Privacy policy

ArtArray Company Limited · Last updated: July 23, 2026

This privacy policy is issued by ArtArray Company Limited, a software company registered in Vietnam. It applies to our products and services, including DrVictor and other applications we publish (together, “our services”). It explains what information we collect, how we use and share it, and the choices you have. By using our services, you agree to this policy.

1. Information we collect

Information you provide. When you create an account or use our services, we collect the information necessary to provide them. This may include your name, email address, profile information, and payment details for premium subscriptions. When you upload photos or other content for AI processing, that content is temporarily processed to generate the output you requested. If you contact us for support, we collect any information you choose to share.

Payment information. Premium subscriptions and in-app purchases are processed through secure payment providers (Apple App Store, Google Play Store, and Stripe). We do not collect or store your credit card numbers on our servers; we only receive confirmation that payment was completed. Your financial details are never directly shared with us.

Automatically collected information. When you use our apps or websites, we may automatically collect certain information about your device and usage patterns, including device type, operating system, app version, IP address, usage statistics, and feature preferences. We collect this to improve our AI models, app performance, and user experience.

Cookies and similar technologies. Our websites use cookies and similar technologies to maintain your session, remember your preferences, and understand how you interact with our services. Mobile app analytics may use similar technologies. You can adjust your browser or device settings to refuse cookies, but some features may not work properly if disabled.

2. How we use your information

Service delivery. We use your information to provide our services, including processing content you submit, managing your account, delivering results, managing premium subscriptions, and providing customer support.

Communication. We may use your contact information to respond to your inquiries or send important notices, such as updates to our terms or this policy. If you have opted in to marketing emails, we will use your email to send promotional content; you can opt out at any time by clicking “unsubscribe” in those emails.

Improvement of services. Usage data helps us understand behavior and preferences so we can improve our products and troubleshoot technical issues.

Legal and security. We may use information to prevent fraud, protect the security of our services and business, comply with legal obligations (such as tax or financial reporting requirements), or enforce our terms of service.

We collect and use personal information solely for the purposes described above and other compatible purposes, unless we obtain your consent or as required by law.

3. AI processing and content handling

Content processing. When you upload photos or other content for AI processing, it is temporarily processed on secure servers. Content is encrypted during transmission and processing. Original uploads are automatically deleted from our processing servers within 24 hours after generation is complete.

AI model training. We do not use your personal content to train our AI models without explicit consent. Your content is used solely to provide you with the requested service. Anonymous usage patterns may be analyzed to improve our offerings.

Generated content. Content generated for you is stored securely in your account. You retain ownership of outputs generated from your content, and you may download or delete them at any time through the relevant app.

Content moderation. We employ automated systems to detect and prevent the generation of inappropriate, illegal, or harmful content, to maintain platform safety and comply with legal requirements.

4. How we share your information

We only share personal information in limited situations:

• Service providers. We share necessary information with third parties who help us run our services, including cloud computing and AI infrastructure providers (such as Google Cloud Platform and Cloudflare), which process data under strict data protection protocols.
• Payment processors. Payments are handled by the Apple App Store, Google Play Store, or Stripe, which process your payment details securely under their own privacy policies.
• Analytics services. We use analytics tools that collect anonymized data about how users interact with our apps, to understand usage and improve our services.
• Legal requirements. We may disclose information if required by law or in response to valid requests by public authorities, such as a court order or subpoena.
• Protection of rights. We may disclose information where necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, or violations of our terms, or as evidence in litigation in which we are involved.
• Business transfers. If ArtArray Company Limited is involved in a merger, acquisition, or sale of assets, customer information may be transferred as part of that transaction. We will ensure your data remains protected and inform you of any changes to how it is used.

We do not sell or rent your personal information to third parties for their own marketing purposes. Third parties that receive your data are restricted to using it only to assist with our business operations.

5. Data retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Transaction records are kept to provide customer service and to meet our financial and tax obligations. We may retain aggregate or anonymized data that does not identify you personally for analytical purposes. If you request deletion of your data, we will do so unless we are required to keep it for legal reasons.

6. Security

We take reasonable measures to protect your personal information from unauthorized access, loss, misuse, or disclosure. Our websites use HTTPS encryption, and we and our service providers employ practices such as firewalls, secure servers, and data encryption where applicable. Payment details are handled on our payment providers’ secure systems, and internal access to personal data is limited to personnel who need it. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify you as required by applicable law.

7. Cookies in detail

• Essential cookies are necessary for our sites to function properly, such as maintaining your session.
• Analytics and performance cookies may collect information about how users interact with our sites (pages visited, time spent) to help us improve design and functionality.
• Your choices. Most browsers accept cookies automatically, but you can modify your settings to decline them or clear them at any time. Blocking all cookies may affect some features.

8. Links to other sites

Our sites may include links to third-party websites or services. If you follow those links, you will be directed to sites we do not operate. We have no control over, and assume no responsibility for, the content or privacy practices of any third-party site. This policy applies only to information collected by ArtArray Company Limited through our services.

9. Children’s privacy

Our services are not directed to children under 13 years of age (or the minimum legal age in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have inadvertently collected personal data from a child under 13, we will delete it promptly. If you are a parent or guardian and suspect your child has provided personal information to us, please contact us so we can take appropriate action.

10. Your rights and choices

Depending on your location, you may have rights including:

• Access and correction — request to know what personal information we hold about you and correct inaccurate data.
• Deletion — request deletion of your personal data. We may need to retain certain information for legal or internal business reasons, as noted above.
• Opt-out of marketing — unsubscribe at any time via the link in our emails or by contacting us. You will still receive transactional messages.
• Do Not Track — our sites do not currently respond to Do Not Track signals, as there is no consistent industry standard. We do not track your activity across other sites.

We will not discriminate against you for exercising any privacy rights. To exercise these rights, contact us using the details below; we may need to verify your identity before fulfilling certain requests.

11. International data transfers

ArtArray Company Limited is based in Vietnam and serves users around the world. Your personal data may be transferred across international borders for processing or storage. We handle your information in accordance with this policy wherever it is processed and take appropriate safeguards when transferring data, such as standard contractual clauses or other legally approved mechanisms where required by law.

12. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. If we make material changes, we will post the updated policy on this page with a new effective date and, where appropriate, notify you by email. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact

For questions, concerns, or requests regarding this policy or your personal data, contact us at contact@artarray.ai.