11. Data Security

We implement reasonable technical and organizational measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

• Encryption of data in transit (TLS/HTTPS) and at rest, including within Microsoft Azure Blob Storage;
• Time-limited, cryptographically signed URLs for accessing Generated Content, rather than permanent public links;
• Access controls limiting internal access to personal data on a need-to-know basis;
• Regular monitoring for security vulnerabilities and prompt patching of identified issues;
• Reliance on reputable infrastructure providers (Microsoft Azure, Firebase/Google) that maintain their own independent security certifications and safeguards.

No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security of your data. If we become aware of a data breach affecting your personal data, we will notify you and the relevant authorities as required by applicable law, including the Information Technology Act, 2000 and the rules made thereunder.

You are responsible for maintaining the security of your own device and any credentials used to access your registered account.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, our third-party processors, or applicable law. All changes are effective immediately upon posting, unless stated otherwise.

If we make material changes to this Privacy Policy — such as significant changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will provide reasonable notice, such as through an in-app notice, push notification, or by updating the "Last Updated" date at the top of this page. Your continued use of GenVid after such changes take effect constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us / Data Controller Information

Vidsoftlabs is the data controller responsible for your personal data collected through GenVid. If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy inquiries and requests within a reasonable timeframe, generally within 30 days.