Privacy notice

Data processed

Depending on the feature, we process account name, email, protected password, verification status, session and security data such as IP address and browser details, AI requests, uploaded files, projects and correspondence. Credit purchases and subscriptions involve order records, payment identifiers and status, wallet balances and operation settlements. Do not enter passwords, API keys or sensitive personal information into prompts.

Purposes and legal bases

Accounts, projects, requested features and pre-contract enquiries: Article 6(1)(b) GDPR. Statutory tax and accounting duties: Article 6(1)(c). Security, abuse prevention, diagnostics, non-contract enquiries and protecting claims: legitimate interests under Article 6(1)(f). Separate optional processing requiring consent may take place only after consent under Article 6(1)(a).

Browser, server and AI

Some editors store drafts locally in your browser, without automatic device synchronisation. Server-based saving uploads the relevant files and project data to 4vik. Choosing an AI feature sends the required prompt and, where applicable, source materials to OpenAI or Runway. Background removal runs its model in the browser; saving the project to your account is a separate server operation. See each tool guide.

Recipients and payments

Authorised platform staff and hosting, email, technical and accounting providers may receive data necessary for their services, as may authorities authorised by law. OpenAI and Runway receive data required by selected AI tasks. PayPal processes payment information under its own notice; 4vik receives transaction identifiers and status. Enter payment authentication details only in the payment provider or bank interface.

Retention

Account data is retained while the account is maintained. Server projects support access by their owner and can be deleted in the relevant tool. Local drafts remain until you delete them or clear site data; sessionStorage normally lasts for the tab session. Payment and statutory records are retained for applicable tax and accounting periods; claim-related information until limitation periods expire or a dispute is resolved. Security records are kept as needed to detect and investigate incidents. Session expiry does not delete accounts or projects.

Processing outside the EEA

International AI and payment services may involve transfers outside the European Economic Area. Such transfers require an appropriate Chapter V GDPR basis, such as an adequacy decision or standard contractual clauses applicable to the recipient and service. Contact the controller for the basis of a particular transfer and a copy of the safeguards.

Your rights

Under the GDPR, you may request access, a copy, rectification, erasure, restriction or portability. You may object to legitimate-interest processing and withdraw consent without affecting earlier lawful processing. You may complain to the President of the Polish Personal Data Protection Office (UODO). Contact the operator to exercise your rights; identity verification may be needed to protect your data.

Voluntary data, location and automation

Providing data is voluntary, but required fields are needed for the selected feature, account or payment. Language and country suggestions use browser settings and time zone, not precise device location. AI outputs help create materials rather than make decisions having legal effects on users.

Your rights and further information

• UODO — Privacy notice
• UOKiK — Complaints and withdrawal