This Privacy Policy explains how Playvios ("we", "us", or "our") collects, uses, shares, and protects your personal information when you use our interactive video platform, including our website at playvios.com and our mobile application (the "Service"). We operate as the data controller for the personal data described below.
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, this policy is provided in accordance with the General Data Protection Regulation (GDPR). If you are a California resident, it is provided in accordance with the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). See Section 12 for the rights available to you.
Playvios operates an interactive video creation and viewing platform. You can reach us at q171005@163.com for any privacy-related question, request, or complaint.
We never receive or store your full card number. Payments are processed by our payment providers:
Each purpose is paired with its legal basis under the GDPR:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide your account, authenticate you, and sync your progress across devices | Performance of a contract |
| Deliver interactive stories (save your choices, resume playback, unlock purchased episodes) | Performance of a contract |
| Credit coin purchases and maintain your coin balance | Performance of a contract |
| Host, display, and distribute creator content you publish on the platform | Performance of a contract |
| Respond to support requests and enforce our Terms of Service | Legitimate interests / Legal obligation |
| Detect fraud, abuse, and unauthorized access | Legitimate interests |
| Aggregate analytics to understand which features are used and to improve the Service | Legitimate interests (with consent where cookies require it) |
| Send service-related notices (security, policy changes, transaction confirmations) | Legal obligation / Performance of a contract |
| Optional marketing emails, if you opt in | Consent (withdrawable at any time) |
| Category | Purpose | Consent Required? |
|---|---|---|
| Strictly necessary | Keep you signed in, remember story progress, prevent fraud, process checkout | No |
| Functional | Remember preferences (language, playback settings) | Yes |
| Analytics | Understand aggregate usage (which stories are popular, where users drop off) | Yes |
On first visit, we present a consent banner that lets you accept or reject non-essential cookies before they are set. You can change your choice at any time via the cookie settings link in the footer. You may also block or delete cookies in your browser settings; strictly necessary cookies cannot be disabled without breaking core functionality.
We do not use third-party advertising cookies or cross-site trackers at this time. We may add analytics tools in the future and will update this section accordingly.
We do not sell your personal information. We share it only with the following categories of recipients, and only as needed to run the Service:
| Recipient | Purpose | What They Receive |
|---|---|---|
| Creem (payment, Merchant of Record) | Process website payments, handle taxes and refunds | Payment details, transaction data, email for receipt |
| Apple | Process in-app purchases | Handled by Apple; we receive only purchase validation data |
| PayPal (where offered) | Process payments | Payment details, transaction data |
| Vultr (hosting) | Host our servers | All stored data, on servers located in Singapore |
| Cloudflare (CDN/DNS/security) | Deliver content, protect against attacks | IP address, request metadata |
| Analytics provider | Aggregate usage statistics | Pseudonymized usage events |
We may also disclose information (a) if required by law, regulation, or valid legal process; (b) to enforce our Terms of Service or defend legal claims; or (c) in connection with a merger, acquisition, or sale of assets (we would notify you before such a transfer).
Your data is stored on servers located in Singapore, and some of our processors (e.g., Creem, Apple, Cloudflare) operate in the United States or other countries. Where personal data is transferred outside the EEA, the UK, or Switzerland, we rely on the appropriate safeguards required by law, including the European Commission's Standard Contractual Clauses (SCCs) with our processors, or an adequacy decision where one applies.
We keep your personal data only as long as necessary:
When retention periods expire, data is deleted or irreversibly anonymized.
We use industry-standard measures to protect your data, including TLS encryption in transit, encryption at rest for sensitive fields, hashed passwords, access controls limited to team members who need access, and regular backups. No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we promptly investigate and notify affected users and regulators of any breach as required by law (GDPR requires notification within 72 hours).
The Service is not directed at children. You must be at least 18 years old to use the Service. If we learn that we have collected personal data from a child under the applicable minimum age (13 under the U.S. COPPA Rule; 13-16 depending on EEA member state under the GDPR), we will delete that data promptly. If you believe a child has provided us personal data, contact us at q171005@163.com.
California law grants you the right to:
If your jurisdiction grants additional rights (e.g., PIPEDA in Canada, UK GDPR, Brazilian LGPD), you may exercise them using the contact channel below, and we will respond as required by applicable law.
To exercise any right above or ask a privacy question, email q171005@163.com from the email address associated with your account (or include enough information for us to verify your identity — we may ask for verification to protect your account, and will only request the minimum needed).
We may update this Privacy Policy to reflect changes in our practices or the law. The "Last Updated" date at the top shows the current version. If we make material changes, we will notify you through the Service (for example, a prominent notice or an email to registered users) at least 14 days before the change takes effect, where required by law.