Privacy Policy

Effective Date: October 28, 2025

This Privacy Policy explains how S.A.T.D LTD, registered under HE 404591 with its office at Sokratous, 2 Mesa Geitonia, 4006, Limassol, Cyprus ("The Company"), processes the personal data of The Customer through the service website vidtrixia.com ("The Service").

The Company is committed to protecting The Customer's privacy in compliance with the General Data Protection Regulation (GDPR).

1. Data Controller and Contact Details

Data Controller: S.A.T.D LTD

Registration Number: HE 404591

Address: Sokratous, 2 Mesa Geitonia, 4006, Limassol, Cyprus

Contact Email: info@vidtrixia.com

2. Data Collected

2.1. Account and Registration Data

Email address, username, and hashed password.

Billing address (for tax/legal purposes).

2.2. Transaction and Billing Data

Transaction history, date, and time of purchases.

Financial data on Tokens purchased, consumed, and remaining.

Payment details handled securely by third-party processors (e.g., Stripe, PayPal).

2.3. User-Generated Content and Technical Data

Input Data: Prompts, text, and images provided by The Customer.

Output Data: Generated videos created by the AI model.

Metadata: Device info, browser type, IP address, timestamps.

2.4. Usage and Technical Data

Pages viewed, time spent, and crash reports.

Cookies, pixel tags, and analytics tracking data.

3. How The Company Uses The Customer’s Data (GDPR Legal Basis)

Service Provision: Account, Input, Output, and Usage Data — based on Contract performance.

Billing & Token Management: Financial and Account Data — to fulfill payment obligations.

Service Improvement: Anonymized Input/Output Data — legitimate interest.

Legal Compliance: Account and Transaction Data — required by law.

Marketing Communications: Email Address — based on consent.

Fraud Prevention: Account, Usage, and Technical Data — legitimate interest.

4. Data Retention

Account Data: Retained for the duration of the account plus 12 months.

Generated Videos: Stored for 30 days from creation.

Input Prompts: Retained up to 6 months for service improvement.

Transaction Data: Retained for at least 7 years (legal compliance).

5. Sharing The Customer’s Personal Data

Payment Processors: e.g., Stripe, PayPal for secure payments.

Cloud Hosting Providers: e.g., AWS, Google Cloud (EU/EEA-compliant).

AI Model Providers: For AI generation tasks under confidentiality agreements.

Legal Authorities: As required by law or court orders.

6. The Customer’s GDPR Rights

Right to Access personal data.

Right to Rectification of inaccurate data.

Right to Erasure (“Right to be Forgotten”).

Right to Restrict or Object to Processing.

Right to Data Portability to another controller.

Right to Lodge a Complaint with an EU supervisory authority.

To exercise these rights, contact info@vidtrixia.com.

7. Changes to This Privacy Policy

The Company may update this Policy from time to time. Customers will be notified by email or via a notice on the Service. The “Effective Date” will indicate the most recent version.