Legal

Privacy Notice

Last updated: May 2026

What we collect, why we collect it, and the rights you have over your data. We're built around a simple principle: your recordings never leave your browser.

01Who we are

Vivacorder is operated by Mohamed Ghoweba, a sole proprietor (the "Seller", "we", "us"). For the personal data we collect about you when you use Vivacorder, we act as the data controller. You can contact us at privacy@vivacorder.com.

02What we collect and why

CategoryExamplesPurposeLegal basis
Account dataEmail, display name, password hash, OAuth-provider ID (Google)Create and secure your account; sign you inContract performance
Profile dataAvatar URL, plan tierPersonalize the app; enforce free-tier limitsContract performance
Recording metadataDuration in seconds, project name, timestampEnforce free-tier limits (recording length, last-3 history). No video or audio bytes are uploaded.Contract performance
Subscription dataPlan, status, billing-period dates, Paddle subscription/customer IDGrant Pro features; manage renewalsContract performance
Connected servicesOAuth tokens for Google (YouTube/Drive) — only if you connect themPublish your recordings to your chosen destinationConsent
Support correspondenceEmails you send usRespond to your questionsLegitimate interest
Technical logsIP address, browser, error messagesSecurity, fraud prevention, debuggingLegitimate interest

03What we do not collect

Your content stays on your device

We never receive your screen recording, audio, webcam, screenshots, voiceover clips, or the contents of files you load into a project. Everything below is processed locally in your browser.
  • Your screen recordings, audio, webcam, or annotations from Studio — these never leave your browser. The .webm/.mp4 file downloads directly to your device.
  • The contents of PDFs, images, slides, or flowcharts you load into a project — these are processed locally.
  • Card text, lesson scripts, or teleprompter content.

04Who we share data with

  • Paddle — our Merchant of Record. Paddle handles checkout, billing, tax compliance, invoicing, and subscription management. See Paddle's privacy policy.
  • Our backend hosting provider — for the database and authentication layer.
  • Google — only if you choose to connect your Google account for YouTube/Drive integration. We use the OAuth token solely for the actions you initiate.
  • Professional advisers (legal, accounting) where strictly necessary.
  • Authorities where required by law (subpoena, court order, regulatory request).

We do not sell your personal data to anyone.

05Retention

We keep account, profile, and subscription data for as long as your account exists, plus a reasonable period after closure to comply with legal obligations (typically up to 7 years for billing records). Recording-metadata rows are pruned automatically for free users (only the last 3 are kept). Connected-service OAuth tokens are deleted as soon as you disconnect the service.

06Security

We apply industry-standard technical and organizational measures: HTTPS everywhere, password hashing, row-level security on the database, scoped OAuth tokens, and least-privilege access for service operators. No system is perfectly secure; we'll notify you promptly of any breach affecting your data, as required by law.

07International transfers

Our infrastructure providers may process data in regions outside your country of residence (including the United States and the European Union). Where required, transfers are protected by Standard Contractual Clauses or equivalent safeguards.

08Your rights

Depending on your jurisdiction (and in particular if you're in the UK, EEA, or California), you have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate data;
  • Request erasure ("right to be forgotten");
  • Restrict or object to processing;
  • Receive your data in a portable format;
  • Withdraw consent (for processing based on consent);
  • Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email privacy@vivacorder.com. We respond within one month.

09Cookies & local storage

We use a small number of cookies and browser-storage entries strictly necessary to run the service: keeping you signed in, remembering your theme preference, and storing your in-progress projects locally. We do not use third-party advertising or tracking cookies.

10Changes to this notice

We may update this Notice. Material changes will be highlighted in the app or notified by email. The "Last updated" date at the top always reflects the current version.

11Contact

Privacy questions: privacy@vivacorder.com.
Billing/refund questions: paddle.net.