In short: we use your data to create what you ask for, charge, prevent abuse and comply with the law. Face photos are processed only to create the result, with your consent. Uploads and results are deleted within the periods below. You can download or delete your data on your account page.
1. Who processes your data
The data controller is Vídeos DIIA.
Data protection officer (DPO): our privacy team, at privacidade@phvia.com.
2. Data we collect
- Account: name, e-mail and Google profile photo, if you sign in with Google.
- Usage: creations, credits, payments (amount, status and Mercado Pago or Stripe identifier; never your card number) and the consents you gave.
- Content: photos and videos you upload and the generated results.
- Technical data: IP address (stored as an irreversible code, to prevent abuse), device identifier (also as a code), browser and cookies.
- Communication: e-mails we send you, such as the sign-in code and the creation-ready notice.
3. Face photos
In Character Swap and Living Old Photo, we process face images, which may be considered biometric data. We do this only with your consent, asked before each creation, and only to generate the result.
We don't build facial recognition profiles. Automated moderation analyzes images for safety (nudity, apparent age, public figures), not to identify you.
4. Why we use it and on what legal basis
- Creating what you ask for, keeping your account and credits: performance of the contract.
- Processing payments and keeping tax records: performance of the contract and legal obligation.
- Moderation, security and fraud and abuse prevention: legitimate interest and, for face images, your consent.
- Keeping access logs for 6 months: legal obligation (Brazilian Internet Civil Framework).
- Service e-mails, such as creation-ready and payment notices: performance of the contract.
- Non-essential cookies, when there are any: only with your consent.
6. How long we keep it
- Uploaded photos and videos: 7 days.
- Results: 30 days for free accounts and 180 days for paying accounts.
- Public gallery items: until you ask for removal.
- Account data: while the account exists.
- After account deletion: payments and the credit statement are kept for 5 years without data that identifies you (tax requirement), and access logs for 6 months.
7. Your rights
You can ask for confirmation of and access to your data, correction, anonymization, portability, deletion, information about sharing, and withdrawal of consent.
- Download your data: Account → Export my data.
- Delete your account: Account → Delete account (deletion happens after 7 days, and you can cancel during that period).
- Other requests: privacidade@phvia.com.
You can also complain to your data protection authority (in Brazil, the ANPD).
8. Security
We use encrypted connections, private storage with temporary links (your photos, videos and elements only open through an expiring link; only what you choose to publish in the gallery is public), access control and logging of administrative actions. No system is infallible; if a relevant incident happens, we'll notify you and the authorities.
9. Minors
Accounts are only for people aged 18 or older. In Living Old Photo, family photos with children can be restored at the request of the person responsible, but they never go to the public gallery. Character Swap doesn't accept photos of minors.
11. Changes to this policy
We may update this policy. The version date is at the top of this page, and important changes will be announced.