1. Introduction
This Privacy Policy uses the same terminology and abbreviations as in our Terms of Use document. This Privacy Policy regulates and explains how we collect, use, and store your personal information. Information about you can be divided into personally identifiable and non-identifiable information depending on whether the information can identify you as a specific person. Personally identifiable information will be referred to as 'personal data.'
We are Vidext Technologies S.L., a company located at Calle Martin el Humano, 1, 46008, Valencia, Comunidad Valenciana, Spain, and we are responsible for complying with the principles related to the processing of personal data. If you have any questions or concerns about your privacy, you can contact us at datos@vidext.io
In addition to the definitions provided in the Terms and Conditions, the following words and abbreviations will have the meaning provided in this document:
- 'Personal data': any information relating to an identified or identifiable natural person ('User'); an identifiable natural person can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
- 'Processing': any operation or set of operations performed on personal data or sets of personal data, whether by automated means or not, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
- 'Data processor': a natural or legal person, public authority, agency, or other body that processes personal data on behalf of VIDEXT.
- 'Personal data breach': a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored, or otherwise processed.
2. Personal data we process
During your interaction with the Services or directly with us, we may process the following personal data:
- Identity data include name, surname, username, email address, or a similar identifier.
- Contact data such as billing address, email address, and phone numbers.
- Financial data such as bank account and payment card details.
- Transaction data such as payment details and services purchased.
- Business data include company name, business purpose, and video generation requirements.
- Profile data include username and password, preferences, comments, and survey responses.
- Usage data such as information about your use of our website, products, and services.
- Marketing data such as marketing and communication preferences.
- Audio and/or video data such as content uploaded as a source for video generation.
- Technical data such as Internet Protocol (IP) address, login data, browser type, time zone setting and location, and operating system used for access.
- Other data that you choose to provide.
We may collect personal data when you interact with the Services, when you register and customize an account, or when you contact us.
3. Purpose of processing personal data
We process your data for the following purposes: to provide you with access to our Services, to provide the Services you have requested, to create and manage your account, to process payment for paid Services, to provide customer support, to send you information about the Services, to send you promotional emails, to analyze and develop technical improvements to the Services, and to comply with our legal obligations.
4. Legal basis for data processing
Depending on the type of personal data and the purpose of the processing, we process personal data based on the following legal grounds:
- You have given us your consent for the processing of data for a specific purpose.
- The processing is necessary for the fulfillment of our obligations under the Agreements.
- The processing is necessary for compliance with legal obligations.
- The processing is necessary for the purpose of our legitimate interest.
We may process your email address to send you information about changes to the Services, introduce new Services, or provide general news about our Services. We have a legitimate interest in keeping you informed about the Services and promoting our Services, which we believe may interest you. You can unsubscribe from these emails at any time by following the unsubscribe link found in the email. We will not use legitimate interest to send promotional emails for third-party services.
We may process your IP address and other technical data automatically when you access the Services. This is because we have a legitimate interest in ensuring the security and integrity of our Services, and by collecting technical data, we can analyze and prevent malicious signals such as too many failed passwords, exploit searches, and similar activities.
We may process information about how you use the Services and interact with the website through third-party analytics tools. We process this data under our legitimate interest in analyzing the performance of the Services and improving them. On our website, analytics run only with your consent. In the application, usage data is associated with your account and your organization so that we can answer your support requests and diagnose errors. Neither the website nor the application records your screen.
We process the content you provide only to deliver the requested Services, provide support, protect the security and integrity of the Services, and comply with legal obligations. VIDEXT does not use Customer Content to train AI models and contractually requires its AI sub-processors not to use Customer Content for model training.
We may use aggregated or de-identified operational information that does not identify a customer, user, or their content to measure reliability, understand product usage, and improve the Services. Any future program that uses Customer Content for model training would require the organization's prior explicit written authorization and an updated notice explaining the scope and applicable controls.
Data from connected Google accounts
When you connect a Google account, Vidext asks Google for read-only access to your Google Drive files, your Google Meet meetings (recordings, transcripts and notes) and the events on the Google calendars you own. Vidext never creates, changes or deletes anything in your Google account. We use this data only for the features you ask for: finding and reading the documents, folders and meetings you choose so that they become the source of your courses and videos.
To do that, the content you choose is processed by the AI providers that power the Services, under agreements that forbid them from using it to train or improve their models. We do not use Google user data, raw or derived, to develop, train or improve generalized AI or machine learning models; we do not sell it, use it for advertising, or transfer it except as needed to provide the features you use, for security, or to comply with the law; and no person at Vidext reads it unless you ask us to, it is needed for security, or the law requires it.
The use of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data from your organization's Google Workspace directory
An administrator of your organization can connect its Google Workspace directory in Settings → Access → Provisioning. A Google Workspace administrator then gives Vidext read-only access to the directory, by installing the Vidext app from the Google Workspace Marketplace or by granting it in the Google Admin console, and can withdraw that access there at any time.
Through this connection Vidext reads, about once an hour: the Workspace's customer ID and primary domain; for each user, their Google ID, name, primary email address, whether they are suspended or archived, and whether they are a Google administrator; and the directory's groups (ID, name and email) and who belongs to each. Vidext never reads email, files, calendars or any other content through this connection, and never creates, changes or deletes anything in the directory.
We use this data only to keep your organization's members in Vidext in step with your directory, as your organization asked: adding people whose email is in your organization's verified domain (or only the people of the groups your administrator chose), updating them, deactivating people who are suspended or removed in Google, and placing them in the teams and roles your administrator mapped to each group. We do this on behalf of your organization, which decides what the directory brings in. The directory data is not sent to AI providers, is not used to train or improve any model, and is not sold, used for advertising or shared with anyone except as needed to provide this feature, for security, or to comply with the law.
We keep the directory record of each person (their Google ID, email and the attributes listed above) and the groups while the connection exists and for as long as your organization keeps them in Vidext. Disconnecting stops every further read; the members it created stay in your organization until an administrator removes them. This data is also subject to the Google API Services User Data Policy and its Limited Use requirements described above.
5. General provisions
Some Services may not be available to you if you do not provide the requested personal data; for example, you will not be able to register for an account if you do not provide your name and email. Additionally, different Services may require additional information that will be requested when ordering the specific Service.
We may keep a record of any questions, complaints, or compliments you make and the response, if any. Whenever you contact us, we will collect any information you choose to provide. We will store and use this information only to respond to your inquiries. We do not sell or rent personal information to third parties.
We use the information collected for our internal and marketing purposes, as necessary for the nature of the Services, and only by this Privacy Policy. In some cases, we are required to comply with court orders and government requests and to provide information or parts of it to authorized agencies.
We have implemented procedures and security measures to ensure adequate protection of the personal data we process against any misuse, unauthorized access, disclosure, or alteration. We recognize that the security of your data is one of the highest priorities, and only authorized processors have access to your information. While we take all appropriate measures to maintain the security of your data, you understand that no data security measures in the world can offer complete protection.
If we ever discover or suspect that a personal data breach has occurred, we will notify the relevant supervisory authority of the breach without delay, within seventy-two (72) hours of becoming aware of it, and users, if necessary.
6. Children's privacy
Our Services are intended for a general audience and are not directed at children under 18 years of age ('minors'). We do not knowingly collect or solicit information from minors, and we do not knowingly allow minors to use the Service.
7. Cookies and third-party services
A cookie is a small piece of text used to store information in web browsers. It remembers information about your visit to our website, such as your preferred settings, and helps us optimize and improve the user experience on the website. Cookies enable us to offer you a more accessible and rewarding service by allowing crucial functionalities.
The cookies we use (and other types of technologies that operate similarly to cookies, which we will refer to as cookies hereafter) may vary over time, as we continually update and improve our Services. You can review our cookie policy here.
You can manage your cookie preferences in your browser or device settings at any time. Depending on the browser and device you use, you may control which cookies you allow, block future cookies, and delete them. For more information about these settings, visit your browser's or device's help page. Please note that some of the Services may not function as intended if you choose to disable cookies.
For more information on how we use cookies and how you can manage your settings, please refer to our Cookie Policy.
8. Storage of personal data
Personal data will be stored on secure servers controlled and maintained by adequate privacy guarantees. We may store or transfer user information to processors located outside of Spain and the European Union, provided that such processors apply appropriate and adequate safeguards regarding the security of personal information.
If you register an account with us, we will store your data while you have an active account. We may retain your data for up to one year after you deactivate your account in our backup system to maintain the integrity of our storage data and handle any claims or requests related to your purchases. We may store some personal data for longer periods if required by applicable law or under our overriding legitimate interest.
9. Data transfers
Your data may be transferred to, and stored in, destinations outside the European Economic Area (EEA) by VIDEXT or one of our service providers. In such cases, we will ensure the implementation of appropriate security measures to ensure an adequate level of protection of your data, by applicable data protection laws.
We may share your data with third parties in the following circumstances:
- a. With third-party service providers who assist us in providing our Services, such as payment processors, email services, hosting providers, and other essential technological functions.
- b. If we sell, transfer, or merge parts of our business or assets. In the event of a change in our company, the new owners may use your data as described in this policy.
- c. If we are legally obliged to share your data to comply with a legal obligation, a court order, or to protect our rights, property, or the safety of our employees, customers, or others.
10. Your rights
We reserve the right to modify our Privacy Policy at any time. The current version of the Privacy Policy is available on the website, indicating the effective date at the top. We recommend that you periodically review our Privacy Policy.