Privacy Policy

1. Overview

Dr. Victor is operated by ArtArray Company Limited (“Company,” “we,” “us,” or “our”). This Privacy Policy describes how we collect, use, and protect your personal information when you use Dr. Victor (“the Service”). By using the Service, you agree to the practices described in this policy.

2. Information We Collect

Information you provide directly

• Account information: Email address and name when you sign up via email/password or Google OAuth.
• Topic and keyword configurations: Topic names and keywords you add to discover trending content.
• Notification settings: Your preferred digest time, timezone, and optional Discord webhook URLs or Telegram chat IDs.

Information collected automatically

• Usage data: Interactions with the dashboard, pages visited, and features used.
• Error and performance data: Collected via an error-monitoring provider to diagnose and fix issues.
• Authentication tokens: Session cookies managed by our authentication provider for keeping you signed in.

Information from third parties

• Paddle (our merchant of record): When you subscribe on the web, Paddle handles all payment details. We receive only a customer ID and subscription status — we never store full payment card information.
• Google: If you sign in with Google, we receive your email address and display name from Google OAuth.

3. How We Use Your Information

• Provide and operate the Service, including discovering trending content and delivering digest notifications.
• Process subscription payments and manage your billing relationship.
• Send you digest emails based on your configured schedule and trending content alerts.
• Respond to support requests and communicate important service updates.
• Diagnose errors, monitor performance, and improve the Service.
• Enforce our Terms of Service and comply with applicable legal obligations.

We do not sell your personal information to third parties. We do not use your data for advertising.

4. Third-Party Service Providers

We use the following sub-processors to operate the Service:

Each provider has its own privacy policy governing how they handle data. We only share the minimum information necessary for each provider to perform their function.

5. Content Data

Dr. Victor aggregates publicly available content information from social media platforms, including video metadata (titles, view counts, engagement metrics, hashtags, and author usernames) based on the topics and keywords you configure. We only access content that is publicly available to any internet user. We do not access private user data or content behind authentication. Dr. Victor is not affiliated with TikTok or ByteDance.

6. Data Retention

• Account data: Retained as long as your account is active.
• Alert history: Retained per your plan (7 days on Free, 30 days on Creator, 90 days on Pro).
• Content and engagement data: Retained for trend analysis; may be aggregated and anonymized.
• Payment records: Retained as required by applicable tax and accounting laws (typically 7 years).

When you delete your account, we delete your personal data within 30 days, except where we are required by law to retain it.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated personal data.
• Portability: Request an export of your data in a machine-readable format.
• Opt-out: Unsubscribe from non-essential communications.

To exercise any of these rights, contact us at mail@drvictor.app. We will respond within 30 days.

8. Cookies and Tracking

We use session cookies for authentication (managed by our authentication provider). These are strictly necessary for the Service to function and cannot be disabled. We do not use advertising cookies, tracking pixels, or cross-site trackers.

9. Security

We implement industry-standard security measures including encrypted connections (TLS), granular access controls, and secure credential storage. However, no system is completely secure, and we cannot guarantee absolute security of your data.

10. International Data Transfers

ArtArray Company Limited is based in Vietnam. By using the Service, you acknowledge that your data may be processed in Vietnam and other countries where our service providers operate (including the United States and the European Union). We ensure appropriate safeguards are in place for any international transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice in the Service. Continued use of the Service after the effective date of changes constitutes acceptance of the revised policy.

12. Contact

For privacy-related questions or requests, contact us at: