Legal
Last updated: March 2026
This policy explains what personal information Vivid Labs collects, how it is used, who it is shared with, and what rights you have regarding your data. We are committed to handling your information responsibly and transparently.
We collect information you provide directly: your name, email address, and profile details when you create an account through Clerk; payment information (card type, last four digits, billing address) processed by Paddle, our Merchant of Record; course progress data including watch time, chapter completion status, and bookmarks; messages you send through the platform's messaging feature; and any details you share when contacting support or submitting feedback. We also collect information automatically: device type, browser version, operating system, IP address, pages visited, time spent on pages, and referral source. Automatic collection only occurs after you grant analytics consent through the cookie banner.
We use your information to authenticate your identity and manage account access, deliver and stream purchased course content through Cloudflare Stream, process payments and manage subscriptions through Paddle, track your course progress so you can resume where you left off, respond to support requests and feedback, send transactional emails such as purchase confirmations and password resets through Resend, send marketing communications you have opted into through Loops, analyze usage patterns to improve course content and platform performance through PostHog, detect and prevent fraud or abuse, and comply with applicable legal obligations.
We share limited data with trusted third-party services that help us operate the platform. Clerk handles authentication and identity management. Paddle, our Merchant of Record, processes payments and stores billing data in accordance with PCI DSS standards. Cloudflare Stream hosts and delivers video content with signed, time-limited access tokens. Resend delivers transactional emails. Loops manages marketing email campaigns. PostHog provides privacy-focused product analytics. Crisp powers live chat support. Each provider processes data under their own privacy policy and only receives the minimum information needed to perform their function. We do not sell your personal information to third parties.
We retain your account data for as long as your account is active. Course progress data is kept for the lifetime of your account to support a seamless learning experience. Payment records are retained for seven years to comply with tax and accounting obligations. Support correspondence is retained for two years after resolution. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Anonymized and aggregated data that cannot identify you may be retained indefinitely for analytics purposes.
Necessary cookies are always active and enable core functionality such as authentication, session management, and security. Analytics cookies are activated only after you grant consent through the cookie banner and help us understand how the platform is used. Marketing cookies, also consent-gated, allow us to measure the effectiveness of outreach campaigns. You can change your cookie preferences at any time by clicking the cookie settings link in the site footer. Disabling analytics and marketing cookies will not affect your ability to use the platform.
We implement industry-standard security measures to protect your data. All data in transit is encrypted with TLS 1.2 or higher. Video content is served through signed URLs that expire after a set duration. Authentication is managed by Clerk with support for multi-factor authentication. Payment data never touches our servers and is handled entirely by Paddle's PCI-compliant infrastructure. We conduct periodic reviews of our security practices and limit internal access to personal data to authorized personnel only.
Depending on your location, you may have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, object to or restrict certain processing activities, request a portable copy of your data in a machine-readable format, and withdraw consent for analytics or marketing at any time. For users in the European Economic Area, the United Kingdom, or Switzerland, we process data under GDPR. For California residents, we honor rights under the CCPA and CPRA. To exercise any of these rights, email support@vividlabsai.com with your request. We will respond within 30 days.
Vivid Labs operates primarily in the United States. If you access the platform from outside the US, your data may be transferred to and processed in the US or other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required by applicable law.
The platform is not directed at children under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will promptly delete it. If you believe a child has provided us with personal data, please contact us at support@vividlabsai.com.
We may update this privacy policy to reflect changes in our practices or legal requirements. When we make material changes, we will notify you by email or through a prominent notice on the platform at least 14 days before the changes take effect. The "Last updated" date at the top of this page indicates when the policy was most recently revised.
If you have questions or concerns about this privacy policy or our data practices, contact us at support@vividlabsai.com.