Privacy Policy » Vidu Studio

Last revised on [July 25, 2024] | (Credit of This Page – Vidu.studio)

ShengShu AI HK Limited (“we,” “us,” “our”) respects the privacy of our users (“you” or “user”) and is committed to protecting the privacy and security of your personal data. This Privacy Policy aims to clearly describe the types of personal data we collect, how we use it, the reasons for processing your personal data, who we share it with, when and how we destroy it, and outlines your rights regarding your personal data under applicable data protection laws and regulations. It also details the measures we take to protect your personal data. This Privacy Policy applies to your interaction with Vidu through our website at www.vidu.studio, our API, and other related services (collectively, “Vidu” or “Services”).

Contents of this Privacy Policy:

Who we are
Types of personal data we collect
Purposes of processing personal data
Our reasons (legal basis) for processing
Sharing of personal data
Cross-border transfer of personal data
Retention and destruction of personal data
Children
Security of personal data
Link to other websites and services
Rights of data subjects
Updates to this Privacy Policy
Contact us

1. Who we are

Under the General Data Protection Regulation (GDPR), ShengShu AI HK Limited acts as the data controller for personal data obtained during your interaction with our Services for personal use. Here are our details:

Name: ShengShu AI HK Limited
Address: World Finance Centre, Harbour City, 17 Canton Road, Tsim Sha Tsui, Kowloon, Hong Kong
Tel: (00852) 2206 0092
FAX: (00852) 3003 0133

In certain instances, we function as a processor on behalf of our commercial customers, as outlined in our Terms of Use. In these cases, the commercial customer retains ultimate responsibility for your personal data. Our processing in these circumstances is governed by the Data Processing Addendum between us and the customer.

2. Types of personal data we collect

We collect personal data minimally necessary for the provision of our Services. This data may be directly provided by you or collected automatically during your usage of our Services.

2.1. Personal Data You Provide

Account information: We collect and verify your email address during account creation via a verification code sent to your email. For account creation using social logins (e.g., Google), we collect your personal data shared through those platforms and may also collect your nickname and profile photo.
User content: We collect the personal data included in the text, images, or videos you input, alongside data of feedback and likes/dislikes you make.
Purchase data: When making purchases, we collect payment details through third-party payment services to manage users’ subscriptions to our Services.

2.2. Automatic Data Collection

Usage data: We collect the history of your browsing activity on our site to improve our website services.
Cookies and Similar Technologies: We do not use cookies or similar technologies currently.

3. Purposes of processing personal data

We process your personal data for specific, explicit, and legitimate purposes, including:

Provision and maintenance of the Services.
User support.
Analytics to optimize Services and improve user experience.
Communication with you about our Services and promotional materials.
Prevention of fraud, criminal activity, or misuse of Services.
Compliance with legal obligations and protection of user and third-party rights and safety.

4. Our reasons (legal basis) for processing

If you reside in the European Economic Area (EEA), we process personal data relying on the following legal bases:

Necessary for entry into, or performance of, any contract(s) between you and us (Art 6(1)(b) of the GDPR).
Necessary for the legitimate interests pursued by us, where these are not overridden by your interests or fundamental rights and freedoms (Art 6(1)(f) of the GDPR).
Necessary for compliance with a legal obligation to which we are subject (Art 6(1)(c) of the GDPR).
Your consent (Art 6(1)(a) GDPR), in limited circumstances and to the extent the legal bases for processing set out above do not apply.

5. Sharing of personal data

We may share your personal data with partners and third-party service providers who assume confidentiality obligations regarding your personal data. Personal data might be shared for functions like purchasing, billing, content reviewing, and technical services including cloud services. We have concluded data processing agreements or joint controller agreements, as applicable, with such third-party service providers.

Additionally, we may disclose your personal data:

As required by applicable laws or legal processes.
Where necessary for safety, fraud, or other illegal activity prevention or investigation objectives, as permitted and/or required by applicable laws.
During business transfer processes, such as restructuring or liquidation, as permitted by applicable laws.

6. Cross-border transfer of personal data

Personal data may be transferred to countries/regions outside where you reside for processing in line with this Privacy Policy. These countries may not have similar data protection laws as those in your location. We will take all necessary measures to protect your personal data in accordance with applicable data protection laws.

If you reside in the EEA:

If your personal data is transferred to countries/territories with an adequacy decision, the cross-border transfer is subject to the mechanism of an adequacy decision (Art 45 of the GDPR).
If your personal data is transferred to other countries/territories, we will evaluate the ability of personal data protection and network security safeguards and take measures set out in Art 46(2) of the GDPR.

You can obtain copies of the applicable safeguards from us by sending a request to the contact details outlined in 13. Contact us.

By using our Services, you understand and acknowledge that your personal data will be transferred and stored in facilities and servers in Singapore.

7. Retention and destruction of personal data

We only process and store your personal data:

As long as required by the purposes for which they have been collected.
Until you withdraw your consent.
Until you object to the processing of your personal data.
Until you find your personal data have been unlawfully processed.
Until the personal data have to be erased for compliance with a legal obligation under applicable laws.
If the personal data have been collected in relation to the offer of information society services.

In general, we will store your personal data for the necessary time period to meet legal or regulatory requirements, especially to comply with commercial and tax retention obligations, to resolve potential disputes, or to preserve evidence within statutory limitation provisions. We will retain the personal data concerned until the end of the respective statutory period.

Thereafter, your personal data will be securely deleted or destroyed.

8. Children

Vidu is not intended for children. Users must be of legal age as stipulated by applicable laws of each country/region to register. If we detect or learn of any registration or activities by children, we may invalidate your registration and remove relevant data collected.

9. Security of personal data

We use appropriate technical and organizational security measures to protect personal data. This includes hardware encryption and secure transmission technologies.

10. Link to other websites and services

Our Services may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

11. Rights of data subjects

You have various rights concerning your personal data. If you would like to exercise any of the following rights, please contact us at support@vidu.studio.

If you are located in the EEA, you have the following rights regarding your personal data collected by us:

Right of access: You have the right to receive information about your personal data processed by us upon request.
Right to rectification: You have the right to correct your personal data if it is incorrect.
Right to erasure: You have the right to obtain from us the deletion of your personal data under specific conditions.
Right to restriction of processing: You have the right to request us to process your personal data only to a restricted extent under certain conditions.
Right to data portability: You have the right to receive from us personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and the right to request us to forward this personal data to another controller under certain conditions.
Right to object: You have the right to object to the processing of your personal data. If you object, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing.
Right to withdraw your consent: You have the right to withdraw consent given to us at any time.
Complaints: You have the right to file a complaint with a data protection authority regarding our collection and processing of your personal data.

12. Updates to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. If this Privacy Policy changes in any way, we will post an updated version on this page. Any significant changes will be directly notified to you. We will store the historical versions of this Privacy Policy in our documentation archive. We recommend you regularly review this page to ensure that you are

always aware of our information practices and any changes.

13. Contact us

For questions or concerns about our use of your personal data, please contact us using the following details:

Tel: (00852) 2206 0092
Address: Room 06, 13A/F., South Tower, World Finance Centre, Harbour City, 17 Canton Road, Tsim Sha Tsui, Kowloon, Hong Kong

All correspondence received by us from you (written or electronic inquiries) is classified as restricted-access information and may not be disclosed without your written consent. The personal data and other information about you may not be used without your consent for any purpose other than in response to the inquiry, except as expressly provided by law.

CCPA Privacy Notice

This Notice applies to the “Consumer” in California, the U.S., as defined in the California Consumer Privacy Act of 2018 (CCPA). Any terms used in this Notice that are defined in the CCPA have the same meaning given therein.

The collection, use, and sharing of your personal information

We collect your personal information in contexts such as account registration, your usage of the Services, and communications with you, with information provided by yourself, collected automatically by us, or provided by third parties. This Privacy Policy provides more information about our data collection, use, and sharing practices.

We do NOT “sell” personal information as defined by CCPA.

Description of your rights

Subject to certain exceptions and limitations described in CCPA, you have the following rights with respect to your personal information:

Request access to the personal information: You have the right to request the following information from us:

Categories and/or specific pieces of personal information we have collected about you.
Categories of sources from which the personal information is collected.
Purpose(s) for using your personal information.
Categories of personal information sold, shared, or disclosed (if any).
Categories of third parties with whom the personal information was shared or disclosed (if any).

Request us to delete your personal information that we have collected about you.
Request us to correct inaccurate personal information we have maintained about you.
Opt out from the “sale” of your personal information (please note that we do not sell your personal information as defined by CCPA).
Request to limit the use and disclosure of your sensitive personal information.
Be free from unlawful discrimination for exercising your privacy rights under the CCPA. You have the right not to be denied services, charged different prices or rates for services, or receive a differing level of quality of services as a result of exercising the above rights.
Appeal decisions where we deny your rights request.

How to submit a request

You or your authorized agent may submit a privacy rights request by:

Telephone: (00852) 2206 0092
Email: support@vidu.studio

To provide a response, we may ask you to provide clarifying or identifying information to verify your request. We will respond to your verified requests within 45 days pursuant to the CCPA. If necessary, extensions for an additional 45 days will be accompanied by a notification with an explanation for the delay.