Privacy Policy

Effective July 23, 2026 · Version 1.3 · VUSION EOOD · Sofia, Bulgaria

VUSION EOOD respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect your information when you use our AI film production engine at vusion.art.

KEY INFORMATION

Data Controller: VUSION EOOD, registered in Sofia, Bulgaria

Contact:

privacy@vusion.art

GDPR Compliant: We comply with the EU General Data Protection Regulation and Bulgarian data protection laws.

§ 01

Information We Collect

Information You Provide Directly

Account Information: name, email address, password (encrypted), company name (optional), job title (optional), billing address, VAT number for business accounts.

Payment Information: credit card details processed by Stripe, billing history, transaction records.

Content You Create: text prompts, images and videos you upload, generated outputs (images, videos, text), room configurations, preset customizations.

Communications: support requests, feedback and survey responses, email correspondence, chat messages with support.

Website Forms: when you join the waitlist or write to us through the contact, workshop, press or newsletter form on vusion.art, we collect what you enter, which may include your name, email address, company, role and message, together with the page you submitted from, the page that referred you, your language setting, any campaign parameters in the link you followed, and the time of submission.

Information Collected Automatically

Usage Data: pages visited, features used, time on platform, generation history and frequency, model preferences, credits usage, error logs.

Device and Browser Information: IP address, browser type and version, operating system, device type, screen resolution, language preferences, timezone.

Cookies and Tracking: we use cookies only where they are strictly necessary. Our analytics are first-party, self-hosted and cookieless, and we set no advertising, retargeting or campaign cookies. See Section 11.

Location Data: approximate location based on IP address only. We do not collect precise GPS location.

Information from Third Parties

If you sign in using Google, GitHub, or other OAuth services: name, email, profile picture, and public profile information from that provider.

Payment processors share transaction status, payment failure data, and fraud detection signals.

When you use AI generation features, data is shared with third-party AI providers (see Section 4).

§ 02

How We Use Your Information

Service Provision (Legal Basis: Contract)

Service Improvement (Legal Basis: Legitimate Interest)

AI Model Training and Your Content

We do not currently use your content (your prompts, uploads, or generated outputs) to train or improve Vusion.art's own models or features. The Service is in private beta, no paid plans are offered yet, and no such training takes place.

When paid plans are introduced, we may use content from some plans for this purpose. If we do, we will say here which plans are affected before it begins, we will give you a control in your account settings to turn it off at any time, and turning it off will not affect your ability to use the Service. We will email you at least 30 days before any such change takes effect.

This is separate from the third-party model providers that power generation, who do not train on your data. See Section 4.

Communication (Legal Basis: Contract + Legitimate Interest + Consent)

Security and Fraud Prevention (Legal Basis: Legitimate Interest + Legal Obligation)

Legal Compliance (Legal Basis: Legal Obligation)

Analytics (Legal Basis: Legitimate Interest)

We use first-party, self-hosted, cookieless analytics to understand how the Service is used and to improve it. On the public website your activity is not tied to your identity. When you are signed in to the application, your analytics activity is associated with your account, and interactions such as page views and clicks are recorded, so that we can understand usage on a per-account basis. This data is not sold and is not shared with advertising networks. You can block analytics with your browser settings or a tracker blocker.

§ 03

Third-Party AI Service Providers

Your prompts and generated content are shared with third-party AI services to provide generation capabilities. This is a core part of how the Service works.

Generation Infrastructure Providers

We use third-party infrastructure providers that route your generation requests to the AI model providers. What is shared: your prompts, input images, model selection and parameters, and a user identifier for billing.

Data flow: your request goes to Vusion.art, then to a generation infrastructure provider, then to the model provider, and the result comes back to you.

Practices of these providers: some are located in the United States. Under our agreements with them, your data is used only to provide the Service and is not used to train their models.

Data transfers from the EU to the USA are conducted under Standard Contractual Clauses.

Third-Party AI Model Providers

Depending on which models you use, your data may be processed by model providers in different countries:

Your Control Over Third-Party Sharing

§ 04

How We Share Your Information

With Third-Party AI Services

As described in Section 3, your prompts and content are shared with AI providers to fulfill generation requests.

With Service Providers

We share data with vendors who help us operate:

Newsletter subscriptions are stored by VUSION Magazine at mag.vusion.art, a publication operated by VUSION EOOD, in its subscriber database, together with the page you subscribed from. You can unsubscribe from any newsletter we send.

For Legal Reasons

We may disclose your information if required by law, to enforce our Terms of Service, to protect rights and safety, to prevent fraud, or in connection with legal proceedings.

Business Transfers

If VUSION EOOD is acquired, merged, or sold, your data may transfer to the new entity. You will be notified of any such change.

Aggregated / Anonymized Data

We may share aggregated, anonymized statistics that cannot identify you — industry reports, performance metrics, research publications.

§ 05

Data Retention

Active Accounts

After Account Deletion

Personal data is deleted or anonymized within 30 days. Generated content remains available for 30 days so that you can download it, and is deleted after that period. Billing records are retained for tax compliance (7 years). Anonymized analytics data may be retained indefinitely.

Legal Holds

Data may be retained longer if required by law, subject to legal proceedings, or involved in disputes.

§ 06

Your Rights (GDPR and Other Laws)

EU/EEA Users (GDPR Rights)

How to Exercise Your Rights

Email:

privacy@vusion.art

— Subject: "GDPR Data Subject Request". Include your name, email, description of request, and proof of identity if needed. Response time: 30 days. No fee for standard requests.

Lodge a Complaint

Bulgaria: Commission for Personal Data Protection (CPDP) —

cpdp.bg

— kzld@cpdp.bg — +359 2 915 3 518

You may also contact your country's data protection authority.

California Users (CCPA/CPRA)

Contact:

privacy@vusion.art

UK Users

GDPR-equivalent rights under UK GDPR apply.

§ 07

Data Security

Technical Measures

Organizational Measures

Data Breach Notification

If a breach occurs that affects your data, we will notify you within 72 hours (GDPR requirement), notify relevant authorities, explain what happened, and advise on protective measures.

Limitations

No system is 100% secure. Despite our efforts, we cannot guarantee absolute security. Use strong, unique passwords, enable two-factor authentication where available, and report suspicious activity immediately.

§ 08

International Data Transfers

EU to USA

VUSION EOOD is based in Bulgaria (EU). Some of the third-party services we use are in the USA. Transfers are conducted under Standard Contractual Clauses (SCCs) approved by the EU Commission.

EU to China

Some third-party AI model providers are based in China, which does not have an EU adequacy decision. We use Singapore/US endpoints when possible, apply Standard Contractual Clauses, and show data location warnings in the model selector. You choose which models to use.

MENA Region

Data may be transferred to other countries depending on your location and the model providers you select. We ensure appropriate safeguards are in place for all transfers.

§ 09

Data Protection Officer

VUSION has not appointed a separate Data Protection Officer. All data subject requests and privacy inquiries are handled directly by our team.

Contact:

privacy@vusion.art

§ 10

Children's Privacy

Vusion.art is not intended for anyone under 18. We do not knowingly collect data from children under 18. If you are under 18, do not use the Service. If we learn we collected data from a child, we will delete it promptly.

Parents: if you believe your child provided information to us, contact

privacy@vusion.art

immediately.

§ 11

Cookies and Tracking

Cookies We Use

We use cookies only where they are strictly necessary. As at the effective date of this policy, the public website at vusion.art sets no cookies at all.

Cookie Management

You can block or delete cookies in your browser settings, and you can block our analytics with a tracker blocker. Blocking strictly necessary cookies may stop you signing in. Because we set no advertising or analytics cookies, we do not ask you for cookie consent and there is no cookie preference centre. If that changes we will update this section before the change takes effect.

§ 12

Third-Party Links

The Service may contain links to third-party websites not operated by VUSION EOOD. We are not responsible for the privacy practices, content, or security of external sites. Review the privacy policies of any third-party sites you visit.

§ 13

Changes to This Privacy Policy

We may update this Privacy Policy at any time to reflect changes in our practices, changes in law, or new features.

For material changes (new data uses, new third parties), we will email you at least 30 days before the effective date, show an in-app notification, and post on our website.

Current version: 1.3 (effective July 23, 2026). Version 1.3 clarified that when you are signed in, our self-hosted analytics associates activity with your account and records interactions such as page views and clicks, and set the legal basis for analytics to legitimate interest. Version 1.2 (July 22, 2026) removed the plan-based AI training provisions introduced in version 1.1, because no paid plans are offered during the private beta and no training of Vusion.art's own models on user content takes place; it also corrected the description of our analytics and cookies, and disclosed the website forms. Version 1.1 (July 11, 2026) had introduced those provisions.

§ 14

Contact Us

PRIVACY & GDPR

privacy@vusion.art

Subject: "GDPR Request"

COMPANY

VUSION EOOD

Sofia, Bulgaria

SUPERVISORY AUTHORITY (BULGARIA)

Commission for Personal Data Protection (CPDP) — 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria —

cpdp.bg

— kzld@cpdp.bg — +359 2 915 3 518

§ 15

Consent and Acknowledgment

By using Vusion.art, you acknowledge that you have read and understood this Privacy Policy, you consent to data collection and use as described, you understand your data will be shared with third-party AI providers, you understand data may be transferred outside the EU, and you can withdraw consent or exercise rights at any time.

// Last Updated: July 23, 2026 · Version 1.3

// VUSION EOOD · Sofia, Bulgaria

// © 2026 VUSION EOOD. All rights reserved.

VUSION.ART — Your vision. On screen.

Vusion.art — AI film production engine. VUSION Magazine, a bilingual English and Arabic review site covering AI creative tools, published by Vusion.art.

© 2026 VUSION EOOD