03 / Data stewardship
Privacy Policy
GDPR (EU 2016/679) & CCPA / CPRA aligned privacy practices. Last updated November 10, 2026.
Zero Customer Media Training Guarantee
Customer short-drama masters, voice samples, e-commerce SKU assets, custom LoRA weights, and generated media are never used to train foundation models.
Information we process and why
We process account and billing records to provide the service, authenticate users, prevent fraud, and meet legal obligations. Job metadata—including model, settings, queue state, timestamps, and usage—is used for scheduling, billing, support, reliability, and security. Customer media is processed only to execute the requested workload and return results. We do not sell personal information or use customer media for advertising profiles.
Ephemeral Stateless Worker Memory Hygiene
Each pt_aten_worker node is designed to clear GPU memory (VRAM Zeroing) and its container temporary directory immediately after a 10-minute micro-batch completes or terminates. The worker does not retain customer plaintext media slices after that execution. Checkpoints and finished outputs are stored only where required to resume the job or deliver the service, under the configured retention window; deletion and lifecycle policies remove them when that purpose ends, subject to legal or security holds.
Encryption & access controls
Data is encrypted in transit using TLS 1.3 and at rest using AES-256-GCM where supported by the service storage layer. Access to production systems is role-restricted, logged, and granted only to personnel who need it for operations, support, or incident response. Enterprise private checkpoint and object-storage access is scoped to authorized jobs and configured credentials.
GDPR and CCPA / CPRA rights
Depending on your location, you may request access, correction, deletion, portability, restriction, or objection to processing, and may appeal a decision where law provides that right. California residents may exercise rights to know, correct, delete, and opt out of sale or sharing; VidTensor does not sell or share personal information for cross-context behavioral advertising. We do not discriminate for exercising privacy rights. Contact [email protected] to submit a request; we may verify identity and respond within legally required periods.
Processors, international transfers & retention
We use vetted infrastructure and service providers under contractual safeguards and process data in regions needed to operate the service. Where required, international transfers rely on an applicable transfer mechanism and supplementary safeguards. We retain account and transaction records for service delivery and legal compliance; media retention is limited to the product cache, archive period, or enterprise configuration presented for the relevant plan.
Data Processing Agreements
Business customers acting as controllers may request a Data Processing Agreement (DPA), subprocessors information, and security documentation through the enterprise security contact. A DPA governs processing of personal data on the customer's behalf and does not expand our rights to use customer media.