Privacy Policy
Effective date: April 8, 2026
1. Data Controller
The data controller responsible for processing your personal data is Chrono Games UG (haftungsbeschränkt), Axel-Springer-Platz 3, 20255 Hamburg, Germany ("we", "us", "Company").
For any data protection inquiries, you may contact us at privacy@vidguy.com.
2. Personal Data We Collect
We collect the following categories of personal data:
- Identity data: name, email address
- Professional data: company name, job title, company size, website
- Account data: login credentials, authentication tokens (Google, email/password)
- Billing data: payment method details, invoices, transaction history (processed via Stripe)
- Usage data: pages visited, features used, videos created, credits consumed
- Technical data: IP address, browser type, operating system, device information, connection timestamps
- Communication data: support requests, feedback, correspondence
- Content data: prompts, scripts, and other inputs you provide to generate videos
3. Purposes and Legal Bases for Processing
| Purpose | Legal Basis (GDPR) | Retention Period |
|---|---|---|
| Providing the Platform and generating videos | Performance of contract (Art. 6(1)(b)) | Duration of your account; connection logs retained for 10 weeks; inactive accounts deleted after 2 years |
| Processing payments and managing subscriptions | Performance of contract (Art. 6(1)(b)) | Invoices and transaction records retained for 10 years per German commercial law (HGB §257) |
| Improving our services and AI models | Legitimate interest (Art. 6(1)(f)) | Aggregated/anonymized data retained indefinitely |
| Customer support and communication | Legitimate interest (Art. 6(1)(f)) | 3 years from last contact |
| Marketing communications | Consent (Art. 6(1)(a)) | Until consent is withdrawn or 3 years from last interaction |
| Analytics and platform optimization | Consent (Art. 6(1)(a)) | 25 months |
| Legal compliance and fraud prevention | Legal obligation (Art. 6(1)(c)) | As required by applicable law |
| Responding to data subject rights requests | Legal obligation (Art. 6(1)(c)) | Duration necessary for verification and fulfillment |
4. Data Recipients and Processors
We may share your personal data with the following categories of recipients:
- Payment processing: Stripe, Inc.
- Hosting and infrastructure: Vercel, AWS, Modal
- Database and authentication: Supabase
- AI service providers: Anthropic, BytePlus/ModelArk, ElevenLabs
- Analytics: Vercel Analytics
- Email communications: as applicable
- Public authorities: when required by law or court order
All processors are bound by data processing agreements and are required to process data only on our instructions and in compliance with GDPR.
5. International Data Transfers
Some of our service providers are located outside the European Economic Area (EEA). Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including:
- European Commission adequacy decisions (Art. 45 GDPR)
- Standard Contractual Clauses approved by the European Commission (Art. 46(2)(c) GDPR)
- EU-U.S. Data Privacy Framework certifications where applicable
6. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access — obtain confirmation of whether we process your data and request a copy
- Right to rectification — correct inaccurate or incomplete data
- Right to erasure — request deletion of your data ("right to be forgotten")
- Right to restrict processing — limit how we use your data in certain circumstances
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interest or for direct marketing
- Right to withdraw consent — withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at privacy@vidguy.com. We will respond within 30 days.
You also have the right to lodge a complaint with a supervisory authority. The competent authority for Hamburg is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI).
7. Cookies
We use essential cookies to operate the Platform (e.g., session management, authentication). We may also use analytics cookies with your consent to understand how the Platform is used and improve our services.
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS), access controls, and regular security reviews.
9. Children
The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us and we will promptly delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated via email or through the Platform. The effective date at the top of this page indicates when the policy was last revised.
11. Contact
For questions or requests regarding this Privacy Policy or your personal data, please contact:
Chrono Games UG (haftungsbeschränkt)
Axel-Springer-Platz 3
20255 Hamburg, Germany
Email: privacy@vidguy.com