Privacy Policy

1.1 This policy applies when you use our website at https://vivu.ai, the Vivu web app at https://app.vivu.ai, or the Vivu MCP server at https://mcp.vivu.ai/mcp, and when you contact us. In this policy, these are called the "Services".

1.2 This policy does not cover third-party services, even when you use them together with Vivu. Examples are the AI assistant you connect to Vivu, Google when you sign in with Google, and Calendly when you book a demo. Their own privacy policies apply.

1.3 If you use Vivu through an organization, your organization may control some of the information in its workspace, including the videos in organization projects. In that case your organization's own privacy notice also applies, and we may pass your requests about that information to your organization.

2.1 Account information. When you sign up, we collect your email address and, if you give it to us, your name. If you sign in with Google, we receive basic profile information from Google: your name, email address and profile picture. Section 7 explains how we handle information we receive from Google. If you sign up with an email address and password, your password is handled by Google Firebase Authentication. We also keep your organization workspace membership, your plan, and how many indexing minutes and search credits you have used.

2.2 Videos you upload and what we derive from them. When you upload a video to a Vivu project, we receive the video file and store it in Vivu's cloud, together with details about it such as its file name and length. We then build an index of the video with Google's Gemini models, which run on Google Cloud Vertex AI in Vivu's own Google Cloud project. The index includes transcripts of what is said, descriptions of what is on screen, text that appears on screen, labels for who is speaking, and timestamps. Videos often contain personal information about you and other people, such as their faces, their voices, their names, and anything they say or show. We process this information to provide the Services to you.

2.3 Projects, searches and results. We keep the projects you create and their visibility settings, the searches you run (the text of each query and whether you used Fast or Precise mode), and the results we return.

2.4 Usage, device and log data. When you use the Services, our systems record technical information such as your IP address, browser and device type, the pages and features you use, the times you use them, and errors. When an AI assistant uses our MCP server on your account, we record the requests it makes, such as which action was called and when.

2.5 Billing information. If you buy Premium, your payment is handled by a third-party payment processor. The processor collects your card or other payment details. We receive limited information from it, such as your plan and billing status.

2.6 Website forms. When you fill in a form on vivu.ai, we collect what you enter. Depending on the form, this can be your name, work email, company, role and message, plus the page you sent the form from. The "Contact us" email box collects only your email address. We store form submissions with our website host, Netlify, and send them to our team's Slack workspace and to a Google Sheet so we can follow up. We also add your contact details to Instantly, the service we use to send follow-up emails (see Section 5.2).

2.7 Demo scheduling. If you book a demo, you do it through Calendly. Calendly collects the details you enter, such as your name and email address, and shares the booking with us.

2.8 Cookies and similar technologies.

Every page of vivu.ai loads a visitor-identification tag from Leadsy (leadsy.ai). The tag collects information about your visit, such as your IP address, browser details and the pages you view, and helps us learn which people or companies visit our website. Leadsy may combine this information with data it has from other sources.

We may use Google Analytics to understand how people use our website. When it is enabled, Google Analytics uses cookies and collects information such as the pages you view, your device and browser, and your approximate location. Our setup does not send Google Analytics your full email address, the names of your files, or the text of your searches.

If you open our demo scheduler, Calendly may set its own cookies.

The web app uses cookies and browser storage to keep you signed in and to remember settings such as its colour theme.

Vivu does not set its own advertising cookies. You can block or delete cookies in your browser settings, and Google offers a browser add-on that opts you out of Google Analytics.

2.9 Information from other sources. We may receive information about you from Google when you sign in with Google; from members of your organization workspace, for example when a colleague uploads a video in which you appear; from Leadsy, as described above; and from Calendly and our payment processor.

We use personal information to:

• create and run your account and sign you in;
• store, analyse and index your videos, run your searches, and show you results and previews;
• make organization projects available to the members of your workspace;
• carry out the actions you ask a connected AI assistant to perform;
• process payments, track usage against your plan, and prevent abuse of plan limits;
• keep the Services secure, and detect and stop fraud, abuse and breaches of our Terms of Service;
• send you service messages, such as email verification, a welcome email and a follow-up check-in after you sign up, billing notices and changes to our terms;
• answer your questions and support requests;
• follow up on website form submissions and demo bookings, including sales follow-up;
• understand how people find and use our website, and improve the website and the Services;
• send you product news where the law allows, with an unsubscribe link in each message; and
• comply with the law and enforce our Terms of Service.

If the EU or UK General Data Protection Regulation applies to you, we rely on these legal bases:

• performance of a contract, to provide the Services you signed up for, including processing your videos and searches and handling billing;
• legitimate interests, to keep the Services secure, to understand how our website is used, to send you getting-started emails about the Services you signed up for, and to follow up with businesses that contact us or visit our website, where your rights do not override those interests;
• consent, where the law requires it; you can withdraw consent at any time; and
• legal obligation, to meet tax, accounting and other legal requirements.

5.1 We do not sell personal information for money. We share personal information only as described in this section. Section 13.3 explains how California law may treat some website tracking.

5.2 Service providers. The providers below help us run the Services and process personal information on our behalf.

Provider	What it does for us	Personal information involved
Google Cloud, including Vertex AI	Runs the Vivu product backend and indexes videos with Google's Gemini models	Account data, uploaded videos, indexes, searches, usage and log data
Google Firebase Authentication	Sign-up, sign-in and email verification	Name, email address, password, sign-in records
Netlify	Hosts vivu.ai, stores website form submissions, and runs the service that sends our welcome and getting-started emails	Website request data such as IP address; form data; account details such as email address, name, role, account status (active, disabled, deleted, email verified), account ID and signup time; whether the account had projects before signup; the email records described in Section 8
Resend	Sends our welcome and getting-started emails	Email address, first name, the emails we send you and their delivery status
Instantly	Sends follow-up emails to people who contact us through our website	Name, email address, company and role from website forms, which form you used and the page you sent it from, and the emails we send
Slack	Notifies our team of website form submissions	Form data
Google Workspace (Google Sheets)	Keeps our team's record of website form submissions	Form data
Calendly	Demo scheduling	Name, email address, booking details
Leadsy	Website visitor identification	IP address, device and browser data, pages viewed
Google Analytics (if enabled)	Website analytics	Device and usage data, cookie identifiers, approximate location
Our payment processor	Payments and subscription billing	Payment details, billing contact details, transaction records

Google Cloud is the only AI provider that processes your videos for Vivu. Under Google Cloud's terms, Google does not use the data we process with Vertex AI to train its AI models. Separately, an AI assistant that you choose to connect receives the information it requests on your behalf, as Section 6 explains.

5.3 Inside your organization. Other members of your organization workspace can see organization projects and the videos in them.

5.4 AI assistants you connect. When you connect an AI assistant, we send it the information it requests on your behalf. Section 6 explains how this works.

5.5 Legal reasons. We may disclose information if we believe in good faith that the law, a court order or a valid government request requires it, or that it is needed to protect the rights, property or safety of Vivu, our users or others.

5.6 Business transfers. If Vivu is involved in a merger, acquisition, financing or sale of assets, personal information may be transferred as part of that transaction. It will stay subject to this policy or to a notice we give you.

5.7 With your permission. We may share information in other ways when you ask us to or agree to it.

6.1 You can connect an AI assistant, such as Claude, to your Vivu account through our remote MCP connector at https://mcp.vivu.ai/mcp. In Claude, open Settings → Connectors → Discover and search for "Vivu"; you can also add it there as a custom connector with that URL. You sign in to Vivu and approve the connection using OAuth, so the assistant never receives your Vivu password.

6.2 When you ask the assistant to do something in Vivu, it sends a request to our MCP server, and we send back the information needed to carry it out. That can include project names, video titles, search results with timestamps and text from the index, a link to a results page, and a sign-in link for uploading videos. A results-page link expires after four hours, and an upload sign-in link must be opened within three minutes.

6.3 The connector does not send the assistant information that Vivu receives from Google. The one exception is the email address of your Vivu account, which the assistant can show you to confirm which account is connected. Section 7 has more detail. You choose which assistant to connect, and its provider handles the information it receives under your agreement with that provider. For Claude, the provider is Anthropic, and Anthropic's terms and your Claude privacy settings decide whether Anthropic keeps your conversations or uses them to improve its models.

6.4 The assistant can permanently delete your videos and projects if you ask it to. Deletions made this way cannot be undone.

6.5 To stop sharing information with an assistant, disconnect Vivu in the assistant's settings. We keep records of MCP requests as described in Section 2.4.

7.1 Vivu's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

7.2 What we receive. The only information Vivu receives from your Google account comes from Sign in with Google. When you use it, we ask Google for your name, email address and profile picture (the openid, email and profile scopes) and nothing else. Vivu does not request access to your Google Drive, Gmail, Calendar or any other Google Workspace data. The videos you search in Vivu are files you upload to Vivu yourself, not files we read from your Google account.

7.3 How we use it. We use this information to create and run your Vivu account, sign you in, show you which account you are signed in with, and communicate with you as described in Section 3.

7.4 What we do not do. For information we receive from Google:

• we do not sell it;
• we do not use it for advertising, including retargeting, personalized or interest-based advertising;
• we do not transfer it to others, except as needed to provide the Services, to comply with the law, or as part of a merger, acquisition or sale of assets after we have your explicit consent;
• people at Vivu do not read it unless you agree, it is needed for security (for example, to investigate abuse), it is needed to comply with the law, or it has been aggregated and anonymized for our internal operations; and
• we do not use it to develop, improve or train generalized or non-personalized AI or machine learning models.

7.5 AI assistants. The MCP connector does not send AI assistants information we receive from Google, except the email address of your Vivu account when an assistant asks which account it is connected to (Section 6.3).

7.6 Removing access. You can remove Vivu's access to your Google account at any time on the Third-party apps & services page of your Google Account. You will then no longer be able to sign in to Vivu with Google. To have us delete the information we have already received from Google, ask us to close your account as Section 9.3 describes.

We keep personal information only as long as we need it for the purposes in this policy, unless the law requires us to keep it longer. Account information is kept while your account is open. Uploaded videos and the data derived from them, such as indexes, are kept until you delete the video or the project that holds them, or until your account is closed. You can permanently delete a video or a project at any time (see Section 9.1), and deletion cannot be undone. When you delete a video or a project, its media is removed from Vivu's cloud. To ask us to close your account, follow Section 12.1 of our Terms of Service. Billing and transaction records are kept as long as tax and accounting laws require.

To send our welcome and getting-started emails, we keep a new account's email address, first name, account ID and signup time until both emails have been sent or the emails stop for that account. After that, we keep only a coded identifier derived from the email address (not the address itself), with the signup time and when each email was sent or why it was not sent. For accounts that existed before we started sending these emails, we keep only the coded identifier. We keep these records after an account is closed. If you ask us to delete your information, we keep only the coded identifier and the date of your request. We do this so that we never email anyone who has unsubscribed, and never send a welcome email twice or to an existing user.

9.1 In the app, you can permanently delete individual videos or whole projects at any time, or ask a connected AI assistant to do it.

9.2 Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy of it;
• correct inaccurate information;
• delete your information;
• receive your information in a portable format;
• object to or restrict some processing;
• withdraw consent where we rely on consent; and
• opt out of the sale or sharing of your personal information and of targeted advertising (see Section 13).

We will not treat you differently for using these rights.

9.3 To make a request, email support@vivu.ai or hello@vivu.ai, ideally from the email address on your Vivu account, and tell us what you want. We may need to verify your identity before we act. Someone you authorize can make a request for you if they can show that you authorized them. We will reply within the time the law requires, for example one month under the GDPR and 45 days under California law. If we decline your request, you can appeal by replying to our decision, and we will review it again.

9.4 If your request is about videos in an organization project that your organization controls, we may refer it to your organization.

9.5 To stop getting-started or product news emails, use the unsubscribe link in any of them or email us. To stop follow-up emails we send after you contact us through our website, email us. We will still send messages you need about your account, such as security and billing notices.

9.6 If you are in the EEA or UK, you can complain to your local data protection authority. We would like the chance to address your concern first, so please contact us.

10.1 We use technical and organizational measures designed to protect personal information. Data travels to and from the Services over HTTPS, and sign-in is handled by Google Firebase Authentication.

10.2 No system is completely secure, and we cannot guarantee the security of your information. If a data breach affects your personal information, we will notify you and the authorities as the law requires.

Vivu is based in the United States and processes personal information in the United States. Our product backend runs in Google Cloud's us-central1 region. Some of our service providers may process information in other countries. If you use the Services from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. Where the law requires safeguards for these transfers, we put them in place.

The Services are not meant for anyone under 18. We do not knowingly let children create accounts or collect personal information directly from children. If you believe a child has given us personal information, email support@vivu.ai and we will delete it. If a video you upload shows children, you are responsible for having any consent the law requires, as our Terms of Service explain.

13.1 Residents of California and several other US states have rights under state privacy laws. These include the rights to know about, access, correct and delete their personal information; to opt out of the sale or sharing of personal information and of targeted advertising; to limit the use of sensitive personal information; and not to be treated differently for using these rights. You can use them as described in Section 9.

13.2 In the past 12 months, we have collected these categories of personal information, as California law defines them:

• identifiers, such as name, email address and IP address;
• customer records, such as billing information;
• commercial information, such as your plan and purchase history;
• internet or other electronic network activity, such as usage and log data;
• approximate geolocation derived from your IP address;
• audio, visual and similar information, in the videos you upload;
• professional information, such as company and role from website forms; and
• account login details (email address and password), which California treats as sensitive personal information.

We collect these categories from the sources and for the purposes described in Sections 2 and 3, disclose them as described in Section 5, and keep them as described in Section 8. We use sensitive personal information only to provide the Services and keep them secure.

13.3 We do not sell personal information for money. However, the Leadsy visitor-identification tag, and Google Analytics if it is enabled, let those companies collect information from visitors to our website. California law may treat this as "selling" personal information or "sharing" it for cross-context behavioral advertising. You can ask us to opt you out using the process in Section 9, and you can block these tools in your browser.

We may update this policy. When we do, we will post the new version on this page and change the "Last updated" date. If a change is material, we will also tell you by email or in the app before it takes effect.

For privacy questions or requests about your account or your data, email support@vivu.ai. For anything else, email hello@vivu.ai.

Vivu Inc., 1700 Westlake Ave N, Suite 200, PMB 2209, Seattle, WA 98109, USA.