Privacy policy

1. Data we process

• Account data: name, email, hashed password or social-login identifier, session records.
• Organisation data: workspace name, members, roles, invitations, billing country and locale.
• Property content: property details, photographs, scene plans, scripts, generated media and exports.
• Usage and billing: credit ledger, job records, provider request identifiers, invoice references.
• Technical data: IP-derived rate-limit keys, user agent, audit records for sensitive actions.

2. Why we process it

To authenticate users, isolate organisations, generate and store the media you request, measure credit consumption, prevent abuse, provide support and meet legal obligations.

3. Processors

The hosted service is expected to use: a cloud/VPS host, an object-storage provider, a transactional email provider, Stripe for billing, and video/voice providers selected per generation mode. The final list, locations and transfer mechanisms will be published before billing opens.

4. Retention and deletion

Media is retained while the project exists in the workspace. Deleted projects are removed from active storage within a defined window and from backups on a documented rotation. Invoice and fraud-prevention records may be retained longer where required by law. You can delete your account yourself in Settings → Delete account; the account row is anonymised so retained security logs stay internally consistent, and the stored objects of the workspaces you were the last member of are deleted with it. See the data deletion page for the exact list.

5. Security

Organisation isolation is enforced server-side, sessions use HttpOnly cookies, staff access is separated from customer accounts and additionally protected, and access to sensitive media is logged. No system is perfectly secure; we describe controls rather than promising impossibility.

6. Your rights

Depending on your jurisdiction you may request access, correction, export or deletion of personal data, and object to certain processing. Contact [email protected]. A Data Processing Agreement will be available for business customers before launch.

7. Operator

VividProp is operated by Wootrendy LLC, registered in Wyoming, United States (Company Registration ID 2025-001688331, EIN 35-2902350), 75 East 3rd Street, Sheridan, Wyoming 82801. Wootrendy LLC is solely responsible for the content of vividprop.ai and its sub-domains. Contact: [email protected] · +66 98 13 79 435. VividProp™ is a trademark of Wootrendy LLC.

8. Your rights, including Thai PDPA

You may exercise access, correction, export or deletion of your personal data at any time — account deletion is self-serve in Settings → Delete account, and anything else can be requested by emailing [email protected]; we respond within 30 days. For customers processing data in Thailand, the Thai Personal Data Protection Act B.E. 2562 applies: the right to access (Section 30), data portability (Section 31), objection (Section 32), erasure (Section 33), rectification (Section 35) and withdrawal of consent. Wootrendy LLC processes customer personal data only under the documented instructions of the customer as data controller, or where required by law, and never uses it for marketing, AI model training or any secondary purpose without explicit written consent.

In the event of a personal data breach, we notify affected customers and the Thai Personal Data Protection Committee (PDPC) within 72 hours of detection. To report a vulnerability, follow the responsible-disclosure process in our Security Policy — reports in Thai or English, response targets in Thai time (ICT).