Privacy Policy
1. Overview
Last updated: July 12, 2026
This Privacy Policy explains how Vivd Solutions processes personal data when you visit this website, use the prompt field, request access, contact us, or continue to hosted Vivd Studio.
2. Controller
Data processing on this website is carried out by the website operator:
Vivd Solutions
Dweerblöcken 4
22393 Hamburg
Email: hello@vivd.studio
3. What data we process
- contact data, such as name, email address, organization, and messages you send us
- waitlist data, such as your email address, signup status, timestamps, and confirmation state
- prompt data, if you enter a website idea and continue to signup
- technical data, such as IP address, browser, device, request URLs, referrers, logs, diagnostics, and security events
- consent and preference data, such as language, theme, and cookie or analytics choices stored in your browser
- analytics and usage data after consent, such as page views and interaction events used to understand website performance
4. Purposes and legal bases
We process personal data to deliver and secure this website, respond to requests, operate the waitlist and contact forms, pass your prompt to signup when you choose to continue, remember preferences, prevent abuse, and improve the website after consent.
- contract or pre-contractual steps, where processing is needed to respond to your request or provide Vivd
- legitimate interests, including website operation, security, abuse prevention, support, and service improvement
- consent, where we ask for it, such as optional analytics or marketing communications
- legal obligations, where we must keep records, respond to lawful requests, or comply with applicable law
5. Prompt field and hosted Vivd Studio
The prompt field on this website opens a signup invitation after a few characters. The prompt is only transferred to hosted Vivd Studio when you continue to signup or use a generated signup link that includes the prompt.
Hosted Vivd Studio processes account and login data, organization membership, prompts, project files and assets, generated output, plugin and domain settings, publish records, billing entitlements, support records, and security logs. Prompts and selected project context may be sent to the AI provider selected for the workspace.
6. Forms, waitlist, and security checks
If you send a contact request or join the waitlist, we process the data you submit to handle the request, confirm the signup where needed, prevent spam, and communicate with you.
The contact form uses Cloudflare Turnstile to reduce abuse. Turnstile may process technical browser and interaction data needed for the security check.
7. Cookies, local storage, and analytics
We use local storage or similar browser storage for language, theme, and cookie choices. Optional analytics are loaded only after you accept analytics cookies.
You can change or withdraw optional analytics consent at any time using the permanent Privacy settings link in the footer. Withdrawal applies to future processing and removes the analytics identifiers stored in this browser.
8. Hosting, resources, and processors
We use service providers where needed to operate this website and Vivd, including hosting, CDN, fonts, icons, analytics, spam protection, form handling, newsletter/waitlist handling, email delivery, AI model processing, observability, and infrastructure providers.
Core website fonts, icons, and styles are served locally. Providers used for hosted Vivd can include Hetzner, Cloudflare, Fly.io, Resend, Google Cloud/Vertex AI, OpenRouter, Sentry, GitHub when connected, and Polar for self-serve billing. The current provider list and roles are available on the Subprocessors page.
9. International transfers
Some providers may process data outside the European Economic Area. Where required, we rely on appropriate safeguards such as adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.
10. Retention
Raw website analytics events are deleted after 180 days. Contact-form submissions are normally deleted after 30 days. Account, project, contract, billing, and support data are kept while the account or contract is active and then only for applicable limitation, tax, accounting, security, backup, or legal periods. Illegal-content and consumer requests are normally retained for three years after closure unless a longer legal hold applies.
11. Your rights
Where the GDPR applies, you may have the right to request access, correction, deletion, restriction, portability, and objection to processing. Where processing is based on consent, you may withdraw consent at any time with effect for the future.
You may also lodge a complaint with a data protection supervisory authority. For Hamburg, the supervisory authority is Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit .
For privacy questions or rights requests, contact hello@vivd.studio.