Introduction: AiVidect ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI video detection service.

1. 我们收集的信息

1.1 账户信息:

• Email Address: Required for account creation, authentication, and communications
• Username: Your chosen display name
• Password: Stored as a cryptographic hash using enterprise-grade encryption (Scrypt with salt)
• OAuth Data: If you sign in with Google, we receive your name, email, and profile ID

1.2 使用数据:

• Analysis history and results
• Daily and total analysis counts
• 积分余额和购买历史
• API usage statistics
• Feature usage patterns

1.3 上传的内容:

• Videos: Processed for analysis and deleted immediately after results are returned, UNLESS you opt-in to help improve our AI by checking the consent checkbox (see Section 2.2)
• Training Data: If you consent, videos are re-encoded for security and stored to train our detection model
• URLs: Web links to videos you submit for analysis
• 分析结果: AI predictions, confidence scores, and metadata
• User Feedback: Corrections when you disagree with analysis results

1.4 Technical Data:

• IP address
• 浏览器类型和版本
• Device information
• Operating system
• Session cookies and authentication tokens
• Page views and navigation paths

1.5 Payment Information:

• Stripe Customer ID: Generated by our payment processor
• Purchase Details: Credit package purchased, amount, transaction date
• 注意： We do NOT store credit card numbers or payment details. All payment processing is handled securely by Stripe.

2. 我们如何使用您的信息

2.1 Service Provision:

• Process and analyze uploaded videos using AI/ML algorithms
• Provide analysis results and authenticity assessments
• Maintain your account and analysis history
• Manage credit balance and usage
• Provide API access for users with available credits

2.2 Service Improvement:

• Improve AI model accuracy and performance
• Develop new features and capabilities
• Analyze usage patterns to optimize user experience
• Conduct research on AI-generated content detection

2.3 Communications:

• Send service-related emails (account verification, password reset)
• Notify you of credit purchases and account changes
• Respond to support inquiries
• Send important security or policy updates
• With your consent: Send marketing communications (you can opt out anytime)

2.4 Legal Compliance:

• Comply with legal obligations and law enforcement requests
• Enforce our Terms of Service
• Protect against fraud, abuse, and security threats
• Resolve disputes and prevent prohibited activities

3. 处理的法律依据（GDPR）

For users in the European Economic Area (EEA), UK, and Switzerland, we process your data based on:

• Contractual Necessity: Processing is necessary to provide the Service under our Terms
• Legitimate Interests: Improving our service, security, and fraud prevention
• Consent: Marketing communications (you can withdraw consent anytime)
• Legal Obligation: Compliance with applicable laws

4. 数据保留

4.1 Video Files:

• 无保留: Videos are processed and immediately deleted after analysis is complete
• 无存储: 我们不会存储、保留或保存您视频的任何副本
• 无训练数据: Videos are NOT used for model training or any other purpose
• URL Downloads: Videos downloaded from URLs are processed in memory and immediately discarded

4.2 Analysis Results:

• Retention Period: Retained indefinitely as part of your account history
• Content: SHA-256 hash, probability scores, decision, model version, timestamp
• Purpose: Provide analysis history and service continuity
• Deletion: Deleted when you delete your account or request data deletion

4.3 Account Data:

• Retention Period: Duration of your account plus 30 days
• Purpose: Account management, support, and legal compliance
• Deletion: 30 days after account deletion or data deletion request

4.4 Billing Data:

• Retention Period: 7 years from last transaction
• Purpose: Tax compliance, accounting, dispute resolution
• Legal Requirement: Required by financial regulations

5. 数据共享和披露

We do NOT sell your personal data. We only share data in the following limited circumstances:

5.1 服务提供商:

• Stripe: 积分购买的支付处理
• Google OAuth: Optional authentication service
• Cloud Hosting: Infrastructure providers (AWS, Wasabi S3) for video processing
• Email Services: Transactional email delivery (if configured)
• Research Partners: We do NOT share videos with third parties. All model training is conducted internally.

5.2 法律要求:

• Comply with valid legal processes (subpoenas, court orders)
• Enforce our Terms of Service
• Protect rights, property, and safety of AiVidect, users, and the public
• Prevent fraud, security threats, and illegal activity

5.3 业务转让:

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you via email and/or prominent notice on our website.

6. 数据安全

We implement industry-standard security measures:

• Encryption: TLS/SSL for data in transit, encryption at rest for sensitive data
• Password Security: Scrypt hashing with per-user salts (N=32768, r=8, p=1)
• Authentication: Secure session management with httpOnly cookies
• Access Controls: Role-based access control (RBAC) for admin functions
• Monitoring: Automated security monitoring and logging
• Regular Updates: Security patches and dependency updates

注意： No method of transmission or storage is 100{}ecure. While we strive to protect your data, we cannot guarantee absolute security.

7. 您的隐私权

7.1 All Users:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing emails

7.2 EEA/UK/Swiss Users (GDPR Rights):

• Right to Object: Object to processing based on legitimate interests
• Right to Restrict: Request limited processing of your data
• Right to Withdraw Consent: Withdraw consent for marketing communications
• Right to Lodge Complaint: File a complaint with your data protection authority

7.3 California Users (CCPA Rights):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale (we do not sell data)
• Right to deletion
• Right to non-discrimination for exercising privacy rights

8. 数据主体请求（DSR）

How to Exercise Your Rights:

1. Email Request: Send an email to privacy@aividect.com with subject "Data Subject Request"
2. Include: Your name, email address associated with your account, and specific request
3. Verification: We may request additional information to verify your identity
4. Response Time: We will respond within 30 days (45 days for complex requests)

Supported Request Types:

• Access Request: Receive a copy of your personal data in JSON format
• Deletion Request: Permanently delete your account and associated data
• Correction Request: Update incorrect account information
• Portability Request: Export your analysis history and account data
• Objection Request: Object to specific data processing activities

Processing Timeline:

• Account deletion: Immediate access revocation, data deleted within 30 days
• Data export: Provided within 14 days
• Correction: Updated immediately upon verification
• Billing data: Retained for 7 years due to legal requirements (cannot be deleted)

9. Cookie和跟踪

9.1 Essential Cookies:

• Session Cookies: Authentication and session management (required)
• Security Cookies: CSRF protection (required)
• Preference Cookies: Theme selection (dark/light mode)

9.2 Analytics Cookies:

• Google Analytics: Anonymous usage statistics (opt-out available)
• Purpose: Understand user behavior and improve the service
• Opt-Out: Use browser settings or Google Analytics opt-out extension

9.3 Third-Party Cookies:

• Stripe: Payment processing and fraud prevention
• Google OAuth: Third-party authentication

10. 国际数据传输

AiVidect is based in the United States. If you access our service from outside the US, your data may be transferred to and processed in the US.

EEA/UK/Swiss Users: We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequate security measures equivalent to GDPR requirements
• Data Processing Agreements with third-party processors

11. 儿童隐私

Our Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@aividect.com, and we will delete such information from our systems.

12. 本隐私政策的变更

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Updating the "Last Updated" date
• Posting the updated policy on our website
• Sending email notification for significant changes
• Requiring re-acceptance for substantial changes

Your continued use of the Service after changes indicates acceptance of the updated Privacy Policy.

13. 联系信息

For privacy-related questions, concerns, or requests:

• 电子邮件: privacy@aividect.com
• Data Subject Requests: dsr@aividect.com
• 支持: support@aividect.com
• 网站: 联系表单

Data Protection Officer (DPO): For GDPR-related inquiries, contact dpo@aividect.com

EU Representative (if applicable): Contact eu-rep@aividect.com