Vividly

Privacy Policy

Last updated: February 22, 2026

Vividly Studio ("Vividly," "we," "us," or "our") operates the website at vividly-studio.com and the Vividly presentation generation service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

Account Information

When you sign in with Google OAuth, we receive your name, email address, and profile picture from your Google account. We use this to create and manage your Vividly account.

Uploaded Documents

When you upload a document (PDF, DOCX, TXT, Markdown, RTF, or ODT), the file is stored temporarily in Google Cloud Storage for processing. Documents are used solely to generate your presentation and are not shared with third parties.

Payment Information

Payment processing is handled entirely by Sumit (sumit.co.il). We do not store your credit card number, expiration date, or CVV. Your card is tokenized directly by Sumit in your browser. We receive only a transaction identifier, payment status, and the email address associated with your account.

Generated Content

Presentations generated by our AI are stored in Google Cloud Storage and linked to your account. You may download them in PowerPoint (PPTX), HTML, or Google Slides format.

Usage Data

We collect standard server logs including IP addresses, browser type, and pages visited to maintain service reliability and security.

2. How We Use Your Information

  • To authenticate your identity and manage your account
  • To process your uploaded documents and generate presentations
  • To process payments through Sumit
  • To send transactional emails (e.g., presentation ready notifications) via Resend
  • To maintain, improve, and secure our service

3. Third-Party Services

We use the following third-party services to operate Vividly:

  • Google Cloud Platform — Infrastructure, storage (Google Cloud Storage), and database (Cloud SQL)
  • Firebase Authentication — Google OAuth sign-in and session management
  • Sumit (sumit.co.il) — Payment processing
  • Anthropic (Claude) — AI-powered content analysis and slide generation
  • Google Drive API — Google Slides export (only files created by our app, scoped to drive.file)
  • Resend — Transactional email delivery

Each service processes data according to its own privacy policy. We only share the minimum data required for each service to function.

4. Cookies

Vividly uses a single essential cookie for authentication:

  • session — An HTTP-only, secure session cookie set when you sign in. This cookie identifies your authenticated session and expires after 5 days. It is strictly necessary for the service to function and is exempt from consent requirements under GDPR and ePrivacy regulations.

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.

5. Data Retention

  • Account data: Retained while your account is active. You may request deletion at any time.
  • Uploaded documents: Retained for up to 30 days after processing, then automatically deleted.
  • Generated presentations: Retained while your account is active.
  • Payment records: Retained as required by tax and financial regulations (typically 7 years).

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate personal data
  • Erase your personal data ("right to be forgotten")
  • Restrict processing of your personal data
  • Data portability — receive your data in a structured, machine-readable format
  • Object to processing of your personal data

To exercise any of these rights, contact us at privacy@vividly-studio.com. We will respond within 30 days.

7. Data Security

We use industry-standard security measures including encrypted connections (TLS/SSL), encrypted storage, access controls, and secure authentication. All data is processed on Google Cloud Platform infrastructure with SOC 2, ISO 27001, and GDPR compliance certifications.

8. Children's Privacy

Vividly is not intended for use by children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:
privacy@vividly-studio.com