Guardiavision - Privacy Policy

Last updated: September 28, 2026

1. Introduction

Guardiavision ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

2. Data Controller

The controller within the meaning of Art. 4(7) GDPR is:

GuardiaVision
Connollystr. 3
80809 München, Deutschland
Inhaber (owner): Mohamed Ali Masmoudi
E-mail for data protection enquiries: support@guardiavision.com
Full provider identification: Impressum

We have not appointed a data protection officer because we are not required to under § 38 BDSG; enquiries are handled directly by the controller.

3. Information We Collect

3.1. Account and Billing Data

When you register or subscribe we collect:

• Name and email address (via Clerk authentication)
• Billing address and payment method (via Stripe — we never store raw card data)
• Account credentials managed by Clerk
• Subscription plan and credit balance

3.2. Content Data (Images and Videos)

When you upload images or videos for processing, that content is temporarily handled by our infrastructure. See Section 5 for the strict rules governing how this content is stored and deleted.

3.3. Usage Data

We automatically collect:

• IP address and device type
• Browser type and version
• Pages visited and features used
• Time and date of activity
• Credit usage and processing logs

4. How We Use Your Information

• To provide, operate, and maintain the Service
• To process payments and manage your subscription
• To manage credits and enforce plan limits
• To send transactional emails (receipts, payment failures, subscription confirmations)
• To detect and prevent abuse or security threats
• To comply with legal obligations

We do not use your data for advertising, profiling, or sale to third parties.

5. Content Processing and Storage

5.1. AI Processing Infrastructure

Processing is performed via RunPod, a third-party GPU cloud provider. Your content is transmitted to RunPod infrastructure for the duration of processing only and is subject to RunPod's data handling policies. Content is not retained on RunPod infrastructure after processing completes.

5.2. No AI Training

We do not and will not use your uploaded images, videos, or processed outputs to train, improve, evaluate, or benchmark any AI model — ours or any third party's — without your separate, explicit, documented written consent. This is an absolute commitment, not a default setting you can opt out of.

5.3. Data Processing Agreement

When you use Guardiavision to process content containing personal data, you act as the Data Controller and we act as the Data Processor. The full terms governing this relationship are set out in our Data Processing Agreement (DPA).

6. Third-Party Sub-Processors

We use the following third-party services to operate the platform. Each processes data on our behalf subject to their own data processing agreements:

We do not use analytics, advertising, session-replay or device-fingerprinting services, and we do not share your data with any other third parties except as required by law.

7. Legal Basis for Processing (GDPR)

For users in the European Economic Area, our legal basis for processing personal data is:

• Contract performance (Art. 6(1)(b) GDPR) — to deliver the Service you subscribed to
• Legitimate interests (Art. 6(1)(f) GDPR) — security monitoring, fraud prevention, service improvement
• Legal obligation (Art. 6(1)(c) GDPR) — tax records, legal compliance
• Consent (Art. 6(1)(a) GDPR) — only where explicitly obtained (e.g. marketing emails)

8. International Data Transfers

Some sub-processors (Stripe, Clerk, Vercel, Resend, RunPod, Cal.com/Calendly) operate partly in the United States. Where personal data is transferred outside the EEA, we rely on the EU-US Data Privacy Framework for providers certified under it and otherwise on the EU Standard Contractual Clauses (SCCs) with supplementary measures, as required under GDPR Chapter V. You may request copies of applicable transfer mechanisms by contacting support@guardiavision.com.

9. Data Retention

• Uploaded content: Deleted immediately after processing (originals) or within 24 hours (processed output)
• Account data: Retained for the duration of your account plus 90 days after deletion
• Billing records: Retained for 7 years as required by tax law
• Usage logs: Retained for up to 12 months for security and dispute purposes

10. Data Security

We implement appropriate technical and organisational measures including encrypted data transmission (TLS), access controls, and secure credential management. However, no transmission over the internet is 100% secure. In the event of a data breach affecting your personal data, we will notify you as required under applicable law.

11. Your Data Protection Rights

Under GDPR and applicable law you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — limit how we process your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent

To exercise any of these rights, contact support@guardiavision.com. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority, in particular the authority competent for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Deutschland (https://www.lda.bayern.de), or the authority of your habitual residence.

12. Cookies and Local Storage

We only use storage that is strictly necessary to provide the service you request (§ 25 Abs. 2 Nr. 2 TDDDG), which is why we do not show a cookie banner:

• NEXT_LOCALE (cookie, 1 year) — remembers your chosen language.
• Clerk session cookies (e.g. __session, __client_uat) — set only on sign-in, sign-up and dashboard pages to keep you logged in.
• Local storage — remembers that you dismissed a pop-up or banner so we do not show it again; contains no identifier.

We do not use analytics cookies, advertising cookies, session-replay tools, keystroke recording or device fingerprinting. Third-party content (booking calendar) is only loaded after you explicitly click to load it.

13. Marketing E-Mails and Newsletter

We send account and billing e-mails (welcome, receipts, payment problems, security notices) on the basis of Art. 6(1)(b) GDPR. We only send our newsletter and product announcements if you have expressly opted in from your dashboard (Art. 6(1)(a) GDPR, § 7 Abs. 2 Nr. 2 UWG) or, for existing paying customers, on the basis of § 7 Abs. 3 UWG for similar services of our own. We log the time and source of your opt-in as proof of consent. Every marketing e-mail contains a one-click unsubscribe link, and you can also opt out at any time from your dashboard or by e-mailing support@guardiavision.com; opting out never affects account e-mails.

14. Children's Privacy

The Service requires users to be at least 18 years old or to act on behalf of a business. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a minor has created an account, contact support@guardiavision.com and we will delete it.

15. Changes to This Policy

We will notify you of material changes to this Privacy Policy by email at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the date of the most recent material revision — not the current date.

16. Contact

For all privacy-related enquiries, data subject requests, or complaints:

GuardiaVision, Connollystr. 3, 80809 München, Deutschland
Email: support@guardiavision.com