Privacy Policy
Last updated: 10 July 2026
This policy explains how Vizivo, operated by Vizivo Technologies Ltd, a company registered in England and Wales (company number 17345034) (“we”, “us”), collects and uses personal data when you use vizivo.ai. We comply with UK GDPR and the Data Protection Act 2018.
1. What we collect
- Account data — name, email address and sign-in identifiers, handled by our authentication provider (Clerk).
- Business content — the information you enter into forms, your Business Profile, uploaded files, and the documents you generate. This may include personal data you choose to include (for example client names on invoices).
- Business Memory — facts about your business extracted from your own documents and inputs to improve future generations. You can view, correct and delete every stored fact from the Memory page at any time.
- Billing data — subscription and payment records. Card details are handled entirely by Stripe; we never see or store card numbers.
- Usage data — feature usage, generation counts and technical logs used to operate and improve the service.
2. Why we use it (lawful bases)
- To provide the service (contract) — generating documents, storing your work, maintaining your Business Memory, billing.
- To secure and improve the service (legitimate interests) — abuse prevention, debugging, aggregate usage analysis.
- To contact you about the service (contract / legitimate interests) — transactional emails such as receipts and important account notices.
We do not sell personal data, and we do not use your business content to train AI models available to other customers.
3. Who processes it for us
We use a small set of processors, each under data-processing agreements:
- Vercel (hosting, USA/EU) · Supabase (database, hosted in London, UK)
- Clerk (authentication) · Stripe (payments)
- Anthropic and, where configured, OpenAI / Google (AI generation — your inputs are sent to the model provider to produce your document; providers do not train on this data under our API terms)
4. How long we keep it
Your content and Business Memory are kept while your account is active. Deleting a memory fact removes it from all future generations immediately. When you close your account we delete personal data within 30 days, except records we must keep for legal reasons (for example invoices, kept 6 years for HMRC).
5. Your rights
You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to complain to the ICO (ico.org.uk). Most of this you can do directly: the Memory page shows and edits everything Vizivo knows about your business. For anything else, email us.
6. Cookies
We use strictly necessary cookies (authentication session cookies from Clerk, security tokens, and the cookie that remembers your consent choice) without asking — the site cannot work without them. With your consent, we additionally use first-party analytics (PostHog, hosted in the EU) to understand how Vizivo is used; analytics never runs unless you accept, and you can change your mind any time via “Cookie preferences” in the footer. We do not use advertising or cross-site tracking cookies.
7. Security
Data is encrypted in transit and at rest, access is limited by row-level tenancy controls, and payments never touch our servers. No system is perfectly secure; we will notify you and the ICO of any breach as UK GDPR requires.
8. Changes
We'll notify you of material changes via the service or email. Continued use after notice constitutes acceptance.
Contact
Data controller: Vizivo Technologies Ltd (company number 17345034). Questions or rights requests: privacy@vizivo.ai