Privacy Policy

vidivici is a field operations platform that connects on-site teams with remote supervisors through live video calls and artificial intelligence (smart-glasses integration is in development). This policy describes how we handle the information you share when using the website vidivici.ai and the vidivici mobile app.

Data controller: vidivici (Dominican Republic). Contact: hola@vidivici.ai.

2.1 Website registration (waitlist): full name, email, company (optional), professional role (optional), team size (optional).

2.2 App account: full name, email, password (hashed, never stored in plaintext), profile picture (optional), preferred language, assigned role in your organization, organization membership.

2.3 Content generated during use:

• Live video-call sessions: audio and video are transmitted via LiveKit (see §4) and transcribed in real time; live audio is not stored.
• Session recordings: when you record a session, the audio is stored temporarily and sent to our transcription provider (Deepgram) solely to generate the text. It is automatically deleted once transcription completes. If transcription fails, the audio is kept so it can be retried; you can ask us to delete it at any time by writing to hola@vidivici.ai. Other than that, we do not retain audio files — only the transcript and summary are kept.
• Transcripts: speech-to-text output labeled with the identifier of the participant who spoke.
• Notes, action items and comments you create manually or that the AI generates as part of the session summary.
• Photos: images captured during a session (stored in Supabase Storage, see §4).
• Mentions and task assignments to other users in your organization.

2.4 Technical information: device type, operating system, app version, anonymized crash identifiers (Sentry), push notification tokens (Expo, FCM and APNs on mobile; Web Push subscriptions in the browser), IP address at connection time (standard server logs).

2.5 What we do NOT collect: GPS location, health data, financial data (card or bank account numbers), device contacts, browsing history outside vidivici.

Only for the purposes listed below:

• Operate the service: authenticate your account, connect you to calls, generate transcripts and summaries, persist your notes and photos.
• Improve the product: diagnose errors (crash logs via Sentry, without user content), understand which features are used most in aggregate.
• Communicate with you: app notifications (push), email confirmations, support when you request it.
• Comply with legal obligations when a competent authority requires it.

We do not sell or share your information with third parties for marketing, advertising or profiling. We do not use advertising tracking cookies.

To operate the service we rely on third-party providers that process data on our behalf (compute, storage, AI, messaging). The full list, with each provider's role and its region where we have confirmed it, is published on a dedicated page that we update whenever we add, remove or change a provider.

→ View sub-processors

For international transfers we rely on the data processing agreements (DPAs) each provider includes in its terms of service, which incorporate transfer clauses where applicable.

• User account: for as long as your account is active. If you request deletion, see §7.
• Audio: deleted once the transcript is generated. If transcription fails, it is kept so it can be retried until you ask us to delete it (see §2.3).
• Sessions, transcripts, notes, action items and photos: 365 days from the end of the session, unless your organization agrees a different period with us (write to hola@vidivici.ai). After that period, data is automatically deleted.
• Technical logs and crashes: 90 days, then aggregated without personal identifiers.
• Waitlist data: as long as you remain interested. On-demand deletion at hola@vidivici.ai.

Data is stored on infrastructure located in the United States (Supabase, LiveKit, Vercel). Encrypted at rest (AES-256) and in transit (TLS 1.2+). Internal access is restricted by Row-Level Security at the database level and by least-privilege principle for authorized personnel.

You can request deletion of your account and personal data from within the mobile app: Settings → Profile → Delete my account.

• Deletion is immediate at the access level (your account becomes inactive right away and you can no longer use the app).
• Your personal data is permanently deleted after 30 days. During that window you can cancel the deletion via the link in the confirmation email.
• After 30 days, your account and personal data are unrecoverable. Content you created in your organization (sessions, including private ones, transcripts, photos, notes, comments and tasks) is kept so collaborative history is not broken: what you created is attributed to a "Deleted user" placeholder or left without an author, and is no longer linked to your account. The text of that content is not modified — for example, the name you appear under in a transcript or what was said in a meeting. If you need that content deleted as well, write to us and we will coordinate it with your organization's administrator.
• Logs and backups may retain references for up to 30 additional days until the natural rotation cycle.

If you prefer manual processing, write to hola@vidivici.ai from the email registered to your account.

Subject to applicable law (including GDPR, CCPA and Dominican legislation), you have the right to:

• Access: receive a copy of the data we hold about you, in portable JSON format, from within the mobile app (Profile → Export my data) or by email request.
• Rectification: correct inaccurate data from the Profile screen or by email request.
• Erasure: see §7.
• Portability: export your data in structured format to move it to another service.
• Objection and restriction of processing in specific cases provided by law.
• Withdraw consent at any time without affecting the legality of prior processing.
• Lodge complaints with the competent data protection authority.

To exercise any of these rights: hola@vidivici.ai. We respond within 30 days max.

vidivici uses third-party AI models to process the content of your sessions:

• Deepgram — audio transcription (call audio through LiveKit; recording audio directly).
• Anthropic (Claude) — summaries, titles and action items (text), analysis of photos and video frames for the summary and for risk detection (vision), and the AI assistant.
• Voyage AI — embeddings of the text of your action items and of your questions to the assistant, so the assistant can search your history.
• Model training: Anthropic does not use data received through its commercial API to train its models. We are configuring the exclusion of your data from Deepgram's and Voyage AI's training programs and will update this section once it is confirmed.
• AI-generated summaries and action items are suggestions. Final responsibility for operational decisions remains with you and your team.
• If you find an error in a transcript or summary, you can point it out in the session comments and correct the tasks (action items) from the app or the web panel; to correct the text of a transcript or summary, write to hola@vidivici.ai.

The vidivici.ai website only uses essential cookies (browser session, language preference). The mobile app uses no cookies — authentication is handled via tokens kept in the app's private storage on your device. We have no advertising or third-party analytics tracking cookies. See the Cookie Policy for details.

vidivici is designed for professional B2B use. It is not directed at users under 16 and we do not knowingly collect information from minors. If you believe a minor shared data with us, contact hola@vidivici.ai and we will delete it.

We apply technical and organizational measures: encryption at rest and in transit, Row-Level Security, periodic security audits, error monitoring via Sentry. No system is 100% secure — if we detect a breach affecting your data, we will notify you without undue delay.

If we update this policy, we will change the date and version number above. Material changes will be communicated by email to active users at least 30 days before they take effect.

Changes in version 2.2: we corrected statements that did not reflect how the service works today. We removed the mention of two-factor authentication and periodic key rotation; clarified what each AI provider does and the status of excluding your data from their training programs; clarified when recording audio is kept, the retention period, how to correct a transcript or summary and what happens to shared content when you delete your account; and removed Cloudflare R2, which we do not use.

Questions, requests or complaints: hola@vidivici.ai.

Spanish version available at vidivici.ai/legal/privacidad.