Privacy Policy

Contents of this Privacy Policy

1. Personal information we collect and how we use
2. How we share, transfer, disclose personal information
3. Security of personal data
4. How data subjects manage personal information
5. Policy towards children
6. Cross-border transfer of personal data
7. Updates of this Privacy Policy
8. Contact us

Personal information we collect and how we use

1. Account information. We collect and verify your email address during account creation via a verification code sent to your email to assist you in creating the account. For account creation using social platform logins (e.g., Google), we collect your personal data shared through those platforms and may also collect your nickname and profile photo to assist you in creating the account.
2. User content. We collect the end users’ personal data included in the text, images, or videos the end users’ input, alongside data of feedback and likes/dislikes they make, to achieve the use of relevant functions in the Services.
3. The performance of statutory obligations. Due to an obligation to report any illegal information to the authorities, we need to record and may provide the authorities your account information, the history of the browsing activity on our site, operation time, operation type, source address, destination address, source port, hardware characteristics, the relevant personal information and users’ content. Under the above circumstances, Shengshu may process your information outside the need to obtain the authority and consent from you.
4. Purchase. When you are making purchases, we collect payment details through third-party payment services to manage users’ subscription of our Services.
5. Communicate with you and dispute resolution. When you contact us or make a dispute resolution request, in order to ensure the security of your account and system, we need you to provide the necessary personal information to verify your identity. In order to solve the problem as soon as possible or record the solution, we will save the communication records with you. If you query or complain about specific orders, we will use your account information and order information.
6. Personal information of other subjects. If you provide us the personal information of other users during using Vidu, you need to ensure that you have obtained legal authorization in advance.
7. Marketing. We may collect and use information about you to send you direct marketing communications through E-mail for marketing and advertising purposes. You may opt-out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us. Please note that if you choose to opt-out of marketing-related emails, you may continue to receive service-related and other non-marketing emails.

How we share, transfer, disclose personal information

1. How we share

1. We obtain your separate consent.
2. In the circumstances where your consent is not required according to laws and regulations, such as the processing is necessary for judicial proceeding or on request by administrative and judicial organs according to laws.
3. The proceeding is necessary for the performance of a contract in which you are a party.

1. Payment processors. Any payment card information you use to make a purchase on the Service is collected and processed directly by our payment processors, such as Stripe. Stripe may use your payment data in accordance with its privacy policy, for more detailed information
2. Service improvement, research, and analytics. To help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails. For example, we use Google Analytics for this purpose. You can learn more about Google Analytics and how to prevent the use of Google Analytics relating to your use of our sites.

2. How we transfer

1. We obtain your separate consent.
2. To comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, investigations or requests from government authorities.
3. We transfer to an acquirer, successor, or assignee of Vidu as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets. If so, we will notify you of the name and contact information of the recipient and require the recipient to continue to be bound by this privacy policy, otherwise, we will require them to seek a new authorization from you.

3. How we disclose

1. When we obtain your separate consent or at your request.
2. Where necessary for safety, as well as fraud or other illegal activity prevention or investigation objectives, as far as and to the extent permitted and/or required by applicable laws.

Security of personal data

1. We use reasonable administrative, logical, physical and managerial measures to safeguard your personal information against loss, theft and unauthorized access, use and modification. These measures include hardware encryption and secure transmission technologies and be designed to provide a level of security appropriate to the risks of processing your personal information.
2. We only store your personal data as long as required by the purposes they have been collected for, unless there is special requirement under applicable laws.

1. whether you consent to a longer period.
2. whether it can meet your purpose, our business records, and whether it can respond to your potential inquiries or complaints.
3. whether it can meet the security and quality of the services we provide for you.
4. Whether there is any other special agreement on the retention period according to this policy.

3. In case of an unfortunate personal information security incident, we will inform you, in accordance with the requirements of laws and regulations, of the basic situation and possible impact of the security incident, the measures we have taken or will take to deal with it, suggestions on measures you can take to prevent and reduce risks, and remedies for you. We will inform you by email, letter, telephone, push notification, etc. When it is difficult to inform, we will make an announcement in reasonable and effective way. At the same time, we may also report the incident to relevant regulators as required by local law.

How data subjects manage personal information

1. You have various rights concerning your personal data. If you would like to exercise any of the following rights, please contact us through the information provided in “8. Contact us”. If you are located in the European economic area (EEA), you have the following rights regarding your personal data collected by us:
2. Right of access You have the right to receive information about your personal data processed by us upon request.
3. Right to rectification You have the right to correct your personal data if it is incorrect.
4. Right to erasure You have the right to obtain from us, under the following conditions, the deletion of your personal data when:
   1. the respective processing purpose has been achieved;
   2. we have unlawfully processed your personal data;
   3. you have withdrawn your consent without another legal basis applying to the data processing;
   4. you have objected to the data processing; or
   5. in cases where there is an obligation to delete personal data on the basis of applicable laws.
5. Right to restriction of processing You have the right to request us to process your personal data only to a restricted extent under the following conditions:
   1. the accuracy of your personal data is contested;
   2. you request limited processing instead of deletion under the conditions of a justified right of erasure;
   3. the data is no longer required for the purposes pursued by us, but you need the data to assert, exercise or defend legal claims; or
   4. the success of an objection is still disputed.
6. Right to data portability You have the right to receive from us personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, as well as the right to request us to forward this personal data to another controller under the following conditions:
   1. the data processing is based on consent; or
   2. the processing is carried out by automated means.
7. Right to object You have the right to object to the processing of your personal data. If you object, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims on our part.
8. Right to withdraw your consent You have the right to withdraw consent given to us at any time. As a result, we are no longer allowed to continue the processing based on this consent in the future. This does not affect the legality of the processing carried out on the basis of the consent up to the point of withdrawal.
9. Complaints In addition, you have the right to file a complaint with a data protection authority on our collecting and processing of your personal data.
10. If you are the “consumer” in California, the U.S, subject to certain exceptions and limitations described in CCPA, you have the following rights with respect to your personal information:
    1. Request access to the personal information. You have the right to request the following information from us:
       1. Categories and/or specific pieces of personal information we have collected about you.
       2. Categories of sources from which the personal information is collected.
       3. Purpose(s) for using your personal information.
       4. Categories of personal information sold, shared, or disclosed (if any).
       5. Categories of third parties with whom the personal information shared or disclose (if any).
    2. Request us to delete your personal information we have collected about you.
    3. Request us to correct inaccurate personal information we have maintained about you.
    4. Opt out from the "sale" or “sharing” of your personal information. Please note that we do not sell or share your personal information as defined by CCPA. The meaning of “sale” or “sharing” under CCPA is broad and includes certain types. If you notice that we conduct any activity that may constitute the “sale” or “sharing” of your personal information, and you are seeking to exercise your right of “Do Not Sell or Share My Personal Information” or for further information, please send a respective request to the contact details outlined in “8. Contact us”.
11. Request to limit the use and disclosure of your sensitive personal information. According to relevant definition of CCPA, we do not collect your sensitive personal information for the purpose of providing our Services. If you notice that we collect any sensitive personal information from you, where, for example, sensitive personal information is included in the text, image, or video you input, and you are seeking to exercise your right of “Limit the Use of My Sensitive Personal Information”, please send a respective request to the contact details outlined in “8. Contact us”.
12. Be free from unlawful discrimination for exercising your privacy rights under the CCPA. You have the right not to be denied services, charged different prices or rates for services, or receive a differing level of quality of services as a result of exercising the above rights.
13. Appeal decisions where we deny your rights request.

Policy towards children

Cross-border transfer of personal data

• if your personal data is transferred to countries/territories with adequacy decision, the cross-border transfer is subject to the mechanism of an adequacy decision (Art 45 of the GDPR); or
• if your personal data is transferred to other countries/territories, we will evaluate the ability of personal data protection and network security safeguards and take measures set out in Art 46(2) of the GDPR. You can obtain copies of the applicable safeguards from us by sending a respective request to the contact details outlined in “8. Contact us”.

Updates of this Privacy Policy

• Significant changes in our product or service model, such as the purpose of the processing of personal information, the category of processed personal information, the processing method, etc.
• Significant changes in control such as the change of information controller caused by mergers and acquisitions.
• That to whom we share, transfer or disclosure personal information has changed.
• The way you manage your personal information changes significantly.
• Our contact way changes.
• Some assessment about security indicates high risk.

Contact us