Privacy Policy

Vauda is a digital asset management (DAM) platform that catalogs your material with artificial intelligence and makes it searchable. When it comes to personal data we act in two distinct roles, and the distinction matters:

• As data controller: for your account and billing data (your name, your email, your organization, your plan). This policy covers it.
• As data processor: for the content you upload to your library. That content may include personal data of other people —faces, voices, names in a photo's metadata—. There, you (or your organization) are the controller: we process that material on your instructions and only to provide the service to you.

• Account data: name, email, organization and role, managed through our identity provider.
• Billing data: your plan, credit balance and usage, and your customer identifiers with our payment processor. We do not store your full card number: it is handled directly by our payment processor.
• Content you upload: your files (images, video, audio, documents) and their metadata, together with the catalog the AI generates (descriptions, tags, transcriptions, detected text and search vectors). It may contain personal data of third parties.
• Technical and security data: IP address, device and browser type, and an audit log of relevant actions in your account.
• Cookies: only those strictly necessary to sign you in and keep your session secure. We do not use advertising or third-party tracking cookies.

• To provide the service: store, catalog, transcribe, index, and let you search and share your material.
• To authenticate you and protect your account and your organization's.
• To manage your plan, your credits and billing.
• To provide support and send operational communications (service notices, material changes).
• To operate, maintain and improve the platform, and to prevent fraud and abuse.

What we do not do: we do not sell your data, we do not use it for advertising, and we do not use your content to train artificial intelligence models. We detail that last point in our Data & AI Policy.

We process your data on the following bases, as applicable to your jurisdiction: performance of the contract you enter into when using Vauda; our legitimate interest in operating and securing the platform; your consent, where the law requires it; and compliance with legal obligations (for example, tax obligations).

To operate Vauda we work with a limited number of carefully selected service providers (sub-processors) that process data solely on our behalf and under contract. We group them by category:

• Cloud infrastructure and file storage.
• AI processing for cataloging, transcription and semantic search.
• User identity and authentication.
• Payment processing (as Merchant of Record).

None of these providers uses your content to train their AI models, and none is permitted to sell your personal data. We do not share your data with third parties for their own marketing purposes. We may also disclose data where required by law or to protect rights and safety.

Some of our providers process data outside your country (for example, in the United States or the European Union). When an international transfer takes place, we rely on recognized safeguards —such as standard contractual clauses or equivalent adequacy frameworks— so that your data keeps an appropriate level of protection.

Because your library may include photos, videos or audio with identifiable people, when you upload that material you represent that you have the rights and authorizations needed to process it. We process it as a processor, following your instructions and only to provide the service.

If a person appearing in your content wishes to exercise their rights, the point of contact is your organization (the controller). For customers who need it, we offer a data processing agreement (DPA).

We keep your content and account data while your account is active. When you delete an asset, or when you delete your account, we remove the material and the derived catalog (including derivatives, transcriptions and search vectors); copies in backups are purged on the normal rotation cycle. Technical and audit records are kept for limited periods, for security and compliance.

Depending on your jurisdiction, you may exercise the rights of access, rectification, deletion, portability, objection and restriction of the processing of your personal data. For your account data, many of these actions are available directly in the platform (edit your profile, export or delete your content, delete your account).

To exercise any right, or if you have questions, write to us at [email protected]. Regarding third-party data appearing in your content, contact the organization responsible for that library.

We encrypt your material at rest and in transit, isolate each organization at the data layer, and all delivery uses signed links that expire —an asset never sits at a permanent public URL—. We apply role-based access control and log sensitive actions.

Vauda is a product for businesses and professionals; it is not directed at minors and we do not knowingly collect their data. If you believe a minor has provided us with personal data, write to us and we will delete it.

We may update this policy to reflect changes in the service or the law. When a change is material, we will notify you by a reasonable means. The “last updated” date at the top indicates the current version.

Vauda is operated by Patata Labs, based in Santiago, Chile. For any privacy question or to exercise your rights, write to us at [email protected].