Privacy Policy

Smarty Solution Mega Ltd, a company registered in England and Wales under company number 16925741 with its registered office at 192 Downing Road, Dagenham, RM9 6LU, United Kingdom ("VidReframer", "we", "us", or "our"), is the data controller for personal information processed through the VidReframer platform (the "Service"). This policy explains what data we collect, how we use and share it, and the rights you have.

1. Information we collect

We collect information you provide directly to us, including:

• Account information — your name, email address, and password when you register.
• Billing information — billing address and payment details, collected and processed directly by our payment provider, Stripe. We never see or store your full card number.
• Video content — video files you upload to be reframed, and the reframed exports we produce from them.
• Communications — messages, support requests, or feedback you send to us.

We also collect some information automatically: log and usage data (IP address, browser type, pages visited, timestamps) and device information (device type, operating system). Optional analytics run only if you accept them in our cookie banner; see our Cookie Policy.

2. How we use your information

We use the information we collect to:

• Provide, operate, and maintain the Service, including reframing and exporting your videos.
• Process payments and send related information, such as receipts and notices about your access period.
• Communicate with you about security alerts, support, and changes to the Service.
• Understand how the Service is used and improve it (analytics only with your consent).
• Detect, investigate, and prevent fraudulent, abusive, or unauthorized activity.
• Comply with our legal obligations.

3. Legal bases for processing (UK GDPR)

We only process personal information where the UK GDPR (and, for users in the EU, the EU GDPR) gives us a legal basis:

• Contract — to create your account, take your payment, and provide the Service you bought.
• Legal obligation — to keep tax and accounting records and respond to lawful requests from authorities.
• Legitimate interests — to keep the Service secure, prevent fraud and abuse, and send service messages. We balance these interests against your rights.
• Consent — for optional analytics cookies and any marketing emails. You can withdraw consent at any time, for example by choosing Reject in the cookie banner.

4. How we share your information

We do not sell your personal information. We may share it with:

• Sub-processors who provide services on our behalf, listed in the next section, under contracts that require them to protect your data and use it only on our instructions.
• Law enforcement or regulators, where required by law or to protect the rights and safety of VidReframer, our users, or the public.
• A successor entity in the event of a merger, acquisition, or sale of assets, subject to this policy.

5. Sub-processors

We use the following sub-processors to run the Service. We will update this list before adding a new one.

• Cloudflare, Inc. — website hosting, content delivery, and security. Location: United States (global network). Safeguards: EU-U.S. Data Privacy Framework and UK Extension, plus Standard Contractual Clauses with the UK Addendum.
• Stripe Payments Europe, Ltd. — payment processing. Location: Ireland, with processing by Stripe, Inc. in the United States. Safeguards: EU-U.S. Data Privacy Framework and UK Extension, plus Standard Contractual Clauses with the UK Addendum.
• PostHog, Inc. — product analytics, only if you accept analytics cookies. Location: EU or United States, depending on the hosting region. Safeguards: Standard Contractual Clauses with the UK Addendum.

6. Video data

Videos you upload are stored only to perform reframing. Processed outputs remain available for download for 30 days, after which they are permanently deleted. You may delete your videos at any time from your account dashboard.

We do not use your uploaded videos to train AI models without your explicit written consent. Your creative work remains yours.

7. Data retention

We retain your account data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Payment and invoice records are kept for 6 years to meet UK tax rules. When you close your account, we delete or anonymize your other personal data within 30 days, except where the law requires us to keep it.

8. Data security

We implement administrative, technical, and physical safeguards to protect your information, including encryption in transit and at rest, access controls, and regular security reviews. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. See our Security page for more detail.

9. International data transfers

Your information may be transferred to and processed in countries other than the one where you live, including the United States. Every such transfer is covered by a UK adequacy regulation, the EU-U.S. Data Privacy Framework and its UK Extension, or Standard Contractual Clauses with the UK Addendum, as listed for each provider above.

10. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal data.
• Export your data in a portable format.
• Object to or restrict certain types of processing.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at privacy@vidreframer.com. We will respond within one month.

11. Right to complain

If you are unhappy with how we handle your personal data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or to the data protection authority in your country if you live in the EU. We would appreciate the chance to address your concern first at privacy@vidreframer.com.

12. Children's privacy

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal data, contact us at privacy@vidreframer.com and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service, and update the "Last updated" date above.

14. Contact us

Smarty Solution Mega Ltd is the data controller for personal information processed through VidReframer. For questions about this policy or our data practices, contact: