Effective Date: March 31, 2026
This Privacy Policy of VdoBloom ("We," "Us," or "Our") describes how we collect, use, store, and share your information when you use our website at https://vdobloom.com, our mobile applications, and related services (collectively, the "Service"). This Privacy Policy also explains your privacy rights and available choices.
We use Your Personal Data to provide and improve the Service. By using the Website, You agree to the collection and use of information in accordance with this Privacy Policy.
Should you have any questions or concerns regarding this Privacy Policy and our services, please check our Terms and Conditions, or contact us directly via [email protected].
For the purposes of this Privacy Policy:
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
The Company allows You to create an account and log in to use the Service through the following Third-party Social Media Service:
If You decide to register through or otherwise grant us access to Google, We may collect Personal Data that is already associated with Your Google account, such as Your name, Your email address, and Your profile picture.
When you choose to sign in with Google, we request access to the following information:
Purpose: Google Sign-In provides a convenient and secure way to authenticate without creating a separate password. Your Google account information is used solely for account creation, authentication, and personalization purposes.
Data Handling: All data collected through Google Sign-In is handled according to this privacy policy. We do not share your Google account information with third parties except as necessary to provide our services (e.g., hosting providers). Your email is stored securely and used for account identification and communication only. You can disconnect Google Sign-In from your account at any time by contacting us at [email protected].
Usage Data is collected automatically when using the Service. This may include:
We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used include beacons, tags, and scripts to collect and track information and to improve and analyze Our Service.
Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of Our Service.
We use Cookies for the following purposes:
The Company may use Personal Data for the following purposes:
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen security or to improve the functionality of Our Service, or when We are legally obligated to retain it for longer time periods.
You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.
Our Service may give You the ability to delete certain information about You from within the Service. This includes, for example, the option to manage and update Your information in Your account settings.
Certain content management features, including instant self-service removal of generated videos, are available to Premium subscribers.
Users may request deletion of their personal data, including generated content, at any time through the Privacy & Data settings.
Deletion requests are processed within a reasonable time in accordance with applicable laws.
Processing times may vary based on request volume and verification requirements.
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.
We implement industry-standard security measures including encryption, secure authentication, and regular security audits to protect your data. Payment information is handled securely by our payment processors (Creem.io and Razorpay) and is never stored on our servers.
We do not sell your personal data. We may share your information in the following situations:
Your information may be transferred to and processed in countries other than your own, including where our infrastructure or service providers operate. By using the Service, you acknowledge and consent to such transfers, subject to applicable legal safeguards.
The Service is not directed to children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact [email protected] and we will take appropriate steps to remove the data.
To maintain a safe, ethical, and responsible platform, we have established the following content restrictions for all users of our AI-generated content service. These restrictions apply to any content generated, uploaded, or shared on our platform.
We prohibit the following types of content:
Since our platform utilizes AI to generate content, we have additional restrictions to ensure the ethical and responsible use of this technology:
We reserve the right to remove any content that violates these restrictions and to take appropriate action, including suspending or terminating accounts. We may also report illegal activities to the appropriate authorities.
VdoBloom collects and uses personal information to provide and improve our services, personalize your experience, and deliver relevant content. We respect your privacy and have outlined various ways you can opt out of certain uses of your personal information:
You have the following rights regarding your personal information:
This section applies if you are in the European Economic Area, the United Kingdom or Switzerland. It sets out the information we are required to give you under Articles 13 and 14 of the GDPR, and the rights you have. Where it differs from anything above, this section wins.
Every use of your personal data needs a legal basis under Article 6 of the GDPR. This is the complete list.
| What we do | Data used | Legal basis | How long |
|---|---|---|---|
| Run your account and give you what you signed up for | Email address, name, hashed password, plan tier, credit balance | Art. 6(1)(b) — performance of our contract with you | Until you delete your account |
| Generate the videos, images and audio you ask for | Your prompts, uploaded files, generation settings and outputs | Art. 6(1)(b) — performance of our contract with you | Deleted when you delete your account |
| Take payment and keep the records the law requires | Payer name and email, transaction and order identifiers, plan purchased | Art. 6(1)(b) — contract; Art. 6(1)(c) — legal obligation | Kept after account deletion for as long as accounting and dispute-defence rules require |
| Stop repeat abuse of signup bonuses, fraud and chargebacks | IP address at signup, device identifier, device fingerprint, email address (including its normalised form) | Art. 6(1)(f) — our legitimate interest in not being defrauded | See "How long we keep things" below |
| Keep the service up, rate-limit abuse and investigate security events | IP address, request metadata, security event logs | Art. 6(1)(f) — our legitimate interest in a secure service | Automatically deleted after 30 days or less |
| Check generated content against our content rules | Your prompt and the generated output | Art. 6(1)(f) — our legitimate interest in a lawful platform; Art. 6(1)(c) where the law requires it | With the generation it relates to |
| Send you service emails — welcome, password reset, generation finished, billing notices | Email address, name | Art. 6(1)(b) — performance of our contract with you | While you have an account |
| Send you marketing emails | Email address, name | Art. 6(1)(a) — your consent, which you can withdraw at any time | Until you unsubscribe |
| Measure advertising and understand how the site is used | Browser and device information, pages viewed, advertising click identifiers | Art. 6(1)(a) — your consent, given through the cookie banner | See the storage table in the cookie section |
| Publish content generated on the FREE tier to promote the service | The generated video, image or audio itself | Art. 6(1)(b) — it is a term of the free tier, disclosed before you use it | While it remains published; paid-plan content is never published |
You have the right to object to any processing based on Article 6(1)(f). Write to [email protected] and we will stop unless we can show compelling legitimate grounds that override your interests, or we need the data to establish, exercise or defend legal claims.
We do not sell your personal data. We use the following categories of processors and recipients, each under a written agreement that limits them to our instructions.
Our infrastructure and several of the providers listed above are outside the EEA, mainly in the United States and India. When we transfer your personal data there we rely on the European Commission’s Standard Contractual Clauses under Article 46(2)(c) of the GDPR, or on an adequacy decision where one covers the recipient.
You can ask us for a copy of the safeguards that apply to a specific transfer by emailing [email protected].
An earlier section of this policy said that by using the service you consent to international transfers. Consent is not the basis we rely on for users in the EEA, the UK or Switzerland, and you are not asked to give it. The Standard Contractual Clauses described here are the basis that applies to you.
To use any of these, email [email protected] from the address on your account. We answer within one month, as Article 12(3) requires. If a request is unusually complex we may extend that by up to two further months and will tell you why within the first month. This is free of charge. If we cannot confirm who you are, we may ask for more information before we act.
If you think we have handled your personal data unlawfully you can complain to the data protection authority in the country where you live or work, or where the problem happened. You can find yours in the European Data Protection Board’s list of national authorities. In the United Kingdom this is the Information Commissioner’s Office; in Switzerland it is the Federal Data Protection and Information Commissioner.
You do not have to contact us first, but we would rather fix it — write to [email protected] and we will take it seriously.
We do not make decisions about you by fully automated means that produce legal effects concerning you, within the meaning of Article 22(1), with two exceptions you should know about:
In both cases you can ask a human to look again. Email [email protected], tell us what happened, and a person will review the decision and can overturn it.
Last updated: 2026-09-13
We may update Our Privacy Policy from time to time. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. We may also communicate major updates directly through notices on the Website or via email notifications.
If you have any questions or concerns about this Privacy Policy, you can contact us by email at: [email protected].