Privacy Policy

Last updated: October 26, 2026

Data Controller

Vividon AB, Stockholm, Sweden ("we", "us"). Contact: info@vividon.ai.

What We Collect

  • Account data - email address, name, and authentication details when you sign up.
  • Usage data - pages visited, features used, and anonymized analytics to improve the service.
  • Uploaded images - images you submit for relighting. Used to generate your relit output and to improve our AI models (see "How We Use Uploaded Images" below). No human at Vividon views your images, except where you ask for support or submit a photo to our gallery. If you share a relight with your team, your teammates see the original and the result.
  • Payment data - processed by Stripe. We do not store card details.

How We Use Uploaded Images

To deliver the Service. Your images are sent to our automated AI processing pipeline, which generates relit outputs you can download. They are stored only as long as needed to complete processing and any retries (see Retention).

To improve our AI models. We use uploaded images to train and improve our relighting models, including the lights we suggest and the quality of generated outputs. Training is fully automated; no human at Vividon reviews your images. Before being used for training, images are decoupled from your account so they cannot be linked back to you.

You can object to your images being used for model improvement under GDPR Art. 21 by emailing info@vividon.ai. We will stop using your images for training going forward. Objection does not reverse training already performed on images submitted before your objection.

Legal Basis (GDPR Art. 6)

  • Contract - processing account and image data to deliver the relighting service.
  • Legitimate interest - improving our AI models and the quality of suggested lights, aggregate analytics, and security/fraud prevention. We have assessed that this processing has minimal impact on you because images are de-identified in the training pipeline, model outputs are aggregate weights (not anything that reproduces your image), and you can object at any time.
  • Consent - marketing emails, if you opt in.

Data Sharing

We share data only with sub-processors necessary to run the service (hosting, payment, analytics, ad measurement). We do not sell your data. Data may be transferred outside the EU with appropriate safeguards (Standard Contractual Clauses).

Retention

Account data is kept while your account is active. Uploaded images are deleted within 30 days of processing. You can request deletion at any time.

Photo Metadata

Your photos carry hidden details (EXIF) - like your copyright and author info. We keep that on the relit images we hand back to you, so your authorship travels with your work. If you choose to share an image publicly or feature it in our gallery, we strip out anything that could reveal private details (like where a photo was taken) but always keep your copyright. Every relit image also carries a small tag noting it was relit with Vividon, plus an invisible marker that lets software recognize the lighting as AI-edited. It doesn't change how your photo looks. The EU AI Act (Regulation 2024/1689, Article 50) asks for AI-edited images to be marked this way, so that one's on us. If you publish a relit photo where the new lighting could mislead viewers about what really happened, the same law may ask you, as the publisher, to say it was AI-edited.

Your Rights

Under GDPR you have the right to access, rectify, erase, restrict, port your data, and object to processing. To exercise any right, email info@vividon.ai.

Cookies

We use essential cookies for authentication and session management. Analytics cookies are used via PostHog. We also use the Meta Pixel to measure whether our ads on Facebook and Instagram lead to signups and purchases; for this, Meta may receive a hashed version of your email address together with the pixel cookies. You can disable non-essential cookies in your browser settings.

Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the "Last updated" date at the top. If we make material changes to how we collect, use, or share your personal data, we'll notify you in advance by email or through a prominent notice in the Service before the changes take effect.