Privacy &
Data Protection

Overview

Vivid Opal Lab LLC ("the Company") is committed to protecting the privacy and personal data of all creators and individuals associated with its digital brand management services. This policy outlines how we collect, use, store, and protect personal information in compliance with applicable law, including Thailand's Personal Data Protection Act (PDPA) and US federal regulations.

Data We Collect

In the course of providing brand management services, VividOpal collects and processes the following categories of personal data:

• Profile photographs and video recordings provided by the creator
• Stage name and associated brand materials
• Platform performance analytics (audience counts, revenue data)
• Government-issued identification for age verification purposes only
• Contact information (email, messaging handles)
• Bank account details for monthly settlement payments

How We Use Your Data

All personal data is processed solely for the purpose of providing contracted brand management services:

• Publishing digital content on agreed managed platforms
• Promotional use on VividOpal-managed channels — with prior creator approval for each use
• Monthly performance reporting and income statements to the creator
• Age verification compliance records as required by applicable law
• Financial settlement via secure payment processing and bank transfer

Data We Will Never Use

VividOpal explicitly confirms it will not:

• Sell, transfer, or share creator personal data with third parties
• Use creator data for any purpose beyond the scope of the contracted services
• Retain identity documents beyond the legally required period after contract termination

Data Security

All personal data and digital assets are processed within hardware-isolated, encrypted environments. We implement the following security measures:

• End-to-end encryption for all stored identity documents
• Metadata stripping from all raw media files before post-production
• Access-controlled cloud storage with audit logging
• No personal data stored on uncontrolled third-party devices

Creator Rights (PDPA)

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA), creators have the right to:

• Access and review all personal data held by VividOpal
• Request correction of inaccurate data
• Withdraw consent at any time (without affecting prior lawful processing)
• Request deletion of personal data upon contract termination

Data Retention

Creator data is retained for the duration of the contractor agreement and deleted within 30 days of termination, except where retention is required by law. Age verification records are retained as required under applicable US federal regulations.

Governing Law

This policy is governed by the laws of the State of Wyoming, United States of America, and operates in compliance with Thailand's PDPA where applicable.