Privacy Policy

1. Overview

Dialify Technologies Private Limited (“vdowrx”, “we”, “us”) operates this Service. This Privacy Policy explains what data we collect, why we collect it, and your rights. We process personal data as a data controller under applicable privacy laws including GDPR and CCPA.

2. Data We Collect

• Account data: email address, full name, hashed password, plan tier, and billing ID (Paddle customer reference). Collected at registration.
• Usage data: job submission timestamps, source video duration, output ratios requested, processing status, and API key hashes. Collected automatically when you use the API.
• Video content: video files you submit for processing. Stored in AWS S3 (ap-south-1) and deleted within 90 days of job completion.
• Log data: IP addresses, HTTP request paths, and response codes. Retained for 30 days for security and debugging.
• Payment data: handled entirely by Paddle (our merchant of record). We store only the Paddle subscription ID — no card numbers or full billing details.

3. How We Use Data

• To provide, operate, and improve the Service
• To authenticate users and authorize API access
• To calculate billing and enforce plan limits
• To send transactional emails (job complete, API key rotation, billing receipts)
• To detect and prevent fraud and abuse
• To comply with legal obligations

We do not sell your data. We do not use your video content to train machine-learning models.

4. Data Sharing

We share data only with service providers necessary to operate the Service:

• Amazon Web Services (AWS) — compute, storage, and database infrastructure (ap-south-1 region)
• Paddle — payment processing and subscription management
• AWS SES — transactional email delivery

Each provider is bound by a Data Processing Agreement and may not use your data for their own purposes.

5. Data Retention

• Account data: retained for the life of your account plus 90 days after deletion
• Video files (source and output): deleted within 90 days of job completion
• Log data: 30 days rolling
• Billing records: 7 years (tax compliance)

6. Your Rights

Depending on your jurisdiction, you may have the right to: access, correct, or delete your personal data; restrict or object to processing; data portability; and withdraw consent at any time. To exercise these rights, email privacy@vdowrx.ai. We will respond within 30 days.

7. Security

We use TLS for all data in transit, AES-256 encryption for data at rest in S3, and bcrypt hashing for passwords. Access to production systems is restricted to authorized personnel via IAM roles with least-privilege principles. We conduct periodic security reviews.

8. Cookies

We use a single session cookie to maintain your authenticated session in the dashboard. We do not use tracking cookies, analytics cookies, or advertising cookies. No third-party cookies are set by our service.

9. International Transfers

Our infrastructure is hosted in AWS ap-south-1 (Mumbai). If you are located in the European Economic Area, your data is transferred to India. We rely on Standard Contractual Clauses as the legal basis for such transfers.

10. Changes

We may update this policy. We will notify you by email at least 14 days before material changes take effect. The effective date at the top of this page always reflects the current version.

11. Contact

Privacy questions: privacy@vdowrx.ai
Dialify Technologies Private Limited.