Privacy Policy

Our Commitment to Privacy

Vendivo is operated by Spitfire Creative. The Mac app processes camera video, selected screen content, and selected microphone or computer audio locally. The iPhone and iPad companion sends camera video and enabled microphone audio directly to the Mac over USB or the local network. That native production path does not use a cloud video relay. The optional browser camera demo uses the separate connection flow described below. The app and website do not use advertising or cross-site tracking SDKs. Vendivo Account Center processes account metadata separately from the local media path. Linking an iPhone or iPad companion requires a Vendivo account, and its camera streaming requires verified trial or Pro access.

Information Processed on Your Mac

Vendivo processes information needed to discover cameras, route a production, and explain its health. This can include camera and microphone names, stable device identifiers, selected roles, show settings, available display and window names, and stream-health information. A connected phone may also report its model, platform, operating-system version, battery state, thermal state, and frame-delivery metrics.

This operational information remains on the Mac and is not automatically transmitted to Spitfire Creative. Local system logs may contain device names or identifiers. We receive those details only if you choose to include them in a support message or diagnostic attachment.

Native App Information Not Automatically Sent to Us

• Camera streams, selected screen content, microphone or computer audio, or local recordings
• Show queues, private seller cues, scene settings, or stream credentials
• Local camera names, hardware identifiers, or production-health metrics, apart from the account-registration information described below
• Usage analytics or advertising profiles
• Contacts, precise location, or advertising identifiers

Using Account Center or linking a native companion sends the account-registration information described below to Vendivo. Camera video, selected screen content, microphone or computer audio, local recordings, stream keys, and private seller cues are not part of that account service.

How Vendivo Works

Cameras and selected desktop or app-window content are processed locally on the Mac. The native iPhone and iPad camera transport uses USB or the local network without passing through a Spitfire Creative relay. These native production features:

• Process the Mac's local-camera production without requiring a Vendivo account or cloud video service; native companion linking and access verification use the account service
• Do not upload camera or screen content to Spitfire Creative
• Save recordings when you start recording or enable the phone's automatic stream-saving option
• Send a broadcast to a third-party destination only when you start that output

Optional Browser Camera Demo

The demo at /demo/ requests camera access only after you choose to connect a camera. Pairing a phone uses a private, single-use invitation. After you tap Start phone camera and allow access, the phone sends encrypted video to the paired computer browser, directly or through a relay when needed. The phone microphone remains off. The computer microphone is optional and requires a separate action and permission.

The connection service processes temporary session identifiers, network connection details, and authorization tokens to establish the link. Pairing sessions expire after 15 minutes; signaling state is held in temporary server memory rather than a persistent database. Hosting and relay providers receive the network request information needed to deliver the connection. The demo does not store camera video, audio, or recordings on its servers.

Your show queue and private cues remain in the computer browser. A recording starts only when you choose Record preview, lasts up to 60 seconds, and remains in that tab until you download or discard it or leave the page. Stopping the phone connection or hiding either screen stops that connection. This browser transport is separate from the native apps.

Permissions We Request

Vendivo may request the following permissions when a feature needs them:

Camera Permission

The Mac app uses Camera permission to enumerate integrated, external, and compatible Continuity cameras and to preview or route the camera you select. The iPhone and iPad companion requests Camera permission for phone capture.

Microphone Permission

The Mac app uses Microphone permission when you test an input level or choose a microphone for a managed OBS production. The level test is held in memory and is not recorded. A microphone you apply to the production can be included in an OBS broadcast or recording. Vendivo Phone Camera (Direct) and OBS Virtual Camera are video-only, so camera-device destinations require a separate microphone choice.

The iPhone and iPad companion requests Camera and Microphone permissions before starting capture. Its microphone audio can be sent directly to the Mac and included in a local phone recording. You can mute the microphone in the companion's camera controls.

Screen and System Audio Recording Permission

The Mac recording workflow needs screen-capture access to list available displays and app windows and record the source you choose. You can choose to include computer audio. macOS manages this access under Screen & System Audio Recording; the permission's name can vary by macOS version.

Local Network Permission

Vendivo uses Local Network permission for camera discovery and local streaming when those features are active. OBS Studio may separately request its own network permissions under the OBS Project's software and policies.

Photos Permission

The iPhone and iPad companion requests add-only Photos permission when you choose to save a recording or product still to Photos, or enable automatic stream saving. It does not request access to browse your photo library. Recordings saved or shared to Files use the destination you choose; Vendivo does not upload these files to its account service.

Local Storage and Credentials

Vendivo stores production preferences, camera assignments, show queues, and local timelines in macOS preferences and Application Support. Stream keys and OBS WebSocket credentials are stored in the Mac Keychain. OBS configuration remains in OBS's Application Support data. Recordings are saved in Movies/Vendivo or another folder you choose.

Deleting the Vendivo app bundle does not automatically remove these settings, Keychain entries, OBS configuration, timelines, or recordings. You can remove local recordings and supporting data from the Mac separately when you no longer need them.

Account Center and Linked Devices

When you sign in at app.getvendivo.com, Vendivo processes the identity-provider issuer and account identifier, verified email address, display name, optional profile-image URL, workspaces, membership roles, plan and entitlement state, and security and audit events needed to operate the account.

Trusted-device records use a randomly generated installation identifier and public-key information, plus platform, app version, registration time, last-seen time, and revocation state. Vendivo does not request a hardware serial number. Marketplace records can include provider status, seller-safe account references, granted capabilities, and verification times. Provider credentials are encrypted on the server and are not returned to the customer portal, staff console, or desktop app.

The iPhone and iPad companion links to the account signed in on your Mac through an approved QR or USB invitation. It sends its installation identifier, public key, a generic device label, platform, app version, and supported capabilities. Linking and access checks create account-linked security records, including event times, request identifiers, user-agent summaries, and hashed network identifiers used to prevent abuse. The companion does not ask for your account password.

Sign-In, Sessions, and Invitations

Sign-in is handled by a managed OpenID Connect identity provider. Vendivo stores the provider's stable issuer and subject identifiers rather than a password. Secure, HTTP-only, host-only cookies maintain the session; a separate same-site value protects state-changing requests. Login transactions, invitation records, session records, source-network pseudonyms, and related audit events are processed to prevent abuse, join invited members, and investigate security incidents.

Website and Download Requests

The documentation search remembers up to five recent searches in your browser's local storage. A service worker may cache the site shell and brand assets for faster or offline loading. The download page requests signed release manifests from our file-delivery provider; that provider may receive ordinary request data such as IP address, browser user agent, timestamp, and requested file. The support link opens your email application rather than submitting a hidden website form. Authenticated Account Center and operations responses are marked not to be stored by shared caches, and its service worker does not cache account or API responses.

Broadcast Destinations and Other Third Parties

Vendivo does not integrate third-party advertising or cross-site analytics services. We use service providers for website and application hosting, managed PostgreSQL, identity, transactional email, and release delivery. These providers process only the information necessary to deliver their service. When you start a broadcast, OBS Studio or the destination's browser tools send the program video and selected audio directly to the service you chose, such as Whatnot, YouTube, Twitch, or a custom RTMP/RTMPS endpoint. That destination receives the stream under its own privacy policy. OBS Studio is separate software maintained by the OBS Project.

When you make a purchase or restore access, the payment provider or app store processes that request under its own policies.

Payments and Purchases

Creating a Vendivo account does not itself start billing. If you choose a paid subscription, the provider that presents the checkout will process the transaction. Vendivo does not directly store your full payment-card number. Refer to that provider's privacy policy for its handling of purchase data.

Vendivo retains account-linked trial dates, purchase and subscription records, payment-provider customer and transaction references, and plan and access status. These records support shared Pro access, billing reconciliation, refunds, and fraud prevention.

Data Security

We do not maintain a centralized database of camera streams. Sensitive production credentials are kept in the Mac Keychain. Use a trusted local network for Wi-Fi streaming. Vendivo does not claim end-to-end encryption for the local Wi-Fi video transport; use USB when you do not want video sent over Wi-Fi.

Account data is transmitted over HTTPS and stored in a managed database with access controls, encrypted secret fields, separate migration and runtime identities, and audited staff operations. No security control eliminates all risk; contact us promptly if you believe an account has been compromised.

Retention and Account Deletion

We retain account information while the account is active and as needed to provide the service, protect users, resolve disputes, maintain required audit and transaction records, and comply with law. Login and invitation authorizations expire, but expiry does not mean that their database records are immediately deleted. Security and operational records may be retained longer when needed for fraud prevention, legal compliance, or a documented support matter.

An account owner can request deletion from Account Center's Security page. The iPhone and iPad companion provides a Delete account option in Settings that opens that page in your browser for owner sign-in and confirmation. Choosing Delete account now includes confirmation to cancel any active web subscription immediately and close open checkouts. This does not automatically issue a refund. Once those billing changes are confirmed and the deletion request is accepted, workspace access stops immediately and a 30-day recovery period begins.

During that period, an owner can sign in and choose Restore account. Restoring an account does not restart a canceled subscription. If the deletion request cannot be completed, subscriptions already canceled remain canceled. Canceling renewal through Plan & billing is a separate action and follows the subscription's normal period-end schedule.

After the recovery period closes, the automated erasure process removes device registrations, sessions, invitations, account-linked integrations, and account email records. It scrubs audit metadata and checkout contact details, and anonymizes profile identity data when it is no longer needed for another active workspace or authorized staff access. Limited billing, transaction, trial, and security records remain with opaque references or scrubbed metadata for accounting, refunds, fraud prevention, and legal obligations. Payment and identity providers retain their own records under their policies. Deleting an account does not delete recordings or other files saved on your devices.

Children's Privacy

Vendivo is not directed to children under 13, and the app does not send us camera content.

Changes to This Policy

If we make changes to this privacy policy, we will update the "Last updated" date at the top of this page. We may provide additional notice when required by law or appropriate for a material change.

Support Messages and Your Rights

If you contact support, we receive the message and attachments you choose to send through your email provider and ours. We retain that material only as needed to resolve the request, operate our business, and meet legal record requirements. You may request access, correction, or deletion of personal information associated with you, subject to applicable law and record-retention requirements.

Contact Us

If you have questions about this privacy policy or Vendivo's privacy practices, please contact Spitfire Creative at:

Email: [email protected]

Legal Basis for Processing

Core camera processing does not automatically send its content or local production data to Spitfire Creative. We process account and support information to perform the service you request, protect the service and its users, comply with legal obligations, and pursue legitimate operational interests that do not override applicable privacy rights. File-delivery providers process ordinary request information to deliver the website and downloads, and a broadcast destination processes content you direct to it.