Privacy Policy

The data controller is Araz Asgharieh Ahari, sole proprietor (ditta individuale), trading as Vidaro Studio, Partita IVA 14869710963, Via Francesco Restelli 9, Milan, Italy.

For privacy questions or requests, email support@vidarostudio.com.

• Email address, name, and profile picture when you sign in with Google
• Email address and a hashed password when you create an account with email and password
• Images and videos you upload, prompts you enter, and images or videos we generate for you
• Payment and subscription status (we do not store your card details; Stripe handles card payments)
• Messages you send to support
• Basic technical data needed to run the site (for example logs and device/browser information)

Do not upload sensitive personal data. Do not upload images of other people without their consent.

• Create and manage your account
• Run AI generation and store your uploads and results
• Process subscriptions and credit pack purchases
• Send service-related messages (for example billing or security notices)
• Answer support requests
• Keep the service secure, fix bugs, and comply with law

You can connect your Vidaro Studio account to Claude, Anthropic's AI assistant. You sign in to Vidaro Studio and approve the connection (this uses OAuth). After that, Claude can call Vidaro Studio tools on your behalf, for example to generate an image or video. Generations started from Claude use your credits, just like on our website.

Through the connector we receive:

• Your account identity from the sign-in, so we know which account the tool calls belong to
• The inputs of each tool call: prompts, settings, images or videos you upload or import, and URLs you ask us to import media from
• The name of the app you connected (for example Claude), so we can show it under Connected apps

We also store the results we generate, the same way as generations made on our website.

We do not receive your Claude conversations, your other chats, or anything outside the tool calls themselves. Claude decides what to send in a tool call; we only see that call.

Access and disconnecting. Claude gets an access token that expires after 1 hour and a refresh token that expires after 30 days. Refresh tokens are stored in hashed form. You can disconnect anytime in Claude's connector settings, or under Connected apps on the Billing page. When you disconnect in Vidaro Studio, Claude's access stops right away.

Upload links. When you want to send a file from your device, we can create a private upload link. Each link is valid for 15 minutes, only adds files to your own account, accepts a limited number of files, and is stored in hashed form. We delete the link record about one day after it expires. Files you upload through a link are treated like any other upload.

We use Google Analytics to understand anonymous usage patterns (for example which pages are visited and how people move through the site). It helps us improve Vidaro Studio. Analytics scripts and cookies are not loaded until you choose "Accept" on our cookie banner. If you choose "Reject", we do not load Google Analytics and we do not send analytics events.

You can change your choice anytime via Cookie settings in the site footer, which clears your saved preference and shows the banner again.

We use these providers to run the service:

• Higgsfield Inc. (San Francisco, USA) and the AI model providers it uses. We send prompts, uploads (images, videos, and audio), and outputs to them so they can generate content. This is a transfer of personal data to the United States. Their terms may allow them to use this data, including to improve their models. We have no separate agreement that stops them from doing that.
• Amazon Web Services — hosting, file storage, and content delivery (CDN). Region: eu-north-1 (Stockholm, EU).
• MongoDB Atlas — database. Region: eu-north-1 (Stockholm, EU).
• Stripe — payments
• Resend — sending emails (for example password resets and notifications)
• Google — sign in with Google; Google Analytics (only after you consent on the cookie banner)
• Cloudflare — DNS and email routing
• Netlify — website hosting

Our main hosting, storage, and database run in the EU (eu-north-1). Prompts, uploads (images, videos, and audio), and outputs are sent to Higgsfield Inc. in San Francisco, USA, and to the AI model providers it uses. That is a transfer of personal data to the United States. Other providers, including Stripe, Resend, Google, Cloudflare, and Netlify, are based in the United States and may process data outside the European Economic Area.

Where required, we rely on appropriate safeguards (such as standard contractual clauses or the EU-US Data Privacy Framework) to protect your data.

The periods below are only for data we control: our database, files on Amazon S3, and support tickets (kept for up to 24 months). We do not control how long Higgsfield Inc. or the model providers keep prompts, uploads, or outputs, and we do not state a retention period for them.

• Generations and uploads: kept until you delete them. Deletion is permanent: the files are removed from our storage and the prompt and settings are erased. We keep a minimal record that the item existed so your credit history stays accurate.
• Account data: kept while your account is active. If you ask us to delete your account, we delete it and your content, except records we must keep by law.
• Support messages: kept for up to 24 months after the request is resolved, then deleted.
• Billing records: kept for as long as Italian tax and accounting law requires.
• Server logs: kept for a limited time for security and troubleshooting, and not used for any other purpose.

For support, email support@vidarostudio.com or use the contact page.

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Correct data that is wrong or incomplete
• Delete your data, including your whole account
• Export your data in a common, machine-readable format
• Object to, or ask us to restrict, certain processing

To use any of these rights, or to have your account deleted, email support@vidarostudio.com. We will respond within the time required by law, normally one month.

You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority in the country where you live.

The service is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, email support@vidarostudio.com and we will delete it.

We may update this policy from time to time. We will post the new version on this page and update the "Last updated" date above.

This policy is governed by the laws of Italy.