Privacy Policy
Effective Date: [07-11, 2025]
1. Introduction
Welcome to [Victac] (“we,” “our,” “us”). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and safeguard data when you use our website, mobile app, and services (collectively, the “Platform”).
By using the Platform, you agree to this Policy and our Terms of Service. If you do not agree, please stop using the Platform.
2. Who We Are
[Victac] is an AI-based content creation platform where users can generate and interact with digital creators through AI-powered tools. We operate globally, with data protection commitments under both:
U.S. law (including California Consumer Privacy Act, “CCPA”); and EU law (General Data Protection Regulation, “GDPR”).
3. Information We Collect
We collect the following types of information:
(a) Information You Provide
Account details: name, email address, password, age confirmation. Payment details: billing information processed via Stripe, Apple, or Google (we do not store full card numbers). Uploaded content: photos, videos, or text prompts used to create AI content. Communications: messages, feedback, or support requests.
(b) Information We Collect Automatically
Device and connection data (IP address, browser type, device model, OS version). Usage logs (timestamps, actions performed, session duration). Cookies and analytics data (for performance and user experience optimization).
(c) Information from Third Parties
Payment providers (for verifying successful payments). Social login or app store accounts (if you use them to sign in). Security providers for fraud and abuse prevention.
4. How We Use Your Information
We use your data to:
Provide, personalize, and improve the Platform’s services. Process payments and manage subscriptions. Enforce our Content Policy and prevent fraud or abuse. Communicate important updates and respond to support requests. Comply with legal obligations (e.g., DMCA, COPPA, GDPR). We do not sell or rent personal data to third parties.
5. AI Content & Safety Processing
Because our services include AI-based content creation:
Uploaded images or text may be analyzed by AI models for moderation and safety (e.g., age detection, explicit content detection). These models help prevent illegal or harmful content (such as sexualized depictions of minors). Automated tools never make final legal or account decisions without human review.
6. Legal Basis for Processing (GDPR)
We process personal data under the following lawful bases:
| Purpose | Legal Basis |
|---|---|
| Account creation, payments | Contract (Art. 6(1)(b)) |
| AI moderation & fraud prevention | Legitimate Interest (Art. 6(1)(f)) |
| Marketing emails | Consent (Art. 6(1)(a)) |
| Legal compliance (e.g., age checks, AML/KYC) | Legal Obligation (Art. 6(1)(c)) |
7. Data Retention
We retain personal data only as long as necessary:
| Data Type | Retention Period |
|---|---|
| Account information | Active use + 2 years after closure |
| Payment records | 7 years (financial compliance) |
| Moderation logs | 180 days minimum |
| Creator agreements | Duration of contract + 3 years |
| Backups | Rolling 30-day cycle |
After retention, data is securely deleted or anonymized.
8. Data Sharing
We share limited data with:
Stripe, Inc. – payment processing. Amazon Web Services (AWS) – secure cloud hosting. Google Analytics / Firebase – usage analytics. OpenAI or other AI vendors – to power generation tools. Each partner acts under a Data Processing Agreement (DPA) and cannot use your data for unrelated purposes.
9. Cross-Border Data Transfers
Your data may be transferred and processed outside your home country (e.g., to the U.S. or E.U.). We rely on:
Standard Contractual Clauses (SCCs) for EU users, and Adequacy Decisions recognized by the European Commission. All transfers maintain appropriate security safeguards.
10. Your Rights
For EU / EEA Users (GDPR):
You have the right to:
Access, correct, or delete your personal data. Withdraw consent at any time. Request data portability (structured, machine-readable format). Object to or restrict processing. Lodge a complaint with your local data protection authority.
For California Users (CCPA):
You have the right to:
Request disclosure of the categories and sources of personal data we collect. Request deletion of personal data (subject to exceptions). Opt-out of sale or sharing of data (we do not sell personal information). Receive equal service and price, regardless of exercising these rights. To exercise any rights, contact us at suppot@victac.com. We will respond within 30 days.
11. Children’s Privacy
We do not knowingly collect or allow content involving individuals under 13 (U.S.) or 16 (EU). If you believe we have collected such information, contact us immediately, and we will remove it promptly.
12. Security Measures
We use industry-standard security controls to protect your data:
HTTPS / TLS encryption; AES-256 encryption at rest; Role-based access control; Regular security audits and monitoring. Despite these safeguards, no online service is completely secure. You share information at your own risk.
13. Third-Party Links
Our Platform may link to third-party websites or services. We are not responsible for their content, privacy practices, or data collection methods. We encourage you to review their privacy policies.
14. Changes to This Policy
We may update this Policy from time to time. Material updates will be announced via email or in-app notice at least 7 days before they take effect. The “Effective Date” at the top will reflect the latest version.
15. Contact Us
If you have questions or concerns about this Privacy Policy, please contact:
Data Protection Officer (DPO): [Dva Coo] Email: support@victac.com