Privacy Policy

• Account information, such as your sign-in email address, account identifier, and credit balance;
• Photos you choose to upload and other inputs related to generation requests;
• Generation tasks, template selections, processing status, generated results, and error records;
• Basic device, browser, log, security, and abuse-prevention information;
• Credit purchase orders, payment status, and transaction reference information.

Payments may be processed by a third-party payment provider or Merchant of Record. Vardivo may receive only limited transaction information, such as an order reference, amount, currency, payment status, refund status, and country or region. We do not receive or directly store full payment card numbers, security codes, or other complete payment credentials.

Uploaded images and generation data are used to fulfill user requests, deliver digital results, enforce content safety rules, troubleshoot problems, handle feedback, protect accounts, and prevent abuse. Order and transaction status information is used to provide purchase records, investigate payment issues, and support reconciliation.

Uploaded photos and generated results are stored in access-controlled private object storage. Generated results are re-encoded by the server and stored after metadata / EXIF information is removed. Users access their own content through authorized access mechanisms.

Users can currently delete works from the My Works page. This marks the work as deleted and removes it from the normal works list. Related records or underlying files may continue to be retained for troubleshooting, security, dispute handling, and legal obligations. We do not promise an immediate permanent deletion period that has not been implemented.

To operate the service, we may use providers in the following categories:

• Cloud hosting services for the website and background tasks;
• Database, authentication, and private object storage services;
• AI image providers that process image generation requests;
• Payment providers that process checkout, payments, and refunds.

We transfer information to relevant providers only as necessary to provide the service. We do not disclose secret keys, private storage paths, or internal administrative addresses in this Policy.

We use measures such as account authentication, row-level access controls, private storage, server-side secret isolation, and least-privilege access to protect data. No system can guarantee absolute security. Please contact us promptly if you notice suspicious activity.

Because cloud hosting, AI, and payment providers may operate in different countries or regions, information may be processed outside the user's location. We take reasonable safeguards in accordance with applicable law and our provider agreements.

Users under 18 should use the service only with the consent and supervision of a parent or legal guardian. You may not upload or generate pornographic, exploitative, harmful, or otherwise unlawful content involving minors. If a parent or guardian believes information relating to a minor has been handled improperly, please contact us through our feedback channel.

Subject to applicable law, users may request access to, correction of, or deletion of relevant personal information, or object to certain processing. We may need to verify the requester's relationship to the account or relevant content.

Please use our Feedback / Contact channel to submit privacy, image-rights, infringement, or account-related requests.

We may update this Policy in response to changes in our product, providers, or legal requirements. The latest update date will be shown on this page, and material changes may be communicated through reasonable means.