Privacy Policy

ViViDio Connect is a product of ViViD App Studio, operated by ViViD Global Services. We are committed to protecting your privacy and handling your data in line with applicable law, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) where applicable. This Privacy Policy explains what data we collect, how we use it, and your rights. We practice data minimization: we collect only what is necessary for the Service.

1. Data We Collect

We collect and process the following categories of data, only to the extent necessary:

• Account and identity: When you sign in with Google (or other supported methods), we receive your email address, name, and profile picture to identify you and manage your account.
• Google Sheets data: With your explicit consent, we access your Google Sheets to enable import of contacts and sending of messages. This data is processed in your browser/extension and is not stored on our servers beyond what is strictly necessary for the operation you request.
• Local storage and session data: We use browser local storage and session storage for authentication state, preferences (e.g. Obsidian-Gold theme), and license/device-binding identifiers. See our Cookies Policy for details.
• Payment-related data (Razorpay): When you subscribe, our payment provider (Razorpay) processes payment details. We may receive and retain metadata such as transaction ID, amount, plan, and billing email for subscription management and fraud prevention. We do not store full card numbers or CVV.
• Gemini API and AI features: If we use Google Gemini (or similar) APIs for features within the Service, prompts or data you submit in that context may be sent to the API provider in accordance with their terms and our instructions. We minimize such data and do not use it for training third-party models beyond what the provider’s policy allows.
• Device and usage: We may collect device identifiers or usage data (e.g. feature usage, errors) to enforce licensing, improve the product, and ensure security. We keep this to the minimum necessary.

2. How We Use Your Data

We use the data above only for: providing and improving the Service; authenticating you and managing subscriptions; enforcing license and device restrictions; responding to support requests; complying with law; and protecting security and rights. We do not sell your personal data.

3. Legal Basis (GDPR)

Where GDPR applies, we process personal data on the basis of: (a) performance of our contract with you; (b) your consent where we ask for it; (c) our legitimate interests (e.g. security, product improvement) where they are not overridden by your rights; and (d) legal obligation where applicable.

4. Your Rights (GDPR and CCPA)

You may have the right to: access your data; correct inaccuracies; request deletion; restrict or object to certain processing; data portability; and withdraw consent. If you are in the EEA/UK, you may lodge a complaint with a supervisory authority. California residents may have additional rights (e.g. right to know, delete, opt out of “sale” — we do not sell personal information). To exercise these rights, contact us at the email below. We will respond within the timeframes required by law.

5. Data Security and Retention

We use industry-standard measures (e.g. encryption, secure authentication) to protect your data. We retain data only as long as needed for the purposes above or as required by law, then delete or anonymize it.

6. Third-Party Services

We use the following (and similar) third-party services. Their privacy policies apply to their processing:

• Google: Authentication, Sheets, and where used, Gemini API — Google Privacy Policy.
• Firebase: Authentication, database, hosting — Firebase Privacy.
• Razorpay: Payment processing — Razorpay’s privacy policy applies to payment data they process.
• Chrome Web Store: Distribution of the extension is subject to Google’s policies.

7. International Transfers

Your data may be processed in India or other countries where we or our service providers operate. We ensure appropriate safeguards (e.g. standard contractual clauses or adequacy decisions) where required by law.

8. Contact and Data Protection

For privacy requests, questions, or to designate an authorized agent (CCPA): Email: support@vividappstudio.zohodesk.com. We will process requests in accordance with applicable law.