Privacy Policy

1. Introduction

DIGITAL DATA CAPITAL S.R.L. (CUI 50475197), operator of DavosAI, is committed to protecting your privacy. Our company is headquartered at Str. Londra, Nr. 32, Subsol, Birou Nr. 11, Municipiul Bucuresti, Sector 1, Romania. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Organization information
• Authentication credentials (securely hashed passwords)
• Profile information you provide

2.2 Google Account Data

When you sign in with Google, we access:

• Basic profile information (name, email, profile picture)

2.3 Usage Information

We automatically collect:

• Log data (IP address, browser type, pages visited)
• Device information
• Usage patterns and feature interactions
• Video generation and batch processing history

2.4 Video Generation Data

When you use the platform, we collect and process:

• Prompt templates and their configurations
• Input data (names and variables used for personalization)
• Generated video files stored in Google Cloud Storage
• Batch processing metadata and status information

3. How We Use Your Information

We use your information solely to provide and improve our services:

• Provide, operate, and maintain the DavosAI platform
• Generate AI-powered personalized videos using Google Veo
• Manage organizations, teams, and credit allocation
• Send transactional emails (account approval, batch completion, invitations)
• Communicate with you about service updates and support
• Improve and enhance platform features and user experience
• Ensure security and prevent fraud
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell or rent your personal information. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share data.
• Service Providers: With third-party service providers who assist in operating our platform (e.g., Google Cloud for video generation and storage, SendGrid for transactional emails) under strict confidentiality agreements and solely to provide our services.
• Organization Members: Certain data (batch history, templates, credit usage) is visible to other members within your organization.
• Legal Requirements: When required by law, court order, or to protect our rights and safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with prior notice to you).

5. Third-Party Services

Our application integrates with:

• Google OAuth: For authentication and sign-in.
• Google Vertex AI (Veo): For AI video generation. Prompts and configuration data are sent to Google's API for processing.
• Google Cloud Storage: For storing generated video files.
• SendGrid: For sending transactional emails (account notifications, batch completion, invitations).

These services have their own privacy policies, and we encourage you to review them.

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption of data in transit using TLS/SSL
• Secure authentication using NextAuth.js with JWT tokens
• Password hashing using bcrypt
• Access controls and role-based permissions
• Secure API credential storage

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal data only as long as necessary to provide our services and comply with legal obligations. Generated videos and batch data are retained for the duration of your account. When you delete your account, we will delete or anonymize your personal data within 90 days, except where retention is required by law.

8. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access and review your personal data
• Correct inaccurate or incomplete data
• Request deletion of your account and associated data
• Export your data in a portable format
• Object to certain data processing activities
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority (ANSPDCP in Romania)

To exercise these rights, please contact us at the email address provided below.

9. Revoking Access

You can revoke Google sign-in access at any time by:

• Visiting your Google Account Permissions page
• Removing DavosAI from the list of connected apps

10. Children's Privacy

Our service is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence (including the United States, where Google Cloud services operate). We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and GDPR requirements.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

DIGITAL DATA CAPITAL S.R.L.
CUI: 50475197
Str. Londra, Nr. 32, Subsol, Birou Nr. 11
Municipiul Bucuresti, Sector 1, Romania
Email: contact@digitaldatacapital.com

We will respond to your inquiry within 30 days.

14. Compliance

This privacy policy is designed to comply with:

• General Data Protection Regulation (GDPR)
• Romanian data protection laws (Law 190/2018)