Privacy Policy

Updated at 2025-11-23

Video Rebirth Private Limited (“VR”, “we”, “us”, “our”) is dedicated to safeguarding your privacy and personal data. This Privacy Policy (“Privacy Policy”) outlines how we collect and process your personal data. This Privacy Policy applies to our website (https://www.bach.art), and its associated subdomains (collectively, our “Services”).

If you are under 14 years old, do not meet the age requirements for using or accessing the Services in your jurisdiction, or if there are other legal restrictions applicable to your user status, please comply with local laws by either refraining from using the Services or reviewing this Privacy Policy under the supervision of your legal guardian (“Guardian”). You should only access or use the Services after obtaining your Guardian’s consent as required by applicable law. If you are a parent or Guardian and become aware that your child has provided us with personal data, please contact us immediately. Should we learn that personal data has been collected from anyone under 14 years old (or the applicable legal age) without verified Guardian consent, we will promptly take measures to delete such data from our servers.

Please read this Privacy Policy carefully and in its entirety before using or continuing to use our Services. If necessary, make appropriate decisions based on the guidelines outlined herein. Failure to provide certain personal data may result in our inability to offer you the Services, restrictions on your use of the Services, or the Services not functioning as intended.

If you are located in the European Economic Area (EEA), the United Kingdom or Switzerland (collectively, the “EEA+” areas), the United States or the People’s Republic of China, please also read carefully and fully and consent to the EEA+ Addendum, the US Addendum, or the China Addendum to this Privacy Policy respectively.

1. How We Collect and Use Your Personal Data

We collect data that you actively provide when using the Services, as well as data automatically generated during your use or interaction with the Services, through the following methods:

1.1Account Registration. When you register an account with us, we will collect information associated with your account, including your username, email address, phone number, and account credentials. We may also collect verification codes to confirm your identity. Additionally, in certain jurisdictions such as China (as specified in the “China Addendum”), we may collect your real name, date of birth, and government-issued identification number to verify your age and identity in accordance with applicable laws.

1.2VR Services. We offer interactive services powered by generative AI model technology. You may provide input (“Content”) to the Services, including prompts, uploaded materials such as files and images, or direct operational instructions by interacting with the buttons available in the operation interface.

1.2.1When you upload Content such as files or images to the Services, we may request access to your device’s camera and photo library (or storage) permissions, depending on the type of data you choose to provide. These permissions are required to enable the relevant service functions. If you do not grant such access, you may be unable to upload certain types of Content. Please note that the uploaded Content may include personal data, which we will collect and process accordingly.

1.2.2If the Content you input or submit includes personal data relating to any other individual, you are responsible for ensuring that you have obtained all necessary legal authorizations or consents before providing such data. This is to prevent the unauthorized or inappropriate disclosure of others’ personal information.

1.2.3In order to maintain and enhance the performance and quality of the Services, we may utilize the Content you submit and the corresponding output to optimize our Services. Such use will be conducted only after the information has been securely encrypted, thoroughly de-identified, and rendered incapable of being re-associated with any specific individual. If you do not wish for your personal data to be processed in this manner, you may opt out by contacting us through the channels specified in Section 5 of this Privacy Policy.

1.3Feedback. When you submit feedback to us, we will collect information such as your description of the issue, any attached supporting materials, your email address, and the name of the contact person, to understand the nature of your feedback and your specific needs. This information is necessary to provide the feedback-related services. We may use your email address or other contact details to verify your identity, clarify your concerns, provide relevant support, and help resolve any issues you encounter. To assist with feedback related to your use of the Services, we may access your usage data, including conversation history, content you have liked, and past feedback submissions. If you contact us directly using the methods outlined in Section 5 of this Privacy Policy to submit feedback, complaints, appeals, or inquiries, you will be required to provide your account information for user identity verification. This verification is necessary to process your request. During the course of feedback, complaint, or consultation, you may be asked to provide additional supporting materials, and the system may log communications between you and our team. These records help us address your concerns effectively and enhance the quality of our services.

1.4Notification. You acknowledge and agree that we may use the contact information you provide (such as your email address) to send you various notifications related to the operation of the Services. These may include messages for identity or security verification, user updates, experience research, and dispute resolution. We may also send you promotional information about our services, features, or events via the contact details you’ve provided. If you prefer not to receive such promotional messages, you may unsubscribe using the method included in the message or contact us directly to opt out.

1.5Safeguarding. To protect your account security and improve our service quality, we will automatically collect certain information generated during your use of the Services:

1.5.1To ensure the secure operation of the software and related services, as well as to maintain operational quality and efficiency, we may collect information including your device model, operating system version, device identifiers (such as AndroidID or OAID on Android devices, IDFV on iOS devices—note that these identifiers may differ in duration, reset capability, and access methods), IP address, software version, network access methods, types and statuses, network quality metrics, user operations and behavior data, service logs, and sensor data from your device (such as accelerometer and gyroscope readings).

1.5.2To prevent malicious software and ensure stable, efficient operations, we may collect data related to running processes, overall system operations, page usage and frequency, crash reports, and performance metrics. For the purposes of verifying account and transaction security, performing identity authentication, detecting unlawful or non-compliant behavior, preventing and responding to security incidents, and taking necessary measures such as logging, analysis, and handling in accordance with applicable laws, we may process your account information, device data, and service log information.

1.5.3To analyze key metrics such as user acquisition, activation, retention, and service performance, we collect data related to your use of the Services. This includes the types of content you view or interact with, the features you use, the actions you perform, as well as information such as your time zone, country or region, access dates and times, user agent and version, device type (e.g., computer or mobile), and connection details.

1.5.4We may utilize log information to analyze Service usage, troubleshoot issues, and perform operational analytics to enhance and optimize user interaction with our products. Such log data includes your IP address, browser type and settings, request date and time, and details of your interactions with the Services.

1.6Besides collecting personal data directly from you, we may also acquire your personal information from other sources, including business partners or publicly accessible information on the Internet.

1.7We may aggregate or anonymize your personal data so that it cannot be linked back to you. This anonymized data is used for purposes such as analyzing service usage, enhancing features, and conducting research. We will keep and utilize this data only in its anonymized form and will not attempt to re-identify it, except where required by law.

2. How We Use Cookies and Other Similar Technologies

2.1We use cookies to monitor which parts of our website you visit. Cookies are small data files stored by your browser on your device. While not essential for basic website use, cookies help improve performance and functionality. Without them, some features like videos might not work properly, and you may need to log in each time because your previous login won’t be remembered. Most browsers let you disable cookies, but this may restrict or block certain website functions. Importantly, we never store personal data within cookies.

2.2You may choose to configure your browser to block cookies and similar tracking technologies regardless of your location. However, doing so may disrupt the normal operation of our website by preventing essential cookies from being stored, which could limit or disable certain features and services. Furthermore, blocking cookies might lead to the loss of saved data such as login credentials and site preferences. Browser settings for managing cookies vary, and disabling cookies or specific categories of cookies does not automatically remove them from your device—you will need to delete them manually. For detailed instructions on managing cookies, please consult your browser’s help resources. To learn more about cookies, the following online resources may be helpful: http://www.allaboutcookies.org.

3. How We Share, Transfer, or Disclose Your Personal Data

3.1Business Partners: In order to facilitate our business operations and deliver specific services, we may share personal data with our business partners. These partners include providers of hosting, customer support, cloud infrastructure, content delivery networks, security monitoring, email communication platforms, web analytics, payment processing, transaction services, and other IT-related functions. Such partners are authorized to access, process, or store personal data solely to the extent necessary for performing their responsibilities on our behalf and strictly under our instructions.

3.2Business Transactions: In the event of a strategic transaction, restructuring, bankruptcy, acquisition, or transfer of services to another provider (collectively referred to as a “Transaction”), your personal data may be disclosed to the counterparty and other parties involved in the Transaction for due diligence purposes. Furthermore, your personal data may be transferred to a successor or affiliate along with other assets as part of the Transaction.

3.3Government Agencies or Other Third Parties: We may disclose your personal data, including details of your interactions with our Services, to government authorities, industry partners, or other third parties under certain circumstances: (i) to comply with applicable laws or when we have a good faith belief that such disclosure is necessary to fulfill legal obligations; (ii) to protect and enforce our rights or property; (iii) if we reasonably determine that you have breached our terms, policies, or legal requirements; (iv) to identify, prevent, or address fraud or unlawful activities; (v) to safeguard the safety, security, and integrity of our products, employees, users, or the public; or (vi) to mitigate legal risks or liabilities.

3.4Affiliates: We may share personal data with our affiliates, who are permitted to use such data in accordance with the terms of this Privacy Policy.

3.5Other Users and Third Parties with Whom You Interact or Share Information: Certain features allow you to engage with other users or third parties and share information. For example, you may share outputs from the Services with others via shared links, send data to third-party applications through VR’s custom actions, or perform web searches to obtain supplementary information. Please note that any information you provide to third parties is subject to their respective terms of service and privacy policies. We advise you to carefully review those terms and policies prior to sharing your data.

4. How We Store and Protect Your Personal Data

4.1We will retain your personal data solely for the duration necessary to deliver our Services to you or to fulfill other legitimate business purposes, including dispute resolution, ensuring safety and security, or meeting legal requirements. The retention period for personal data will be determined based on various factors, including:

4.1.1The purpose for which we process the data, such as whether retention is necessary to continue providing our Services;

4.1.2The amount, nature, and sensitivity of the data;

4.1.3The potential risk of harm from unauthorized use or disclosure; and

4.1.4Any legal requirements that we are subject to.

4.2We prioritize the protection of your personal data and employ commercially reasonable technical, administrative, and organizational safeguards to prevent loss, misuse, unauthorized access, disclosure, alteration, or destruction. Nevertheless, it is important to recognize that no internet or email transmission can be guaranteed to be completely secure or error-free. Therefore, we advise you to be cautious about the information you share through our Services. Additionally, we disclaim any responsibility for breaches of privacy settings or security measures on the Service or on third-party websites.

5. How You Can Exercise Your Personal Data Rights

5.1You have the following legal rights concerning your personal data:

5.1.1Access your personal data and information relating to how it is processed;

5.1.2Delete your personal data from our records;

5.1.3Rectify or update your personal data;

5.1.4Transfer your personal data to a third party (right to data portability);

5.1.5Restrict how we process your personal data;

5.1.6Withdraw your consent—where we rely on consent as the legal basis for processing at any time; and

5.1.7Lodge a complaint with your local data protection authority (see below).

5.2You have the following rights to object:

5.2.1Object to our processing of your personal data for direct marketing at any time;

5.2.2Object to how we process your personal data when our processing is based on legitimate interests; and

5.2.3Object to use your personal data to train our models.

5.3You can exercise these rights by submitting your request to privacy@videorebirth.com.

5.4Services such as VR generate responses using generative artificial intelligence models; however, the output may not always be factually accurate. Therefore, you should not rely solely on the factual correctness of the output provided by our models. If you believe that VR has generated factually incorrect information about you and wish to request a correction or removal, you may submit your request to privacy@videorebirth.com. We will evaluate your request in accordance with applicable laws and the technical limitations of our models.

6. How We Update the Privacy Policy

6.1To continually improve our Services, updates and changes may be made from time to time. We will update this Privacy Policy accordingly, and any such updates will become an integral part of this Privacy Policy.

6.2Once this Privacy Policy is updated, we will publish the revised version on our website and notify you through announcements about the new edition, ensuring you stay informed of the latest changes in a timely manner. If you do not agree with the updated policy or have objections to any modifications, please discontinue your use of the Services. Please note that any activities or actions you performed before deactivating your account or stopping use of the Services will still be governed by this Privacy Policy.

6.3For any significant changes that materially reduce your rights under this Privacy Policy, we will provide you with more prominent notifications. These may include, but are not limited to, emails or special alerts displayed on browsing pages, clearly indicating the specific sections of the Privacy Policy that have been updated.

7. How to Contact Us

If you have any complaints, suggestions, or inquiries regarding personal data protection, or if you have questions about this Privacy Policy, please contact us at: privacy@videorebirth.com.. We will promptly review the matters raised and respond within fifteen business days after verifying your user identity.

8. EEA+ Addendum

If you are located in the European Economic Area (EEA), the United Kingdom or Switzerland (collectively, the “EEA+” areas), please refer to our EEA+ Addendum in this Section. This addendum is specifically designed for individuals in the EEA+ regions. It complements our Privacy Policy and provides detailed information on how we handle your personal data when you use or interact with our services. In the event of any discrepancies between the Privacy Policy and this EEA+ Addendum, the provisions of this Addendum shall prevail.

If you are located in the EEA, the EU General Data Protection Regulation applies to our processing of your personal data, as well as local data protection laws, as the case may be. If you are located in the UK, the UK General Data Protection Regulation applies to our processing of your personal data. References to the “GDPR” are references to the General Data Protection Regulation as it applies in the country where you are located. If you are located in Switzerland, the Swiss Federal Data Protection Act (the “FDPA”) applies to our processing of your personal data, and references to the GDPR below shall be interpreted analogously for the purposes of applying the FDPA.

A. Who is the data controller?

The data controller is Video Rebirth Private Limited, registered address at 112 ROBINSON ROAD #03-01 ROBINSON 112 SINGAPORE (068902), and its affiliates. To contact our GDPR representatives, please contact privacy@videorebirth.com.

B. What types of personal data do we collect and how do we collect it?

Please see Section 1 above.

C. For what purposes do we process personal data?

Please see Section 1 above.

D. What lawful bases of processing and legitimate interests do we rely on?

If we have a contract with you and processing your data is necessary to fulfill our contractual obligations or to take steps at your request before entering into the contract, the lawful basis for processing is Article 6(1)(b) of the GDPR.

If processing your data is required for us to comply with a legal obligation under EEA or UK law, the lawful basis for this processing is Article 6(1)(c) of the GDPR.

In certain situations, processing is necessary for us to pursue a legitimate interest after balancing that interest against your privacy and other fundamental rights. This includes efforts to provide you with a positive user experience, comply with laws and regulations outside the EEA or UK, maintain the security and integrity of our Services and related platforms and systems, operate and optimize our business, enhance our Services, develop new offerings, manage user relationships, and administer user communities. In these cases, the lawful basis for processing is Article 6(1)(f) of the GDPR. Further details regarding our legitimate interest assessments, including how they balance your privacy and fundamental rights, are available upon request.

In certain instances, we process your personal data based on your consent, as outlined in Article 6(1)(a) of the GDPR. This typically applies when using non-essential cookies or similar technologies. You have the right to withdraw your consent at any time, with effect for the future, either by adjusting your consent preferences within our Services or by contacting us via email at privacy@videorebirth.com, specifying which data processing activities you wish to withdraw your consent from.

E. What categories of recipients receive personal data from us?

Please see Section 3 above.

F. Where is your personal data processed and on what basis do we transfer personal data across borders?

We may transfer and disclose personal data to third parties in jurisdictions including Singapore. To ensure an adequate level of data protection, we implement appropriate safeguards and data transfer mechanisms with our processors as required. If you have any questions or need further information, please contact us at privacy@videorebirth.com.

G. How long do we process personal data?

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. The retention period varies depending on the specific purposes of data collection and applicable laws, including legal, regulatory, tax, accounting, or reporting requirements. When personal data is retained solely to meet legal obligations, we implement safeguards to restrict further processing. Once the personal data is no longer needed for its original purpose, we will securely delete it.

H. What data protection rights do you have?

In the EEA, Switzerland and the UK you have the following rights, subject to the conditions under the GDPR and/or local data protection law:

You have the right to object, based on your specific situation, to our processing of your personal data. This includes the right to object to the use of your personal data for direct marketing purposes (also referred to as mass marketing under Swiss law), as well as the right to object when we process your data in the public interest or pursue our legitimate interests or those of a third party. If our processing is based on legitimate interests or the public interest, you may object, and we will stop processing your personal data unless we can demonstrate compelling legitimate reasons or legal obligations that require continued processing. For direct marketing related to our own services, you may always opt out of future marketing communications by using the unsubscribe link provided or through other available methods.

To request from us confirmation on whether your personal data is being processed, and if so, to access information regarding how we handle your data along with copies of the personal data itself.

To request correction of any inaccurate personal data we hold about you.

To ask for the deletion of your personal data when it is no longer necessary for legal compliance or for security and integrity purposes.

To request that we restrict the processing of your personal data, in which case the data will be marked and processed only for specified purposes.

To receive your personal data in a structured, commonly used, and machine-readable format, and to transfer that data to another party without obstruction from us..

To withdraw your consent to data processing at any time; this withdrawal will not affect the legality of any processing conducted prior to the withdrawal.

To file a complaint with a relevant supervisory authority.

In certain jurisdictions, such as France and Portugal, you may also have the right to provide instructions regarding the processing of your personal data after your death.

You may view a list of supervisory authorities in the EEA, UK and Switzerland and their respective contact information here:

EEA: https://edpb.europa.eu/about-edpb/about-edpb/members_en

United Kingdom: https://ico.org.uk/global/contact-us/

Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html

To submit a request to exercise your privacy rights, you can contact us by emailing privacy@videorebirth.com. When submitting your request, please specify which rights you wish to exercise and how we can assist you. To verify your identity and confirm your authorization to make the request, we may ask you to provide certain information. These security measures help prevent unauthorized disclosure or improper processing of personal data. Additionally, we may reach out to you for further details to clarify your request and expedite our response. We will handle all requests to exercise your privacy rights in accordance with applicable laws.

I. Are you required to provide us with your personal data?

Providing personal data to us is voluntary; however, without certain personal data, we may be unable to deliver our Services to you.

9. US Addendum

If you reside in Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey or California, please refer to the US Addendum in this Section.

We address this US Addendum to U.S. residents only. This Addendum does not reflect our collection and process of U.S. residents’ personal information where an exception under U.S. privacy laws applies.

VIRGINIA, COLORADO, CONNECTICUT, UTAH, OREGON, TEXAS, MONTANA, DELAWARE, IOWA, NEBRASKA, NEW HAMPSHIRE AND NEW JERSEY

The following is only addressed to residents of Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, Delaware, Iowa, Nebraska, New Hampshire and New Jersey.

Subject to the conditions under applicable laws, you have the right to request that a controller of your personal data:

Confirm whether your personal data is being processed and provide you with copies of that data;

Correct inaccuracies in your personal data, considering the nature of the data and the purposes for which it is processed; please note this right is not available in Iowa and Utah;

Delete personal data provided by you or collected about you;

Opt out of the processing of your personal data for: (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling used to make decisions that have legal or similarly significant effects on you.

When you use our Services, we may collect, use, and disclose your personal data for targeted advertising purposes as outlined above. Certain laws classify this collection, use, and disclosure of personal data for targeted advertising as the “sale” of personal data. You have the right to opt out of targeted advertising and such sales by contacting us at privacy@videorebirth.com.

CALIFORNIA

The following is only addressed to residents of California.

Notice of Collection: Please see Section 1 above for information about the types of personal information we collect. The categories of personal information correspond with the following categories of personal information enumerated under the California Consumer Protection Act (CCPA) definition of “personal information” and their respective letter grouping:

(A) - Identifiers including name, phone number, unique personal identifier, IP address, email address and account name.

(B) - Information that identifies or is capable of being associated with you.

(F) - Internet or other electronic network activity information.

(H) - Audio, electronic, visual or similar information.

(K) - Inferences drawn from any of the information identified above reflecting your preferences and characteristics.

If California residents upload images or videos to our Services, they may also disclose any type of personal information to us and others in the images or videos.

Please refer to Section 1 above for details on the purposes for which we collect and use personal information. In accordance with the CCPA, we may collect, use, and disclose personal data of California residents for cross-context behavioral advertising, which the CCPA defines as “selling” and “sharing” personal information. Below, you will find a copy of our CCPA Privacy Policy, including our Notice of Right to Opt-Out of the Selling or Sharing of Personal Information.

We retain personal information solely for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. The retention period depends on the specific purposes of collection and use, as well as the duration required to meet applicable laws, including legal, regulatory, tax, accounting, or reporting obligations. Once the personal information is no longer needed for these purposes, it will be securely deleted.

CCPA Privacy Policy:

A. Right to Know About Personal Information Collected, Disclosed, or Sold

We collect, use, and disclose personal information about California residents, who have the right to request details regarding the personal information we have collected, used, disclosed, or sold about them (“right to know”). To exercise this right, please email privacy@videorebirth.com with the subject line “California Request to Know,” specifying the information you wish to access.

To verify your identity, we may require certain information from you; if you have a password-protected account, verification may be conducted through our existing authentication processes. The information requested for verification depends on your previous interactions with us and the sensitivity of the data involved. We will respond to your request in compliance with the California Consumer Privacy Act (CCPA), and if we deny your request, we will provide an explanation.

B. Our Personal Information Handling Practices over the Preceding 12 Months

We have set out below the categories of personal information we have collected about California residents in the preceding 12 months, as enumerated in the CCPA’s definition of “personal information”.

Identifiers including name, postal address, phone number, unique personal identifier, IP address, email address and Account name.

Information that identifies or is capable of being associated with you.

Internet or other electronic network activity information.

Audio, electronic, visual or similar information.

Inferences drawn from any of the information identified above reflecting your preferences and characteristics.

We collected all these categories of personal information directly from California residents and used them according to the purposes described in this Privacy Policy. We disclosed this information as necessary. We have also “sold” and “shared” device information, browsing and usage data, and purchase history to advertising networks and advertising partners, who may use such personal information for their own purposes, including tailoring advertising to you.

C. Right to Request Correction or Deletion of Personal Information

You have a right to request the correction of personal information that we collect or maintain about you. To submit a request to correct personal information, please submit an email request to privacy@videorebirth.com and include “California Request to Correct” in the subject line. Please specify in your request the personal information about you that you believe is incorrect, and please provide supporting material reflecting the correct information.

You have a right to request the deletion of personal information that we collect or maintain about you. To submit a request to delete personal information, please submit an email request to privacy@videorebirth.com and include “California Request to Delete” in the subject line. Please specify in your request the personal information about you that you would like to have deleted, which can be all of your personal information as required by the CCPA.

We will require certain information from you to verify your identity. If you have a password-protected account with us, we may use our existing authentication methods to confirm your identity. The information requested for verification will depend on your previous interactions with us and the sensitivity of the data involved. After verification, we may ask you to confirm your deletion request. Once confirmed, we will process your request in accordance with the CCPA. If we deny your request, we will provide an explanation.

D. Notice of Right to Opt-Out of Selling/Sharing of Personal Information / Do Not Sell or Share My Personal Information

You have the right to opt out of the sale or sharing of your personal information by businesses. We disclose personal data to third-party advertising networks and partners who may use this information for their own purposes, including customizing advertisements directed at you. Therefore, we “sell” and “share” your personal information. To submit an opt-out request, please send an email to privacy@videorebirth.com. Please be aware that we may require identity verification before processing your request.

E. Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

You may not be discriminated against because you exercise any of your rights under the CCPA.

F. Verification Process and Authorized Agents

Only you, or an individual legally authorized to act on your behalf, may submit a request regarding your personal information. In your request, or in response to our request for further details, you or your authorized representative must provide sufficient information to allow us to reasonably verify that you are the person whose personal information was collected. The specific information required will depend on your previous interactions with us and the sensitivity of the personal data involved. We may ask for additional information to confirm your identity, and if you do not provide enough details for reasonable verification, we will be unable to process your request. Any information collected will be used solely for the purposes of identity verification and fulfilling your request.

You can designate an authorized agent to make a request under the CCPA on your behalf if:

The authorized agent is a natural person or a business entity registered with the Secretary of State of California; and

You sign a written declaration that you authorize the authorized agent to act on your behalf.

If you appoint an authorized agent to submit a request to exercise your right to know or your right to request deletion, the authorized agent must, in addition to following the steps described in sections A and C above:

Mail a notarized copy of your written authorization allowing the agent to act on your behalf to112 ROBINSON ROAD #03-01 ROBINSON 112 SINGAPORE (068902) (we will reimburse you for reasonable notarization and mailing costs upon receipt of proof); and

Provide any information we request to verify your identity and confirm that you have granted the authorized agent permission to act under the CCPA on your behalf. The information requested for verification will depend on your prior interactions with us and the sensitivity of the personal data involved. We may deny requests if the agent does not provide sufficient proof of authorization from you.

If you grant an authorized agent power of attorney under Probate Code sections 4121 to 4130, these additional steps may not be required, and we will handle any requests from such an authorized agent in accordance with the CCPA.

G. Contact Information

If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please reach out to us at privacy@videorebirth.com.

10. China Addendum

If you reside or are located in the People’s Republic of China (“China”, which for the purposes of this China Addendum excludes Hong Kong, Macau, and Taiwan), this China Addendum applies to you as required by the Personal Information Protection Law (“PIPL”) and other applicable Chinese laws and regulations. This China Addendum serves as a supplement to the Privacy Policy. In the event of any conflict between a provision of this China Addendum and a provision of the Privacy Policy, the terms of this China Addendum shall prevail with respect to the processing of your Personal Information (as defined herein). Unless otherwise stated, terms used in this Addendum carry the same meanings as those defined in the Privacy Policy.

The purpose of this China Addendum is to inform you how and why we process your Personal Information at or before the time you provide it. For this Addendum, “Personal Information” means any information relating to identified or identifiable natural persons that is recorded electronically or by other means, excluding anonymized data.

Please carefully read and fully understand the contents of this China Addendum and the Privacy Policy before using our Services. By clicking “Agree to the Privacy Policy” or similar wording on an online interface, or by commencing use of our Services, you signify your acceptance of the Privacy Policy and this China Addendum. You also consent to our collection, use, sharing, transfer, disclosure, storage, and protection of your Personal Information for the purposes outlined in both the Privacy Policy and this China Addendum.

A. Types of Personal Information we collect and use

For detailed information on the categories of Personal Information we process, please refer to section 1 of the Privacy Policy.

According to the PIPL, “Sensitive Personal Information” refers to Personal Information which, if leaked or unlawfully used, could easily result in infringement of human dignity or cause harm to the personal or property safety of an individual. This includes information such as ID card numbers, biometric data, religious beliefs, specific identities, medical and health information, financial account details, personal location tracking, and whereabouts of an individual, as well as any Personal Information of children under the age of 14.

To provide you with the appropriate services, we may need to collect certain information classified as sensitive under the PIPL.

B. Purposes for which we use your Personal Information

For further details on the purposes for which we process your Personal Information, please refer to section 1 of the Privacy Policy.

We collect and use your Personal Information only when there is a lawful basis for doing so. In many instances, this basis is that processing is necessary for the conclusion and performance of a contract with you. If you have provided consent for the collection and use of your Personal Information (which you may withdraw at any time, as described in section E, “How to exercise your rights” below), we will process your data based on that consent.

Additionally, we may collect and use your Personal Information when required for the fulfillment of our statutory duties or legal obligations, or to address public health emergencies and to protect the life, health, and property safety of individuals.

C. Granting access to or sharing Personal Information with third parties

VR offers its Services globally. In accordance with applicable laws and regulations in China, we will share your Personal Information with relevant parties, including obtaining your separate consent when required. For further details about how we grant access to or share your Personal Information with third parties, please see section 3 of the Privacy Policy.

D. Personal Information transferred outside China

We may transfer and disclose personal data to third parties in jurisdictions including Singapore. We will take all reasonable measures to ensure compliance with applicable legal and regulatory requirements, including completing Personal Information protection impact assessments, passing security assessments, and entering into standard contractual agreements as needed. When such cross-border transfers are based on your consent, we will inform you of the relevant details in accordance with the law and obtain your separate consent for the processing.

E. How to exercise your rights

You may contact us to exercise any rights granted under the PIPL, including but not limited to the rights of access and copying, correction, erasure, and data portability, to the extent permitted by law. If you have any questions about this China Addendum or our use of your Personal Information, or if you wish to file a complaint regarding our processing of your Personal Information, please reach out to us at privacy@videorebirth.com.

If you are unsatisfied with our response, you may bring a lawsuit before the court with jurisdiction over the defendant’s domicile.