Privacy Policy

1. Data controller

The data controller responsible for your personal data is Castellitti Salvatore, a sole proprietor (ditta individuale) established in Italy.

• VAT number (Partita IVA): 01945740700
• Tax code (Codice Fiscale): CSTSVT98L06B519M
• Country of establishment: Italy
• Contact for privacy matters: s.castellitti.dev@gmail.com

2. Data we collect

Account data

When you create an account we collect your name, email address, email-verification status and, if you sign in with Google, your profile image. Sign-in works through a one-time code sent to your email or through Google; where you use Google we receive authentication tokens needed to keep you signed in.

Session and security data

To keep you signed in and protect your account, we store session identifiers and limited technical information such as your IP address and browser/device user-agent string.

Usage and content data

We store the inputs you provide to generate videos (topics, scripts and generation settings), the resulting videos, your preferences (such as default voice and aspect ratio), and the stock footage attribution details associated with each video.

Billing data

Payments are processed by our Merchant of Record, Polar. We do not collect or store your full payment card details. We store billing-related identifiers received from Polar (such as your customer and subscription identifiers, plan and status) and your credit balance and credit transaction history.

Communications

If you email us, we keep your message and contact details to respond and for our records.

3. No advertising or analytics trackers

We do not use third-party advertising networks or behavioural analytics trackers, and we do not sell your personal data. We use only the cookies and similar technologies that are strictly necessary to sign you in and keep your session secure; these do not require consent under applicable law.

4. Why we use your data and legal bases

• To provide the Service — creating your account, generating and storing your videos, and applying your preferences. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
• Authentication and security — keeping you signed in, preventing fraud and abuse. Legal basis: performance of the contract and our legitimate interests (Art. 6(1)(b) and (f) GDPR).
• Billing, credits and subscriptions — administering purchases and managing your balance. Legal basis: performance of the contract and compliance with legal obligations (Art. 6(1)(b) and (c) GDPR).
• Support and communications — responding to your requests. Legal basis: our legitimate interests and performance of the contract.
• Legal and tax compliance — meeting accounting, tax and other legal obligations. Legal basis: compliance with legal obligations (Art. 6(1)(c) GDPR).

5. Who we share data with

We share personal data only with service providers that help us run Veedtok, acting as processors or independent controllers as appropriate:

• Polar (Polar Software, Inc.) — our reseller and Merchant of Record, which processes payments, billing and taxes;
• Google — identity provider when you choose to sign in with Google;
• Third-party AI processing providers — which process your inputs to generate scripts, voice-overs and other elements of your videos;
• Cloud infrastructure providers — which host the application and store and render your videos;
• An email-delivery provider — to send sign-in codes and service emails;
• Stock-media providers (Pexels, Pixabay, Coverr) — which supply the footage used in your videos.

We may also disclose data where required by law, to enforce our terms, or to protect our rights, users or the public.

6. International transfers

Some of our providers are located outside the European Economic Area (for example, in the United States). Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision, so that your data continues to receive an essentially equivalent level of protection.

7. How long we keep your data

We keep your account and content data for as long as your account is active. If you delete your account, we delete or anonymise the associated personal data, except where we must retain certain records to comply with legal, accounting or tax obligations or to establish, exercise or defend legal claims. Billing and invoicing records may be retained by us and/or by Polar for the period required by applicable tax law.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data (“right to be forgotten”);
• restrict or object to certain processing;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, where processing is based on consent.

You can delete your account and associated data at any time from your account settings. To exercise any other right, email us at s.castellitti.dev@gmail.com. We will respond within the timeframes required by law.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the supervisory authority in your country of residence.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from children under 16 without parental consent. If you believe a child has provided us personal data without such consent, contact us and we will delete it.

10. Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections and restricted access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above and, where changes are material, take reasonable steps to inform you.

12. Contact

For any privacy question or request, contact us at s.castellitti.dev@gmail.com. See also our Terms of Service.