Privacy Policy

• Account information: your name, email address, profile image and authentication credentials managed by our authentication provider.
• Content you upload: scripts, images, audio, video and other media you add to a project.
• Content generated in the service: scenes, shots, narration text, generated images, generated video and rendered final videos created from your inputs.
• Project and production data: project settings, production configuration, status, timing information and internal production history.
• Communications: messages you send us about support or legal requests.

You may choose to connect a social platform account (for example YouTube, TikTok, Instagram or Facebook) so that Vivera can publish content on your behalf. Connections are always initiated by you and can be disconnected at any time.

• When you authorize a connection, the platform returns access and refresh tokens to Vivera together with basic account or channel identification (such as an account name, channel name and identifier).
• Tokens are stored encrypted and server-side only. They are never exposed to the browser, never embedded in client code and never shared with other users.
• Tokens are used only to perform actions you request, such as verifying your connected account or uploading a video you explicitly authorize.
• Disconnecting an account removes the stored tokens for that platform from our systems.
• You may also revoke access directly from the platform's own account security settings at any time.

When you connect YouTube, Vivera may access authorized YouTube account and channel information, and may upload content to your channel only when you explicitly authorize that upload. Vivera does not access YouTube data for any purpose you have not requested.

Vivera's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Vivera does not sell Google user data, does not use it for advertising, and does not allow humans to read it except as required for security, to comply with applicable law, or with your explicit consent.

Google's handling of your information is described in the Google Privacy Policy. You can review and revoke Vivera's access at Google Account permissions.

Vivera shares or discloses information obtained through your Google authorization only as needed to provide the YouTube connection and the actions you request:

• Google and YouTube receive the OAuth authorization and token requests, the channel-identification request, and, only if you explicitly start an upload, the selected video and the title, description, visibility and audience settings you submit. Google and YouTube process that information under their own policies.
• Supabase, our database and media-storage provider, stores the connected YouTube channel identifier and name and the encrypted access and refresh tokens. It also stores publication records and the video files that you create or upload in Vivera. This storage is needed to keep your project connection and deliver the video you select.
• Railway, our application-hosting provider, processes your OAuth authorization response and access tokens on Vivera's server to identify your channel, refresh your authorization and carry out a user-initiated upload. Your Google password is never provided to Vivera. OAuth tokens are not sent to other Vivera users or exposed in the browser.

We do not disclose Google account or YouTube channel data or OAuth tokens to advertising partners, data brokers or AI/media generation providers for their own purposes. We do not sell this data or use it for advertising or training general-purpose AI models. Service providers process it only to operate the features described above and under appropriate confidentiality and security commitments. We may disclose information if required by applicable law, or with your explicit consent.

If you connect a TikTok, Instagram or Facebook account, Vivera receives the authorization scope you approve, basic account identification and the ability to publish content you explicitly authorize. These integrations follow the same handling rules described above: user-initiated connection, encrypted server-side token storage, use limited to the actions you request, and removal on disconnect. Your use of those platforms remains subject to their own terms and privacy policies.

• To provide, operate and maintain your account and workspace.
• To create, store, organize and render the projects and videos you produce.
• To perform publishing actions that you initiate to your connected accounts.
• To secure the service, prevent abuse and troubleshoot technical problems.
• To communicate with you about the service and respond to your requests.
• To comply with legal obligations.

We do not sell your personal information and we do not use your content to advertise to you.

Creating a publication plan or choosing an "Auto Publish" mode does not, by itself, upload a video to YouTube. The current YouTube publishing flow sends the selected video and its title, description, visibility and audience settings only when you review the file and explicitly select "Publish selected video to YouTube." You are responsible for the content you choose to publish.

To operate the service, Vivera relies on third-party infrastructure and AI/media processing providers for functions such as authentication, hosting, data storage, media storage and the generation or processing of text, images, audio and video. Content and instructions necessary to complete a requested task may be transmitted to those providers solely to perform that task. We select providers that offer appropriate security and confidentiality commitments, and we do not authorize them to use your content for their own unrelated purposes.

Authentication uses browser storage and session information to keep you signed in and protect access to your studio. Disabling this storage may prevent sign-in or interrupt your session.

We keep operational logs such as request metadata, error reports, job status and security events. These records help us keep the service reliable and secure. They are retained for a limited period and are not used to build advertising profiles.

Account, project and media data is retained while your account is active or as long as needed to provide the service. Connected-platform tokens are retained until you disconnect the platform, the token is revoked, or the account is deleted. Operational logs are kept for a limited period. We may retain limited records where required for legal, accounting or security reasons.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can disconnect any social platform at any time, and you can request deletion of your account and associated data. We will confirm your identity before acting on a request and will respond within the period required by applicable law.

Follow our data deletion instructions to request deletion of an account, projects or stored connected-platform information. Revoking platform access does not automatically remove videos you already published there.

We apply industry-standard safeguards including encrypted transport, encrypted storage of platform credentials, access controls that restrict data to the owning account, and server-side handling of all secrets. No system can be guaranteed to be completely secure, but we work to protect your information and to respond promptly to any issue we identify.

Vivera Video Studio is not intended for children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information. If we learn that we have collected such information, we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated through the service.

Vivera Video Studio is operated by Konexfy LLC. Questions, account support, billing reviews, data access and deletion requests can be sent to support@riverzab.com.

Paid subscriptions and recharges are not currently open. When enabled, Konexfy LLC will use Stripe to process Vivera payments. Stripe will receive the contact, billing and payment information you enter in its checkout. Vivera will keep customer and transaction references, subscription status, invoices and usage-ledger information needed to provide access, reconcile balances, address disputes and meet accounting obligations. Vivera will not receive or store complete payment-card details.

Stripe describes its handling of payment information in its Privacy Policy. Generation requests may send necessary prompts and media to the selected processing provider; that is separate from social account authorization and does not give those providers your Google or social-platform access tokens.