GDPR and Data Protection
July 22, 2026
Last updated: July 22, 2026
[Overview]
This document supplements the VicastCam Privacy Policy and is primarily intended for users in the European Economic Area (EEA), detailing your data protection rights under the GDPR.
VicastCam (hereinafter referred to as "we" or "the Platform") is operated by VICAST INTERNATIONAL LIMITED (Company Registration No.: 79517173), with registered address: RM 18 2/F, TUSPARK, 118 WAI YIP STREET, KWUN TONG, HONG KONG. We respect users’ privacy rights and process personal data in accordance with applicable data protection laws and regulations, including the EU General Data Protection Regulation (GDPR).
In accordance with Article 27 of the GDPR, we have appointed a compliance representative within the EU:
Representative Institution Name: [To be filled with the full name of the EU representative institution]
Representative Physical Address: [To be filled with the physical address in the EU]
Representative Dedicated Email: [To be filled with the representative’s dedicated email]
In accordance with the UK Data Protection Act, we have appointed a compliance representative within the UK:
Representative Institution Name: [To be filled with the full name of the UK representative institution]
Representative Physical Address: [To be filled with the physical address in the UK]
Representative Dedicated Email: [To be filled with the representative’s dedicated email]
This page is intended to help you understand:
How we protect your personal data;
What data protection rights you have;
How to submit relevant requests to us.
[Data Controller Information]
Data Controller: VICAST INTERNATIONAL LIMITED
Company Registration No.: 79517173
Registered Address: RM 18 2/F, TUSPARK, 118 WAI YIP STREET, KWUN TONG, HONG KONG
Contact Email: service@vicastcam.com
Data Protection Contact: business@vicastcam.com
I. Data Protection Principles
VicastCam processes personal data in accordance with the following principles:
Lawfulness, fairness, and transparency
We process personal data only when we have a legal basis, and we clearly explain the data processing methods to users.
Purpose Limitation
We use personal data solely for defined service purposes, including:
Providing VicastCam product features;
Managing user accounts;
Providing customer support;
Processing purchases and subscription services;
Improving product experience and service stability.
We will not use personal data for any unauthorized purposes.
Data Minimization
We collect only the information necessary to provide the service, and we never collect, upload, or retain in the cloud any user-created video, image, effect, audio, project file, or other content.
Data Accuracy
We strive to maintain the accuracy of user data and support users in updating relevant account information.
Data Storage Limitation
We retain relevant data only for the period necessary to provide the service, fulfill legal obligations, process transaction records, or resolve disputes. For specific retention periods, see Article 5 of this document.
Data Security Protection
We adopt reasonable technical and administrative measures to protect user personal data, preventing unauthorized access, disclosure, or misuse. See the "VicastCam Security and Privacy Commitment" document for details.
II. Your Data Protection Rights
Under Articles 12-22 of the GDPR, you have the following data protection rights:
Right of Access (GDPR Article 15)
You have the right to request information about: whether we process your personal data; what personal data we process; and the relevant purposes of the data processing.
Right to Rectification (GDPR Article 16)
If your personal data is inaccurate or incomplete, you may request to modify or update the relevant information.
Right to Erasure / Right to be Forgotten (GDPR Article 17)
You may request the deletion of your personal data. You can also delete your account using the "Account Deletion" feature provided within the VicastCam application.
After deletion, a 30-day data buffer period is reserved solely for financial reconciliation, dispute resolution, and post-sale verification; after the buffer period ends, the cloud server will permanently and physically delete the corresponding data, without retaining backups, hidden logs, or reusing it. Pursuant to mandatory legal retention obligations, certain transaction records will be retained in accordance with statutory periods.
Reiteration: All user-created content is permanently stored only on your local device; the cloud has never stored any such content, and there is no need for cloud-based content deletion.
Right to Restrict Processing (GDPR Article 18)
Subject to applicable legal provisions, you may request that we restrict the processing of your personal data.
Right to Data Portability (GDPR Article 20)
You have the right to request a copy of the personal data you have provided to us. You can submit such a request through the "Personal Data Download" feature within the VicastCam app.
Right to Object (Article 21 of the GDPR)
In certain circumstances, you have the right to object to our processing of your personal data for specific purposes.
Right to Withdraw Consent (Article 7 of the GDPR)
You have the right to withdraw your previously granted consent to data processing at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.
You also have the right to withdraw your consent to non-essential cookies and web analytics tracking on the official website at any time. This can be done via the cookie settings pop-up on the official website, the app's privacy settings, or by email at business@vicastcam.com. Withdrawal of consent does not affect the lawfulness of data processing carried out prior to the withdrawal.
Right to Lodge a Complaint (Article 77 of the GDPR)
You have the right to lodge a complaint with the data protection supervisory authority in your country of residence within the EU.
III. Data Protection for User-Generated Content
VicastCam is an audio/video virtual tool that operates on your local terminal. The platform's cloud servers do not store, upload, read, or back up any user-created original materials, including videos, images, audio, filters, templates, project files, or other creative content.
All media materials, custom effects, background files, and recordings that you create, edit, or save are stored natively on your own device's local hardware storage (e.g., phone or computer).
The platform has no feature that forces the upload of materials to the cloud.
The platform's backend cannot actively scan, read, or pull any of your local creative files.
Unless you manually and actively enable the paid cloud synchronization value-added service, we will not access any user-created assets.
Ownership, control, and the right to delete all materials permanently and fully belong to the user.
IV. Protection of Camera, Microphone, and Audio/Video Data
To provide real-time video and audio functionality, VicastCam may require access to your device's camera and microphone permissions.
Camera permission is used for: video capture, green screen processing, virtual camera output, and real-time video effect rendering.
Microphone permission is used for: audio capture, virtual sound card functionality, and real-time audio noise reduction and mixing.
All video and audio data streams are processed and rendered in real-time locally on your device. The original audio/video streams are not uploaded to our cloud servers for storage, transcoding, or retention.
Without your explicit and active authorization, we will not store, sell, or forward your camera feed or original microphone audio content on the cloud.
V. Data Retention Period
We retain your personal account, order, and log management data only for the following periods. This does not include any user-created materials:
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Account Registration Information | Duration of account validity + 30-day grace period after account deletion | Necessary for service provision and after-sales rights protection |
| Transaction Records | 5 years | Statutory retention obligation under EU fiscal, payment compliance, and cross-border transaction traceability requirements |
| Security & Risk Control Logs | 1 year | Platform security protection, abnormal behavior investigation, and attack traceability |
| Customer Service Communication Records | 90 days | Necessary for handling order disputes and after-sales issues |
| User-Created Materials | Stored permanently only on the user's local device; not stored on the platform's cloud | Under the user's complete control |
After the retention period expires, the relevant data will be automatically and permanently destroyed and cannot be recovered.
VI. International Data Transfers
VicastCam is headquartered in Hong Kong. User personal accounts, orders, and log-type management data are primarily stored and deployed on AWS compliant server nodes in Singapore, providing services to global users. User-created content is stored locally at all times and does not participate in any cross-border data transfers.
For cross-border transfers involving EU user account management data, we will adopt the following safeguards:
Sign the Standard Contractual Clauses (SCCs) approved by the European Commission;
Ensure that the data recipient provides a level of data protection security equivalent to the GDPR;
Where applicable, rely on EU adequacy decisions or other lawful cross-border transfer mechanisms.
You have the right to contact us via business@vicastcam.com to obtain a copy of the SCC cross-border transfer agreement.
VII. Data Processing by Third-Party Services
To provide stable and secure services, VicastCam may use necessary third-party services, such as:
Payment services: Apple Inc. (App Store) / Google LLC (Google Play) / PayPal
Cloud infrastructure: Amazon Web Services (AWS) Singapore region nodes or Microsoft Azure Singapore nodes
Data analysis and crash reporting: Firebase / Sentry
The aforementioned third parties only process operational data such as accounts, payments, and crash logs, and have no access to or ability to obtain any user locally stored creative content. We have signed Data Processing Agreements (DPAs) with all third-party service providers to ensure their processing complies with GDPR regulatory requirements.
For a detailed list of specific third-party SDK integrated, please refer to the "VicastCam SDK List" published on the official website.
VIII. Children's Privacy Protection
VicastCam values children's privacy protection. We do not knowingly collect personal data from users under the age of 16 (if the laws of your country/region stipulate a higher age threshold, the local statutory minimum age shall prevail).
If you believe we may have inadvertently collected children's personal data, please contact us immediately. We will clean up the corresponding data and complete verification within the statutory time limit.
IX. Users in the European Economic Area (EEA)
If you are located in the European Economic Area (EEA) and wish to exercise your data protection rights, please contact us via the following methods:
Customer service email: service@vicastcam.com
Data protection contact email: business@vicastcam.com
We will review, respond to, and implement your request within 30 calendar days of receiving a complete request, in accordance with applicable data protection laws.
X. Policy Changes
VicastCam reserves the right to revise this policy from time to time in response to changes in laws and regulations, business adjustments, or user feedback. After policy changes, we will notify you through the official website, in-app announcements, or email to your registered email address. The revised policy will take effect from the date of its announcement. If the changes involve alterations to the purpose of data processing or have a significant impact on your rights, we will seek your explicit consent again via pop-up notifications or email.
XI. Contact Us
If you have any questions regarding GDPR, data protection, or personal data processing, please contact us:
VicastCam
Customer service email: service@vicastcam.com
Data protection contact email: business@vicastcam.com
Official website: vicastcam.com