Privacy Policy

1. Introduction

Vizzo AI ("we," "our," or "us") operates the Vizzo AI web application at vizzoai.com. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or use our service. By using Vizzo AI, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the service.

2. Information We Collect

We collect the following categories of information:

• Email address — collected during sign-up for authentication via one-time password (OTP).
• Goals and text prompts — the text you provide to generate vision boards. This text is sent to OpenAI for AI image generation.
• Payment information — processed securely by Stripe. We do not store your card details on our servers. Stripe may collect billing address and payment method information.
• Generated images — the vision board images created for you, stored via Vercel Blob storage with publicly accessible URLs.
• IP address and user agent — automatically collected and stored alongside your session for security and authentication purposes.
• Device and browser information — collected anonymously by Vercel Analytics to help us understand usage patterns and improve the service.

3. Cookies and Similar Technologies

We use the following cookies:

• Session cookies — HttpOnly cookies managed by our authentication system to maintain your logged-in session. These are essential for the service to function.
• Analytics — Vercel Analytics collects anonymous, aggregated usage data (page views, device type, browser). No personally identifiable information is collected by analytics.

We do not use advertising cookies or third-party tracking cookies.

4. How We Use Your Information

• To authenticate your account via email OTP.
• To generate personalized vision boards by sending your goals and prompts to OpenAI's image generation APIs.
• To process payments through Stripe.
• To store and deliver your generated vision board images via Vercel Blob storage.
• To communicate with you about your account, purchases, or service updates via email.
• To maintain security, prevent fraud, and monitor for abuse using session data (IP address and user agent).
• To analyze anonymous usage patterns and improve the service via Vercel Analytics.

5. Third-Party Services

We rely on the following third-party services to operate Vizzo AI. Each service receives only the data necessary to perform its function:

• Stripe — payment processing. Stripe receives your payment and billing information. See Stripe's Privacy Policy.
• OpenAI — AI image generation. Your goals and text prompts are sent to OpenAI to generate vision board images. See OpenAI's Privacy Policy.
• Vercel — hosting, serverless functions, and blob storage. Generated images are stored in Vercel Blob with publicly accessible URLs. Vercel Analytics collects anonymous usage data. See Vercel's Privacy Policy.
• Neon — database hosting. Your account data and vision board metadata are stored in a Neon-hosted PostgreSQL database. See Neon's Privacy Policy.
• SMTP email provider — used to deliver one-time password (OTP) emails for authentication. Your email address is shared with our email delivery provider solely for this purpose.

6. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We share data only with the service providers listed above, and only to the extent necessary to operate Vizzo AI. We may also disclose information if required by law or to protect our rights, safety, or property.

7. Data Retention and Deletion

We retain your information as follows:

• Account data — retained for as long as your account is active. Upon account deletion, your user record, sessions, and linked accounts are permanently deleted from our database.
• Vision board images — generated images stored in Vercel Blob may persist in storage after account deletion. Vision board records are disassociated from your account (your user ID is removed), but the image files themselves may remain accessible at their URLs.
• Payment records — Stripe retains transaction records in accordance with their own data retention policies and legal obligations.

To request deletion of your account and associated data, please contact us at vizzo.ai.board@gmail.com.

8. Data Security

We implement industry-standard security measures to protect your data, including:

• All data is transmitted over HTTPS (TLS encryption).
• Session cookies are HttpOnly and secure, preventing client-side access.
• Payment information is handled entirely by Stripe, which maintains PCI DSS compliance.
• Database connections use SSL encryption.

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Children's Privacy

Vizzo AI is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us at vizzo.ai.board@gmail.com.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data and account.
• Withdraw consent for data processing.
• Request a copy of your data in a portable format.
• Object to or restrict certain processing of your data.

To exercise any of these rights, contact us at vizzo.ai.board@gmail.com.

11. International Users

Vizzo AI is hosted and operated in the United States using infrastructure provided by Vercel and Neon. If you access the service from outside the United States, your information will be transferred to and processed in the United States. By using Vizzo AI, you consent to this transfer and processing.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Your continued use of Vizzo AI after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy, contact us at vizzo.ai.board@gmail.com.