Privacy Policy

Last updated September 21, 2026

This policy explains what personal information ad-studio collects, why, who we share it with, and the choices you have. ad-studio (app.vaidor.com) turns product photos into short promotional videos using AI.

Who we are

ad-studio is operated by Your Company Ltd, a company registered in Israel (registration number 515000000), at 1 Example St, Tel Aviv, Israel. We are the controller of the personal information described here. You can reach us at you@example.com.

What we collect

• Account information. Your email address, and whether it is verified. If you sign in with Google, we receive your email address and its verification status from Google, through our sign-in provider. We do not receive your Google password. We do not ask for your name.
• Your content. The product photos you upload, the scripts you write, and the videos we generate for you, together with the settings of each job and its status.
• Usage records. How many videos you have made and how many you have left, including free videos and any purchases.
• Technical information. Your IP address, browser type and the pages and files you request. This appears in our server logs and is used to keep the service secure and to limit abuse.
• Payments. Paid plans are not available yet. When they are, payments will be handled by a payment provider, and we will not see or store your full card number. We will update this policy before that happens.

How we use it

• To create your account, sign you in, and keep your account secure.
• To generate the videos you ask for and show them to you.
• To count your videos, apply free videos and credits, and refund a video that could not be made.
• To send you messages that the service needs, such as email verification and password reset codes.
• To prevent fraud and abuse, including people creating many accounts to collect free videos.
• To fix problems, and to meet our legal obligations.

Depending on where you live, our legal grounds are: performing our contract with you, our legitimate interests in running and protecting the service, your consent where we ask for it, and legal obligations.

Who we share it with

We do not sell your personal information. We use these service providers to run ad-studio:

• Amazon Web Services. Hosts the service in Frankfurt, Germany, and provides our sign-in service (Amazon Cognito) and, when enabled, our email sending (Amazon SES). Your account information, photos and videos are stored on our AWS server.
• Google. If you choose Sign in with Google, Google authenticates you. We also send your photo and your script to Google's Gemini API to generate your video. Under Google's terms for its paid services, Google does not use those prompts, files or results to improve its products. Google logs prompts and results for a limited period, currently described as 55 days, to detect abuse, and it may process them in any country where it operates. Videos generated by Google's models may carry an invisible marker that identifies them as AI-generated.
• A payment provider, once paid plans exist.
• Authorities and advisers, where the law requires it, or where needed to protect our rights or the safety of others.

If we are involved in a merger or sale of the business, your information may be transferred to the new owner, who must honor this policy.

Where it is stored, and transfers

Your account information, photos and videos are stored on servers in Germany. We operate from Israel, and our providers may process information in other countries, including the United States. Where the law requires it, we rely on appropriate safeguards for these transfers.

How long we keep it

• Your account, photos, videos and usage records are kept until you ask us to delete them.
• Sign-in sessions last up to 14 days.
• Server logs are kept for a short period, usually days to a few weeks.
• When paid plans exist, we will keep the records of payments for as long as tax and accounting law requires.

Your choices and rights

You can ask us to give you a copy of your information, correct it, or delete your account and everything in it. Depending on where you live, you may also have the right to object to or restrict some uses, and to withdraw consent. Email you@example.com. We will answer within 30 days. When you ask for deletion, we erase your account, photos, videos and usage records from our systems and remove you from our sign-in service.

If you think we have handled your information wrongly, you can complain to your local data protection authority, for example the Privacy Protection Authority in Israel or the authority in your EU country. We would like the chance to fix it first.

Cookies

We use only cookies that the service needs to work: a session cookie that keeps you signed in, and a short-lived cookie used while you sign in. We do not use advertising or analytics cookies. The sign-in pages of Amazon and Google may set their own cookies.

Security

Connections to ad-studio are encrypted. Customers can see only their own photos and videos. Our team can access your content only when needed to give you support, to investigate abuse, or to meet a legal obligation. Sign-in tokens are stored only in scrambled form. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your information, we will tell you and the authorities as the law requires.

Children

ad-studio is for adults and businesses. It is not for anyone under 18, and we do not knowingly collect their information.

Changes

We may update this policy. If a change matters, we will tell you by email or on the site before it takes effect. The date at the top shows the latest version. See also our Terms of Service.

Contact

Your Company Ltd, 1 Example St, Tel Aviv, Israel. Email: you@example.com.