Privacy policy
1. Data controller
Editvio controls and processes your personal data when you use Editvio and https://editvio.com. Data protection contact: the Account page at https://editvio.com.
2. Data we collect
| Category | Details |
|---|---|
| Account | Phone number or email used to sign in; display name (if provided); account creation date; one-time codes stored only as hashes and expiring after 5 minutes. |
| Device | A device identifier generated by the Software, the computer name and last-seen time — to enforce plan device limits and issue licence tickets. The number of video exports this month (a count only, no video content) — to apply plan video limits. |
| Orders and payments | Product, amount, order code, time; transaction details sent by the bank or payment notification service (SePay): amount, transfer note, transaction ID. We never collect card numbers, banking passwords or banking OTPs. |
| Credits | Credit history (purchases, monthly plan credits, sign-up bonus, expiry, AI usage, refunds, adjustments). |
| AI call log | When you use platform AI: task type, model, tokens / seconds / images, cost, credits, processing time and a one-way hash of the request. We do not store the content you send or the AI’s output. |
| Support requests, bug reports and feedback | When you choose to send one from the Software: your message (including later replies in the conversation), a screenshot (if you attach it) and technical details (version, operating system, recent errors) that you can review before sending. |
| Technical | IP addresses one-way hashed with a secret key (raw IPs are not stored), browser type, referring page when an affiliate link is clicked; server error logs. |
| Affiliates | Referral code, click/sale statistics, payout bank account and information needed for personal income tax withholding. |
| Launch notifications | The email or phone number you leave on the Download page so we can tell you when the installer is available. |
We do not collect sensitive personal data, and we do not store your videos, images, audio, face or voice data, projects or your own AI keys.
3. Purposes
- Creating and authenticating accounts, sending sign-in codes.
- Issuing and checking licences, plan device limits and video limits.
- Processing orders, reconciling payments, refunds, accounting and tax obligations.
- Providing platform AI, metering credits and preventing abuse.
- Running the affiliate program: tracking referrals, calculating and paying commissions, fraud prevention.
- Customer support, handling bug reports, important service notices, and launch notifications for people who signed up.
- Security and troubleshooting.
We do not use your data for third-party advertising, we do not use your content to train AI, and we never sell personal data.
4. Legal bases
Your consent (when you register, sign in, leave your contact details, send a bug report or use platform AI); performance of the contract with you; compliance with legal obligations (accounting, tax, lawful requests from authorities).
5. Processing on your own computer
Speech recognition, cutting, face detection, skin smoothing, stabilisation, text overlays, audio mixing and video export all run on your computer. Your videos and projects stay on your disk and we cannot access them.
6. When you use AI
- Platform AI (paid with credits): the material to be processed — e.g. the transcript of your speech, a few downscaled sample frames, your script, voice-over text, image/video descriptions — is sent through our server to the AI provider (currently Anthropic (Claude), Google (Gemini), DeepSeek, MiniMax (Hailuo)). Our server only relays it and does not keep it; requests are sent without your phone number or email. AI providers handle it under their data policies for API customers.
- Your own AI keys: keys are stored only on your computer and the Software calls that provider directly, not through our servers. Data handling is then governed by your agreement with that provider.
- Stock footage, video posting: when enabled, the Software calls the relevant service (e.g. Pexels, YouTube) directly from your computer.
7. Sharing
- OTP delivery providers (email, SMS, Zalo ZNS): receive your phone/email and the message containing the code.
- Banks and payment notification services (SePay): process transfer information.
- AI providers (Anthropic (Claude), Google (Gemini), DeepSeek, MiniMax (Hailuo)): receive the material described in section 6. These providers host servers outside Vietnam; such transfers are made on the basis of your consent when you use the feature and following the procedures required by law.
- Infrastructure providers (hosting, backups) store data on our behalf under confidentiality obligations.
- The affiliate who referred you only sees masked information (e.g. a partially hidden phone number) and commission status.
- Competent authorities when legally required.
8. Retention
- Account, device, credit and AI call log data: while your account is active; deleted or anonymised within the statutory time limit after you request account deletion.
- Orders, payments and commissions: kept for the accounting retention period (up to 10 years under the Law on Accounting).
- Support requests, bug reports and feedback (including screenshots and conversation messages): until resolved and up to 24 months afterwards, or until you ask us to delete them.
- One-time codes: expire after 5 minutes. Affiliate click logs (hashed IPs): up to 24 months.
- Launch-notification contacts: until we send the launch notice and up to 12 months afterwards, or until you ask us to delete them.
9. Your rights
You have the right to be informed; to give or refuse consent; to access and receive a copy of your data; to correct it; to delete it; to withdraw consent; to restrict or object to processing; and to complain, report, sue and claim compensation as provided by law.
To exercise your rights, contact the Account page at https://editvio.com from the phone number or email linked to your account. We respond within the time limits set by law. Withdrawing consent or deleting data may mean you can no longer use features that require an account; data we are legally required to keep (accounting records) is retained until the mandatory period ends.
10. Security
HTTPS encryption; one-time codes and long-lived session tokens stored as hashes; one-way hashed IP addresses; digitally signed licence tickets; encrypted secrets in server settings; restricted admin access with an audit log; regular backups. If a personal data breach occurs we will notify the competent authority and affected people as required by law.
11. Cookies and browser storage
The website uses a few strictly necessary cookies and browser storage: km_lang (language), km_ref, km_sub (referral code, 30 days) and sign-in tokens on the Account/Affiliate pages. We do not use third-party advertising or tracking cookies. Fonts are loaded from Google Fonts, so Google may receive your browser’s IP address.
12. Children
The Service is not directed at children under 16. If you are under 16, a parent or guardian must consent before you provide data. If we learn that a child’s data was provided without proper consent, we will delete it.
13. Changes
We may update this policy; the new version is posted here with its effective date, and material changes are announced in advance in the Software or by email/phone.