Vivarium policy
Privacy Policy
What data Vivarium handles, why it is used, where it may be processed, and how to make a privacy request.
Effective date: 1 September 2026
1. Controller
The controller responsible for personal data processed through this website is Sylva Technology Limited, Business Registration Number 80261442, at Room 1508, 15/F, Office Tower Two, Grand Plaza, 625 Nathan Road, Mong Kok, Hong Kong. Privacy requests can be sent to support@vivariumnature.com.
2. Data we process
- Account and contact data, such as name, email address, and account identifiers.
- Uploaded tank photos, generation instructions, generated concepts, and related job records.
- Purchase status, product, credit, subscription, refund, and dispute records. Payment card details are handled by the payment provider, not stored by Vivarium.
- Device, security, diagnostic, and service-usage data needed to operate, protect, and improve the service.
- Support messages, complaint materials, and any evidence you choose to provide.
3. Why we use data
We use data to provide requested generations, maintain accounts and credits, confirm purchases, respond to support and legal requests, secure the service, prevent abuse, meet legal duties, and improve reliability.
Where required, we rely on consent. Otherwise, processing is based on performing a contract, legitimate interests that do not override your rights, or legal obligations.
4. Service providers and transfers
We may use hosting, storage, AI processing, customer support, security, analytics, and payment providers. They receive only the data needed for their role and must protect it under contract where required.
Providers may process data outside your country. Where law requires, we use an approved transfer mechanism or another lawful safeguard.
5. Retention and deletion
Our detailed retention schedule is Account data is normally retained while the account is active. Account deletion is typically processed within 30 days. Limited records may be retained where needed for fraud prevention, dispute resolution, enforcement, backups, or legal obligations, then deleted or de-identified when no longer needed.. We keep data only as long as needed for the purposes above, then delete or de-identify it unless law requires longer retention.
You may request account or image deletion. Some transaction, security, dispute, or compliance records may need to be retained after account deletion.
6. Security
We use administrative, technical, and organizational safeguards appropriate to the data and risk. No internet service can guarantee absolute security, so you should also protect your account credentials.
7. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data, withdraw consent, and complain to a data-protection authority. We may verify your identity before acting on a request.
8. Contact
Privacy requests: support@vivariumnature.com.