Privacy Policy

Last updated: 2026

1. Introduction

VMap ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI video generation platform.

2. Data We Collect

We collect the following types of information:

Personal Information

  • Account information (name, email, profile picture)
  • Payment information (processed through third-party providers)
  • Communication data (support tickets, feedback)

Usage Data

  • Video generation history and preferences
  • Access logs and analytics
  • Device information and IP addresses

User Content

  • Images and prompts you upload for video generation
  • Generated videos (stored for your access)

3. How We Use Your Data

We use your data for the following purposes:

  • Service Delivery: To provide and maintain our AI video generation services
  • Account Management: To manage your account and provide customer support
  • Payment Processing: To process transactions through our payment providers (Creem, Stripe)
  • Analytics: To understand how our services are used and improve them
  • Communications: To send you important updates and marketing communications (with your consent)
  • Security: To detect and prevent fraud, abuse, and security incidents

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on:

  • Consent: When you have given clear consent for us to process your personal data
  • Contract: When processing is necessary for the performance of a contract with you
  • Legitimate Interest: When processing is necessary for our legitimate business interests
  • Legal Obligation: When we need to comply with legal obligations

5. Data Sharing and Transfers

Third-Party Service Providers

We share data with the following categories of third parties:

  • AI Providers: Evolink, Kie (for video generation processing)
  • Payment Providers: Creem, Stripe (for payment processing)
  • Cloud Storage: Cloudflare R2 (for video storage)
  • Analytics: PostHog (for usage analytics)
  • Email Services: Resend (for transactional emails)

International Transfers

Your data may be transferred to and processed in countries outside of your home country. We ensure appropriate safeguards are in place for such transfers, including:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions where applicable
  • Other legal mechanisms as required by GDPR

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for:

  • Account data: Retained while your account is active and for 2 years after deletion
  • Payment data: Retained as required by financial regulations (typically 7 years)
  • Generated videos: Retained according to your account settings
  • Analytics data: Retained for up to 1 year

7. Your Rights

You have the following rights regarding your personal data:

GDPR Rights (EEA Users)

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your personal data ("right to be forgotten")
  • Restriction: Request restriction of processing
  • Portability: Request transfer of your data in a machine-readable format
  • Objection: Object to processing based on legitimate interests
  • Withdrawal: Withdraw consent at any time

CCPA Rights (California Residents)

  • Know: Request disclosure of personal information collected
  • Delete: Request deletion of personal information
  • Opt-Out: Opt-out of sale of personal information
  • Non-Discrimination: Not be discriminated against for exercising rights

8. Security Measures

We implement appropriate technical and organizational measures to protect your data:

  • Encryption of data in transit and at rest
  • Regular security audits and vulnerability assessments
  • Access controls and authentication requirements
  • Employee training on data protection
  • Incident response procedures

9. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We may also notify you via email for significant changes.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

12. Complaints

If you are located in the EEA, you have the right to lodge a complaint with your local data protection authority. However, we encourage you to contact us first so we can address your concerns directly.

Privacy Policy | Vmap