Privacy Policy
Last updated: October 14, 2026
1. Overview & Commitment
VoraVid (https://voravid.com, "we", "us", or "our") provides an online multimodal AI video creation platform and creator SaaS tools. We are deeply committed to maintaining transparent data practices and protecting your personal privacy. This Privacy Policy clearly outlines the categories of personal information we collect, the specific operational purposes for which we use this information, the third parties to whom data is disclosed, the transmission and disclosure methods employed, and the technical and administrative security measures implemented to protect your information.
2. Categories of Information We Collect
We only collect information necessary to deliver our services, securely process payments, and ensure platform integrity: • Account & Profile Information: When you register or sign in via Google OAuth, we receive your OAuth identifier, verified email address, full name, and avatar URL. • Transaction & Billing Metadata: All payment transactions are processed directly by our PCI-DSS Level 1 certified gateway partner (Stripe, Inc.). We do not collect or store full credit card numbers, expiration dates, or CVC codes on our servers. We only retain transaction metadata including internal Order IDs, Stripe PaymentIntent and Session IDs, purchase amount, currency, timestamp, and country of payment. • User Inputs & AI Generation Prompts: We process the text prompts, stylistic configurations, uploaded reference images, and render job parameters that you voluntarily submit to generate video outputs, as well as the resulting media URLs. • Technical & Operational Telemetry: For system performance, cybersecurity defense, and anti-fraud monitoring, our servers automatically log IP addresses, browser types and versions, operating system environments, device categories, request timestamps, and essential session identifiers.
3. How We Use Your Information (Purposes of Processing)
We utilize collected information solely for legitimate business operations: • Core Service Delivery: To authenticate accounts, dispatch GPU rendering workloads to inference clusters, and deliver high-definition video outputs to your personal library. • Account Administration & Billing: To maintain user credit balances, track subscription statuses, process purchases, issue receipts, and manage refund requests. • Cybersecurity & Fraud Prevention: To detect and prevent automated brute-force attacks, card testing, stolen-card usage, chargeback abuse, and breaches of our Content Safety and Acceptable Use policies. • Legal Compliance & Dispute Resolution: To comply with statutory financial reporting, tax obligations, and valid law enforcement inquiries.
4. Third-Party Disclosures (Recipients of Data)
We disclose personal data only to vetted third-party service providers bound by strict confidentiality and data protection obligations: • Cloud Infrastructure & Edge Hosting: Cloudflare, Inc. (providing global edge computing Workers, encrypted D1 databases, distributed R2 object storage, and DDoS defense). • Payment Gateways & Merchant Services: Stripe, Inc. (handling credit card tokenization, fraud scoring via Stripe Radar, and billing settlement). • AI Model Inference Infrastructure: Certified GPU inference partners (including Replicate, Inc. and WaveSpeed AI) to compute model weights. Only essential prompt text and render parameters are transmitted to inference nodes; user personal identities are never shared with AI model providers. • Legal & Regulatory Authorities: When required by a valid court order, subpoena, or compulsory legal process to protect life, property, or legal rights.
5. Methods of Disclosure & Absolute Prohibition of Data Selling
All data exchanges between VoraVid and authorized third-party service providers occur strictly over encrypted, authenticated APIs via Transport Layer Security (TLS 1.3 / HTTPS). • STRICT NO-SALE PLEDGE: We DO NOT sell, rent, lease, trade, or monetize your personal information, generation prompts, or uploaded creative assets to third-party data brokers, advertising networks, or data aggregators under any circumstances.
6. Security Measures for Protecting Information
We implement multi-layered industry-standard technical and organizational security controls to safeguard your data: • Encryption in Transit: All website traffic and API communications are strictly encrypted using TLS 1.3 with automated HSTS (HTTP Strict Transport Security) enforcement. • Encryption at Rest: Database records in Cloudflare D1 and generated media assets stored in Cloudflare R2 are encrypted at rest using AES-256. • Cryptographic Credential Protection: Administrative credentials and sensitive tokens are hashed using PBKDF2 with 100,000 salted iterations. • Transactional Concurrency Protection: Credit ledgers and payment fulfillments utilize atomic Compare-And-Swap (CAS) database operations to prevent race conditions and double-spending. • Access Governance: Strict role-based access control (RBAC), multi-factor authentication, and zero-trust policies protect internal management infrastructure.
7. Data Retention & Account Deletion (User Rights)
We retain personal information only for as long as your account remains active or as required to comply with statutory accounting and tax regulations. • Right to Erasure & Account Deletion: You have the right to request the permanent deletion of your account and associated data at any time. Account deletion triggers an atomic database purge of your profile records, generation history, active sessions, and uploaded assets. • User Rights (GDPR / CCPA): Depending on your jurisdiction, you may also have the right to access, rectify, or export your personal data. To exercise any data protection rights, please contact our Data Protection Team at support@voravid.com.
8. Cookies & Local Storage
We use strictly necessary session cookies and local storage tokens solely to maintain your authenticated login session, preserve your chosen studio workspace preferences, and defend against Cross-Site Request Forgery (CSRF). We do not deploy invasive cross-site advertising trackers.
9. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our security practices, please contact us: • Official Support Email: support@voravid.com • Website: https://voravid.com • Customer Help Center: https://voravid.com/about