Viblo AI – Privacy Policy

1. Introduction

This is the Privacy Policy of Viblo AI, a product of Viblo AI LLC, with its registered address at 1309 Coffeen Ave Ste 1200, Sheridan, Wyoming 82801, United States of America.

Viblo AI provides an AI-powered video creation and editing platform, enabling users to generate faceless videos, add voiceovers, create captions, clip content, and produce short-form video content. This Privacy Policy explains how we collect, use, store, and share personal data of individuals who use our services, including our platform, website (viblo.ai), and other products and services ("Services").

At Viblo AI, we take your privacy seriously. Please read this Privacy Policy to learn how we treat your personal data. By using or accessing our Services in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use, and share your information as described in this Privacy Policy.

Your use of Viblo AI's Services is at all times subject to our Terms of Service which incorporates this Privacy Policy. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Service.

This Privacy Policy does not cover the practices of companies we do not own or control, or people we do not manage.

2. Scope – What Does This Policy Cover?

This Privacy Policy covers how we process Personal Data that we gather when you access or use our Services.

"Personal Data" means any information relating to an identified or identifiable individual, such as a name, email address, IP address, or billing details. This also includes information referred to as "personally identifiable information" or "personal information" under applicable data privacy laws.

3. Information We Collect

Categories of Personal Data

The following table details the categories of Personal Data that we collect and have collected over the past 12 months:

Profile and Contact Data

• First and last name
• Email address
• Phone number (if provided)

Purpose: Account creation, authentication, customer support

Legal Basis (GDPR): Contractual necessity

Shared With: Service providers, analytics partners

Payment and Billing Data

• Purchase and subscription history
• Billing address, payment method type, last 4 digits of card, expiry date

Purpose: Process payments and manage subscriptions

Legal Basis (GDPR): Contractual necessity

Shared With: Payment processor (Stripe)

Note: Full payment card information is collected and processed directly by our payment processor, Stripe, Inc. We do not store your complete credit card details on our servers. Your payment data is handled in accordance with Stripe's Privacy Policy.

Device and Technical Data

• IP address
• Device type, operating system, browser type and version
• Device identifiers

Purpose: Service security, troubleshooting, analytics, fraud detection

Legal Basis (GDPR): Legitimate interest

Shared With: Analytics partners, service providers

Usage Data

• Login timestamps
• Pages and features visited
• Account activity and video generation history
• Referring webpage or source through which you accessed the Services
• Session statistics and interaction events

Purpose: Improve our platform, detect fraud, provide support, measure performance

Legal Basis (GDPR): Legitimate interest

Shared With: Analytics partners, service providers

User-Generated Content

• Videos, images, audio files, scripts, and transcripts uploaded to or created within the platform

Purpose: Provide video editing and generation features, improve Services

Legal Basis (GDPR): Contractual necessity, legitimate interest

Shared With: Service providers (hosting, AI processing)

Geolocation Data

• IP address-based location information
• Browser timezone

Purpose: Detect suspicious logins, payment fraud prevention, localisation

Legal Basis (GDPR): Legitimate interest

Shared With: Service providers, analytics partners

Special Categories of Personal Data

Viblo AI does not request, collect, or intentionally process any "special categories of personal data" within the meaning of Article 9 of the GDPR — that is, data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic or biometric data for uniquely identifying a person, health information, or data concerning a person's sex life or sexual orientation. We ask that you do not upload or otherwise share such information when you use the Services.

Sources of Personal Data

We collect Personal Data from the following sources:

• Directly from you — when you create an account, subscribe, contact support, respond to surveys, or use our interactive tools and Services.
• Automatically — when you use the Services, through cookies, server logs, and similar technologies (see Section 6 below).
• Third-party vendors — analytics providers who help us understand how users interact with the Services, and advertising partners who assist with marketing.

4. How We Use Your Information

We use the Personal Data we collect for the following purposes:

• Providing and improving the Services — creating and managing your account, processing orders and subscriptions, providing the features and tools you request, personalising your experience, conducting internal analytics and product development, and debugging.
• Communications — sending service-related communications (welcome emails, billing reminders, policy updates, security alerts), and responding to your support requests.
• Fraud prevention and security — detecting, investigating, and preventing fraudulent or unauthorised transactions, and protecting the security of your account and our platform.
• Marketing — with your consent where required, sending promotional communications about new features or offers. You may opt out of marketing communications at any time.
• Legal compliance — fulfilling our legal obligations, enforcing our Terms of Service, responding to legal process, and protecting the rights, property, or safety of Viblo AI, our users, or third parties.

We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated, or incompatible purposes without providing you notice.

5. How We Share Your Data

We do not sell or rent your Personal Data to third parties.

We may disclose your Personal Data to the following categories of recipients:

• Service Providers — third parties who perform services on our behalf, including hosting and infrastructure providers, payment processors (currently Stripe), email delivery services, analytics providers, AI processing providers, and customer support tools. These providers are given Personal Data only as needed to perform their designated functions and are not authorised to use it for their own marketing or other purposes.
• Analytics Partners — companies that help us understand how users find, interact with, and use the Services (e.g., Google Analytics).
• Legal and Regulatory — any relevant party, regulatory body, governmental authority, law enforcement agency, or court, where required by law, regulation, legal process, or enforceable governmental request, or where necessary for the establishment, exercise, or defence of legal claims.
• Business Transfers — in the event of a merger, acquisition, reorganisation, dissolution, or sale of all or a portion of our business or assets, your Personal Data may be transferred to the successor entity. We will make reasonable efforts to notify you before your information becomes subject to a different privacy policy.
• With Your Consent — we may share information with third parties when you have given us explicit consent to do so.

6. Cookies and Tracking Technologies

The Services use cookies and similar technologies such as pixel tags, web beacons, and JavaScript (collectively, "Cookies") to enable our servers to recognise your web browser, analyse trends, learn about our user base, and operate and improve our Services.

Types of Cookies We Use

• Essential Cookies — required for providing you with core features and services, such as logging into your account. Disabling these cookies may make certain features unavailable.
• Functional Cookies — used to record your choices and settings, maintain your preferences over time, and recognise you when you return to our Services.
• Performance and Analytical Cookies — allow us to understand how visitors use the Services by collecting information such as the number of visitors, pages viewed, and time spent. We may use Google Analytics for this purpose. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on
• Advertising and Retargeting Cookies — collect data about your online activity and identify your interests so that we can provide relevant advertising.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling cookies may affect the functionality of certain parts of the Services.

For more information about cookies, visit www.allaboutcookies.org or, if you are in the European Union, ico.org.uk/for-the-public/online/cookies

7. Data Retention

We retain Personal Data for as long as necessary to provide you with our Services, fulfil the purposes described in this Policy, or as required by applicable law. When establishing a retention period, we consider the nature and sensitivity of the data, the purposes for which we process it, and applicable legal requirements.

For example:

• Account data — retained for as long as you maintain an active account with us.
• Payment and billing records — retained as required for tax, accounting, and legal compliance purposes.
• Usage logs — retained for fraud detection, dispute resolution, and platform improvement, then deleted or anonymised.
• Marketing preferences — retained until you withdraw consent or unsubscribe.

When Personal Data is no longer needed, we will delete or anonymise it. We may retain information in an anonymous or aggregated form where it would not identify you personally.

8. Data Security

We take data security seriously and have implemented appropriate technical, organisational, physical, and administrative safeguards designed to protect your Personal Data from unauthorised access, use, alteration, and disclosure. These measures include:

• SSL/TLS encryption for data in transit
• Encryption of data at rest
• Access controls restricting customer data to authorised personnel only
• Regular security reviews and monitoring
• PCI-compliant payment processing via Stripe

Notwithstanding these measures, no method of transmitting data over the internet or storing data is completely secure. We cannot guarantee the absolute security of your Personal Data. You are responsible for maintaining the security of your account credentials and should notify us immediately if you suspect any unauthorised access.

9. International Data Transfers

Viblo AI is based in the United States. If you access our Services from outside the United States, your Personal Data may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

These countries may have data protection laws that differ from those of your jurisdiction. By using the Services, you acknowledge and consent to the transfer of your data to these jurisdictions.

Where we transfer Personal Data from the European Economic Area (EEA), United Kingdom (UK), or Switzerland to a country that has not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• UK International Data Transfer Addendum where applicable
• Other legally recognised transfer mechanisms

We enter into Data Processing Agreements with our sub-processors to ensure an appropriate level of data protection.

10. Your Rights Under the GDPR (EEA and UK Users)

If you are located in the European Economic Area or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:

• Right of Access — you can request confirmation of whether we process your Personal Data and obtain a copy of it.
• Right to Rectification — you can request that we correct any inaccurate or incomplete Personal Data.
• Right to Erasure ("Right to be Forgotten") — you can request that we delete your Personal Data, subject to certain legal exceptions.
• Right to Restriction of Processing — you can request that we restrict processing of your Personal Data in certain circumstances.
• Right to Data Portability — you can request a copy of your Personal Data in a structured, commonly used, and machine-readable format.
• Right to Object — you can object to the processing of your Personal Data based on our legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent — where we rely on your consent to process your Personal Data, you may withdraw that consent at any time, without affecting the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint — you have the right to lodge a complaint with your local data protection supervisory authority.

Viblo AI LLC is the data controller for Personal Data processed in connection with the Services.

To exercise any of these rights, please contact us at support@viblo.ai. We will respond to your request within 30 days, as required by applicable law.

11. Your Rights Under U.S. State Privacy Laws

If you reside in certain U.S. states — including California, Colorado, Connecticut, Virginia, Texas, Oregon, and others with applicable consumer privacy legislation — you may have the following rights:

• Right to Know / Access — you may request confirmation of whether we process your Personal Data and access to the categories and specific pieces of Personal Data we have collected about you.
• Right to Deletion — you may request that we delete your Personal Data, subject to certain legal exceptions.
• Right to Correction — you may request that we correct inaccurate Personal Data.
• Right to Portability — you may request a copy of your Personal Data in a portable format, to the extent technically feasible.
• Right to Opt Out of Sale or Sharing — you may opt out of the "sale" or "sharing" of your Personal Data, as those terms are defined under applicable state privacy laws. Viblo AI does not sell your Personal Data. If we engage in any activity that may constitute "sharing" under applicable law (e.g., for targeted advertising), you may opt out by contacting us.

California residents (CCPA/CPRA): We will not discriminate against you for exercising your privacy rights. We do not use or disclose sensitive personal information for purposes beyond those set forth in Section 7027(m) of the CCPA regulations.

To exercise your rights, please contact us at support@viblo.ai. We will respond within the timeframe required by applicable law (30 days under CCPA, with the possibility of a 45-day extension where reasonably necessary).

12. Your Rights Under the Australian Privacy Act (APP Compliance)

If you are located in Australia, you have the following rights under the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth):

• Access — you may request access to the Personal Data we hold about you.
• Correction — you may request corrections to any inaccurate, out-of-date, incomplete, irrelevant, or misleading Personal Data.
• Complaints — you have the right to lodge a complaint with us if you believe we have breached the APPs. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC).

To exercise your rights, please contact us at support@viblo.ai.

13. Children's Privacy

The Services are not directed to individuals under the age of 16, and we do not knowingly collect or solicit Personal Data from children under 16 years of age. If you are under 16, please do not attempt to register for or otherwise use the Services, and do not send us any Personal Data.

If we learn that we have collected Personal Data from a child under 16, we will delete that information as quickly as possible. If you believe that a child under 16 may have provided us with Personal Data, please contact us at support@viblo.ai.

14. Third-Party Links and Services

The Services may contain links to third-party websites, applications, or services that are not owned or controlled by Viblo AI. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

Our Privacy Policy applies only to our Services and does not extend to any third-party websites or services linked from within our platform.

15. Sub-Processors

We use trusted third-party sub-processors to help deliver and improve our Services. These sub-processors process Personal Data on our behalf and are contractually bound to protect your data in accordance with applicable data protection laws.

Our current sub-processors include providers for:

• Cloud hosting and infrastructure
• Payment processing (Stripe)
• Email delivery
• Analytics
• AI processing and content generation
• Customer support

We reserve the right to engage new sub-processors, provided they meet appropriate standards of security and data protection. We enter into Data Processing Agreements with all sub-processors.

For a current list of sub-processors, please contact us at support@viblo.ai.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on this page with a revised “Last Updated” date, and where appropriate, by sending you an email or providing a notice through the Services.

Your continued use of the Services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

17. Access to Third-Party Accounts – Facebook

Facebook account access Permissions: About Me, Access Friend Lists, Access Page CTA, Access Requests, App Notifications, Contact email, Custom User Actions, Email, Friend subscriptions, Interests, Likes, List of Friends, Manage Friend Lists, Manage Groups, Manage Pages, Mobile Messaging on behalf of Page, News Feed and Wall, Page Messaging, Photos, Publish as Page, Publish to the Wall, Share, Show List of Managed Pages, Status, Status Updates, Text Messaging, Upload Photos, User subscriptions, User Timeline Posts Access, Video upload, video.watches Action, Videos and Website

Stripe account access and Twitter account access

Personal Data: various types of Data as specified in the privacy policy of the service

18. Access to Third-Party Accounts – YouTube

YouTube account access Permissions: Upload videos, manage videos and playlists, view YouTube account profile details (channel name, ID, and email address).

Use of Google User Data:

Our application accesses Google user data through YouTube API services to allow users to upload and manage videos on their YouTube channels. This data is used exclusively for providing video publishing services initiated by the user. We do not use Google user data for any other purpose.

Sharing and Disclosure:

We do not share, sell, or transfer Google user data to any third parties except as necessary to operate the core functionality of our services or as required by law.

Data Protection Measures:

We implement industry-standard security measures to protect Google user data, including encryption, secure data storage, and access control measures to prevent unauthorized access, disclosure, or misuse of data.

Data Retention and Deletion:

We retain Google user data only as long as necessary to provide our services or as required by applicable law. Users can request deletion of their Google user data at any time by contacting support@viblo.ai or by revoking our application's access through the Google security settings page: https://myaccount.google.com/permissions.

Compliance with Google Policies:

Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.

19. Access to Third-Party Accounts – TikTok

TikTok Account Access Permissions: Our application may request access to your TikTok account to retrieve basic profile information (such as your username, profile picture, and account ID) and to enable publishing, scheduling, and managing video content on your behalf, subject to the permissions you authorize.

Use of TikTok User Data:

We use data obtained through TikTok's APIs solely to provide features such as content publishing, scheduling, media management, analytics (where available), and account management within our platform. We only access the information necessary to provide the services you explicitly request.

Sharing and Disclosure:

We do not sell, rent, or share TikTok user data with third parties except as necessary to provide our services, comply with legal obligations, or protect our legal rights.

Data Protection Measures:

TikTok user data is protected using industry-standard security measures, including encryption, secure storage, and access controls designed to prevent unauthorized access, disclosure, or misuse.

Data Retention and Revocation:

We retain TikTok user data only for as long as necessary to provide our services or as required by applicable law. You may revoke our application's access at any time through your TikTok account settings. Once access is revoked, we will delete stored TikTok user data unless we are legally required to retain it.

Compliance with TikTok Policies:

Our use of TikTok APIs and related user data complies with TikTok's Developer Terms and applicable API policies.

20. Access to Third-Party Accounts – Instagram

Instagram Account Access Permissions: Our application may request access to your Instagram account to retrieve basic profile information (such as your username, profile picture, account ID, and business account details where applicable) and to publish, schedule, and manage content on your behalf.

Use of Instagram User Data:

We use Instagram data obtained through Meta's APIs solely to provide features such as content publishing, scheduling, account management, media retrieval, analytics (where available), and user-authorized automation. We access only the information necessary for the features you choose to use.

Sharing and Disclosure:

We do not sell, rent, or disclose Instagram user data to third parties except where necessary to provide our services, comply with legal obligations, or protect our legal rights.

Data Protection Measures:

Instagram user data is protected using industry-standard encryption, secure storage, and access control mechanisms to maintain confidentiality and integrity.

Data Retention and Revocation:

You may revoke our application's access through your Meta/Facebook account settings at any time. Upon revocation, we will delete stored Instagram user data unless retention is required by law.

Compliance with Instagram Policies:

Our use of Instagram APIs and related data complies with Meta Platform Terms, Instagram Platform Policies, and applicable developer requirements.