Privacy Policy
ShengShu AI HK Limited (“we” or “Shengshu”) value your trust. During providing services, we know the importance of the privacy of you and end users, here we are committed to try our best to protect the privacy and security of your personal data according to the applicable law.
Now therefore we make this Privacy Policy. This Privacy Policy applies to personal data processing activities through the official website of Vidu, our API, and any related technical products (collectively, "Vidu" or "Services"). If our other products or services integrate Vidu, but do not have a separate privacy policy, then this policy shall also apply to such products or services. If there are any, then the separate privacy policy shall apply.
In addition, it is hereby specifically noted that this Privacy Policy shall not apply to other services provided by third parties. For a description of how those sites may use and disclose your information, please consult those sites' privacy policies.
Before using Vidu, please read and fully comprehend this Privacy Policy, especially the terms highlighted in bold. Please use only after confirming that you have fully understood and agreed to them. Your action of clicking the “agree” signifies that you have understood the functionalities provided by Vidu, as well as the necessary personal information required for the operation of these functionalities, and authorize us to collect and use it. If you do not agree to accept this Privacy Policy, it will result in your inability to use our services.
Besides this Privacy Policy, we may state the purpose, method, and scope of extra processing to you through page tips, interactive processes, website announcements, etc., and obtain your consent again. All of these constitutes part of this Privacy Policy and have the same effect as this Privacy Policy. If you have any complaints about the security of your personal information, or have any questions, or suggestions about this Privacy Policy, you can contact us by sending a respective request to the contact details outlined in “8. Contact us”.
Contents of this Privacy Policy
- Personal information we collect and how we use
- How we share, transfer, disclose personal information
- Security of personal data
- How data subjects manage personal information
- Policy towards children
- Cross-border transfer of personal data
- Updates of this Privacy Policy
- Contact us
ShengShu AI HK Limited acts as the data controller for personal data obtained during your interaction with our Services for personal use. In certain instances, we function as a processor on behalf of our commercial customers. In these cases, the customers retain ultimate responsibility for the personal data of end users.
Personal information we collect and how we use
We collect personal data minimally necessary for the provision of our Services that limited to the basic functions. Beyond the basic functions, you may independently decide whether to provide us more personal information to use the extended functions we offer. This data may be directly provided by you, third parties, or collected automatically during your usage of our Services.
-
Account information.
We collect and verify your email address during account creation via a verification code sent to your email to assist you in creating the account. For account creation using social platform logins (e.g., Google), we collect your personal data shared through those platforms and may also collect your nickname and profile photo to assist you in creating the account. -
User content.
We collect the end users’ personal data included in the text, images, or videos the end users’ input, alongside data of feedback and likes/dislikes they make, to achieve the use of relevant functions in the Services. -
The performance of statutory obligations.
Due to an obligation to report any illegal information to the authorities, we need to record and may provide the authorities your account information, the history of the browsing activity on our site, operation time, operation type, source address, destination address, source port, hardware characteristics, the relevant personal information and users’ content. Under the above circumstances, Shengshu may process your information outside the need to obtain the authority and consent from you. -
Purchase.
When you are making purchases, third-party payment service providers will collect your payment details. We may or may not collect such payment details from them to manage users’ subscription of our Services. -
Communicate with you and dispute resolution.
When you contact us or make a dispute resolution request, in order to ensure the security of your account and system, we need you to provide the necessary personal information to verify your identity. In order to solve the problem as soon as possible or record the solution, we will save the communication records with you. If you query or complain about specific orders, we will use your account information and order information. -
Personal information of other subjects.
If you provide us the personal information of other users during using Vidu, you need to ensure that you have obtained legal authorization in advance. -
Marketing.
Where permitted under applicable data protection laws and based on your marketing preferences, we may directly or indirectly (via our third-party data processors who act for and on behalf of us) use your Information to send you marketing, advertising, and promotional communications, including direct marketing communications, relating to our Services (including without limitation general updates and product offers from us). If you express interest in our Services, subscribe to updates, or otherwise engage with us, to the fullest extent permissible by applicable laws, we may send you relevant communications based on your relationship with us and your consent or preferences. We will only send you such communications where we have a valid legal basis to do so, which may include your consent where required under applicable law, or our legitimate interests in promoting and improving our Services to the fullest extent permissible by applicable law, provided that such interests are not overridden by your rights and freedoms under applicable law. Where required, we will obtain your consent before sending marketing communications, and we cannot and will not so use your personal data for direct marketing purposes unless we have received your consent to such use. You may opt out of receiving marketing communications at any time by using the unsubscribe mechanism provided in each communication or by contacting us directly via the channels stated in “Contact us” section below. Where you opt out or withdraw consent, we will cease sending you marketing communications without undue delay and without charge to you, and such withdrawal will not affect the lawfulness of any processing carried out prior to that point, subject to applicable legal requirements. Please note that if you choose to opt-out of marketing-related emails, you may continue to receive service-related and other non-marketing emails.
How we share, transfer, disclose personal information
1. How we share
Shengshu will not share your personal information with a third party other than our service providers unless:
-
(1) We obtain your separate consent.
-
(2) In the circumstances where your consent is not required according to laws and regulations, such as the processing is necessary for judicial proceeding or on request by administrative and judicial organs according to laws.
-
(3) The proceeding is necessary for the performance of a contract in which you are a party.
We may share your personal data with partners and third-party service providers who assume confidentiality obligations regarding your personal data collected. Your personal data might be shared for functions like purchasing, billing, content reviewing, and technical services including cloud services. We will conclude data processing agreements or joint controller agreements, as applicable, with such third-party service providers to ensure that your personal data will be processed by these third parties in a safe and legal way. So far the circumstance we share your personal information to the third party includes:
-
(1) Payment processors.
Any payment card information you use to make a purchase on the Service is collected and processed directly by our payment processors, such as Stripe. Stripe may use your payment data in accordance with its privacy policy, for more detailed information. -
(2) Service improvement, research, and analytics.
To help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails. For example, we use Google Analytics for this purpose. You can learn more about Google Analytics and how to prevent the use of Google Analytics relating to your use of our sites.
2. How we transfer
Shengshu will not transfer your personal information to a third party unless:
-
(1) We obtain your separate consent.
-
(2) To comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, investigations or requests from government authorities.
-
(3) We transfer to an acquirer, successor, or assignee of Vidu as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets. If so, we will notify you of the name and contact information of the recipient and require the recipient to continue to be bound by this privacy policy, otherwise, we will require them to seek a new authorization from you.
3. How we disclose
Shengshu may disclose your personal data:
-
(1) When we obtain your separate consent or at your request.
-
(2) Where necessary for safety, as well as fraud or other illegal activity prevention or investigation objectives, as far as and to the extent permitted and/or required by applicable laws.
Security of personal data
1. We use reasonable administrative, logical, physical and managerial measures to safeguard your personal information against loss, theft and unauthorized access, use and modification. These measures include hardware encryption and secure transmission technologies and be designed to provide a level of security appropriate to the risks of processing your personal information.
2. We only store your personal data as long as required by the purposes they have been collected for, unless there is special requirement under applicable laws.
In general, we will store your personal data for necessary time period to meet legal or regulatory requirements, especially to comply with commercial and tax retention obligations, to resolve potential disputes or to preserve evidence within the scope of the statutory limitation provisions. Should this be the case, we will retain the personal data concerned until the end of the respective statutory period.
Thereafter, your personal data will be deleted as required by laws or made into anonymized data.
3. In case of an unfortunate personal information security incident, we will inform you, in accordance with the requirements of laws and regulations, of the basic situation and possible impact of the security incident, the measures we have taken or will take to deal with it, suggestions on measures you can take to prevent and reduce risks, and remedies for you. We will inform you by email, letter, telephone, push notification, etc. When it is difficult to inform, we will make an announcement in reasonable and effective way. At the same time, we may also report the incident to relevant regulators as required by local law.
How data subjects manage personal information
You have various rights concerning your personal data. If you would like to exercise any of the following rights, please contact us through the information provided in “8. Contact us”. If you are located in the European economic area (EEA), you have the following rights regarding your personal data collected by us:
1. Right of access. You have the right to receive information about your personal data processed by us upon request.
2. Right to rectification. You have the right to correct your personal data if it is incorrect.
3. Right to erasure. You have the right to obtain from us, under the following conditions, the deletion of your personal data when:
4. Right to restriction of processing. You have the right to request us to process your personal data only to a restricted extent under the following conditions:
5. Right to data portability. You have the right to receive from us personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, as well as the right to request us to forward this personal data to another controller under the following conditions:
-
(1) the data processing is based on consent; or
-
(2) the processing is carried out by automated means.
6. Right to object. You have the right to object to the processing of your personal data. If you object, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims on our part.
7. Right to withdraw your consent. You have the right to withdraw consent given to us at any time. As a result, we are no longer allowed to continue the processing based on this consent in the future. This does not affect the legality of the processing carried out on the basis of the consent up to the point of withdrawal.
8. Complaints. In addition, you have the right to file a complaint with a data protection authority on our collecting and processing of your personal data.
9. If you are the “consumer” in California, the U.S, subject to certain exceptions and limitations described in CCPA, you have the following rights with respect to your personal information:
-
(1) Request access to the personal information. You have the right to request the following information from us:
l Categories and/or specific pieces of personal information we have collected about you.
l Categories of sources from which the personal information is collected.
l Purpose(s) for using your personal information.
l Categories of personal information sold, shared, or disclosed (if any).
l Categories of third parties with whom the personal information shared or disclose (if any). -
(2) Request us to delete your personal information we have collected about you.
-
(3) Request us to correct inaccurate personal information we have maintained about you.
-
(4) Opt out from the "sale" or “sharing” of your personal information. Please note that we do not sell or share your personal information as defined by CCPA. The meaning of “sale” or “sharing” under CCPA is broad and includes certain types. If you notice that we conduct any activity that may constitute the “sale” or “sharing” of your personal information, and you are seeking to exercise your right of “Do Not Sell or Share My Personal Information” or for further information, please send a respective request to the contact details outlined in “8. Contact us”.
10. Request to limit the use and disclosure of your sensitive personal information. According to relevant definition of CCPA, we do not collect your sensitive personal information for the purpose of providing our Services. If you notice that we collect any sensitive personal information from you, where, for example, sensitive personal information is included in the text, image, or video you input, and you are seeking to exercise your right of “Limit the Use of My Sensitive Personal Information”, please send a respective request to the contact details outlined in “8. Contact us”.
11. Be free from unlawful discrimination for exercising your privacy rights under the CCPA. You have the right not to be denied services, charged different prices or rates for services, or receive a differing level of quality of services as a result of exercising the above rights.
12. Appeal decisions where we deny your rights request.
Policy towards children
Vidu is not intended for children. You should have your end users informed that they must be of legal age as stipulated by applicable laws of each country/region to register. If we detect or learn any registration or activities by children, we may invalidate the registration and remove relevant data collected.
Cross-border transfer of personal data
Personal data may be transferred to the countries/regions outside the countries/regions where you reside for processing in line with this Privacy Policy. These countries may not have similar data protection laws as the applicable laws where you located. We will however take all necessary measures to protect your personal data in accordance with applicable data protection laws.
If you reside in the EEA:
l if your personal data is transferred to countries/territories with adequacy decision, the cross-border transfer is subject to the mechanism of an adequacy decision (Art 45 of the GDPR); or
l if your personal data is transferred to other countries/territories, we will evaluate the ability of personal data protection and network security safeguards and take measures set out in Art 46(2) of the GDPR. You can obtain copies of the applicable safeguards from us by sending a respective request to the contact details outlined in “8. Contact us”.
By using our Services, you understand and acknowledge that your personal data will be transferred and stored in the facilities and servers in Singapore.
Updates of this Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. If this Privacy Policy changes in any way, we will post an updated version on this page. Any significant changes will be notified to you in more prominent way (including public solicitation of opinions, announcements and even pop-up window prompts). We will store the historical versions of this Privacy Policy in our documentation archive. We recommend you regularly review this page to ensure that you are always aware of our information practices and any change. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service and our business. The significant changes refer to:
Significant changes in our product or service model, such as the purpose of the processing of personal information, the category of processed personal information, the processing method, etc.
l Significant changes in control such as the change of information controller caused by mergers and acquisitions.
l That to whom we share, transfer or disclosure personal information has changed.
l The way you manage your personal information changes significantly.
l Our contact way changes.
l Some assessment about security indicates high risk.
Contact us
For questions or concerns about our use of your personal data, please contact us using the following details:
Tel: (00852)2206 0092 Email: ~[platform@vidu.studio](mailto: platform@vidu.studio)~
Address: Room 06，13A/F., South Tower, World Finance Centre, Harbour City, 17 Canton Road, Tsim Sha Tsui, Kowloon, Hong Kong
In order to provide a response, we may ask that you provide clarifying or identifying information to verify your request. We will respond your verified requests within 15 days pursuant. If necessary, extensions will be accompanied by a notification with explanation for the delay.