Privacy Policy
Effective Date: January 1, 2025
Last Updated: September 24, 2026
Este documento solo está disponible en inglés.
1. Introduction and Scope
Vizcraft Inc., a Delaware corporation ("Vizcraft," "we," "us," or "our"), operates the Vizcraft AI-powered architectural visualization platform (the "Service"). This Privacy Policy describes how we collect, use, disclose, retain, and protect your personal information when you access or use our Service, visit our website at vizcraft.ai, or otherwise interact with us.
By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use our Service.
This Privacy Policy applies to all users worldwide, including users in the European Economic Area (EEA), United Kingdom, California, and other jurisdictions with specific privacy regulations.
2. Data Controller Information
For the purposes of applicable data protection laws, Vizcraft Inc. is the data controller responsible for your personal information.
3. Information We Collect
3.1 Information You Provide Directly
- Account Information: Name, email address, password (encrypted), and optional profile information when you create an account.
- Billing Information: Payment card details, billing address, and transaction history when you purchase credits or subscriptions. Payment processing is handled by third-party processors; we do not store complete payment card numbers.
- User Content: Images you upload, text prompts, generation parameters, and any other content you submit to the Service.
- Communications: Information you provide when you contact our support team, respond to surveys, or communicate with us.
3.2 Information Collected Automatically
- Device Information: Device type, operating system, browser type and version, unique device identifiers, and mobile network information.
- Usage Data: Pages visited, features used, actions taken, time spent on pages, click patterns, and navigation paths.
- Log Data: IP address, access times, referring URLs, error logs, and server logs.
- Location Data: Approximate geographic location inferred from your IP address.
3.3 Information from Third Parties
- Authentication Providers: If you sign in using a third-party service (e.g., Google), we receive information from that service as authorized by you.
- Payment Processors: Transaction status and limited payment information from our payment partners.
4. Legal Bases for Processing (EEA/UK Users)
For users in the European Economic Area and United Kingdom, we process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to provide the Service, manage your account, and fulfill our contractual obligations to you.
- Legitimate Interests: Processing for our legitimate business interests, such as improving our Service, preventing fraud, and ensuring security, where such interests are not overridden by your rights.
- Consent: Processing based on your explicit consent, which you may withdraw at any time.
- Legal Obligation: Processing necessary to comply with applicable laws and regulations.
5. How We Use Your Information
We use the information we collect for the following purposes:
- To provide, operate, and maintain the Service
- To process your AI image generation requests
- To manage your account, billing, and subscriptions
- To communicate with you about the Service, including updates, security alerts, and support messages
- To improve, personalize, and optimize the Service and user experience
- To develop new features, products, and services
- To detect, prevent, and address fraud, abuse, security issues, and technical problems
- To enforce our Terms of Service and other legal rights
- To comply with legal obligations and respond to lawful requests
- For analytics and research purposes
6. Third-Party Service Providers
We share your information with third-party service providers who perform services on our behalf. These providers are contractually bound to protect your information and may only use it for the specific purposes we authorize.
6.1 AI Processing Services
- FAL.ai: Image generation and processing. Your uploaded images and prompts are processed by FAL.ai to generate visualizations. FAL.ai Privacy Policy
- Replicate: AI model inference services. Replicate Privacy Policy
6.2 Infrastructure and Hosting
- Cloud Storage Providers: Secure storage of your uploaded images and generated content.
- Database Providers: Storage of account information and application data.
- Sentry: Error monitoring, to find and fix bugs in the Service.
6.3 Analytics and Advertising
- PostHog: Product analytics and feature usage tracking to understand how users interact with our Service. PostHog session recordings, with form inputs masked, run only after you accept cookies.
- Meta Pixel (Facebook): Conversion tracking, audience building, and advertising measurement. Meta may use this data in accordance with their Privacy Policy.
- Google Ads: Conversion tracking and advertising measurement. Google may use this data in accordance with its Privacy Policy.
6.4 Payment Processing
We use third-party payment processors to handle payment transactions. These processors have their own privacy policies governing the use of your payment information.
7. Information Disclosure
We may disclose your personal information in the following circumstances:
- With Your Consent: When you direct us to share information with third parties.
- Service Providers: To third parties who provide services on our behalf, as described in Section 6.
- Legal Requirements: To comply with applicable law, legal process, or government requests; to enforce our Terms of Service; to protect our rights, privacy, safety, or property, or that of our users or others.
- Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.
- Aggregated or De-identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and store information about your interactions with our Service.
8.1 Types of Cookies We Use
- Essential Cookies: Required for the Service to function properly, including session management and authentication.
- Analytics Cookies: Help us understand how users interact with our Service to improve functionality and user experience.
- Advertising Cookies: Used to deliver relevant advertisements and measure campaign effectiveness.
- Preference Cookies: Remember your settings and preferences.
8.2 Managing Cookies
On your first visit to our website, a cookie banner asks for your choice. Until you decline, PostHog analytics, Sentry session replays (all text masked, all images blocked) and a first-party cookie that remembers how you first reached our website (the referring site, the landing page and any campaign tags, kept for up to 90 days so a sign-up can be credited to that visit) may run. PostHog session recordings (form inputs and page text masked), the Meta Pixel and Google Ads run only after you accept.
You can change your choice at any time: reopen the banner with (also in the site footer) and choose Accept or Decline. Declining stops PostHog, Sentry replays, the Meta Pixel and Google Ads on our website in that browser, removes the attribution cookie and the identifiers PostHog stored there, and your choice is saved there. It does not turn off essential cookies, Sentry error reports (without a replay) or our count of homepage visits (which records only the page and the day, with no cookies or identifiers). For account-level requests, email privacy@vizcraft.ai.
You can also control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies may affect the functionality of our Service. For more information about managing cookies, visit www.allaboutcookies.org.
8.3 Do Not Track
Some browsers transmit "Do Not Track" signals. We currently do not respond to "Do Not Track" signals because there is no consistent industry standard for compliance.
9. Data Security
We implement appropriate technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS/SSL protocols
- Encryption of sensitive data at rest
- Access controls and authentication mechanisms
- Incident response procedures
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.
10. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:
- Account Information: Retained for the duration of your account plus a reasonable period thereafter for legal and business purposes.
- Generated Content: Retained in your account until you delete it or close your account.
- Transaction Records: Retained for up to 7 years to comply with tax and accounting requirements.
- Usage Data: Typically retained for up to 24 months, unless a longer retention period is required by law.
After account deletion, we may retain certain information as required by law, to resolve disputes, enforce our agreements, or for legitimate business purposes (e.g., fraud prevention).
11. International Data Transfers
Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States. These countries may have data protection laws different from those in your country.
When we transfer personal information from the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Data Processing Agreements with service providers
- Other legally recognized transfer mechanisms
12. Your Privacy Rights
12.1 Rights for All Users
Regardless of your location, you have the right to:
- Access and review your personal information
- Update or correct inaccurate information
- Delete your account and associated data
- Opt out of marketing communications
- Opt out of analytics and advertising cookies, as described in Section 8.2
12.2 Additional Rights for EEA/UK Residents
Under the GDPR, you also have the right to:
- Request restriction of processing
- Data portability (receive your data in a structured format)
- Object to processing based on legitimate interests
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with your local supervisory authority
12.3 California Privacy Rights (CCPA/CPRA)
California residents have additional rights under the CCPA/CPRA:
- Right to know what personal information is collected, used, and disclosed
- Right to delete personal information
- Right to opt out of the sale or sharing of personal information
- Right to non-discrimination for exercising privacy rights
- Right to correct inaccurate personal information
- Right to limit the use and disclosure of sensitive personal information
We do not sell your personal information. To exercise your California privacy rights, contact us at privacy@vizcraft.ai.
12.4 Exercising Your Rights
To exercise any of these rights, please contact us at privacy@vizcraft.ai. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.
13. Children's Privacy
Our Service is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@vizcraft.ai. We will take steps to delete such information promptly.
Users between 13 and 18 years of age (or the age of majority in their jurisdiction) may only use the Service with the consent and supervision of a parent or legal guardian who agrees to be bound by these terms.
14. Third-Party Links
Our Service may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party services you access. We are not responsible for the privacy practices or content of third parties.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you via email (if you have an account)
- Post a prominent notice on our Service
Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.
16. Contact Us
If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:
For EEA/UK residents, you also have the right to lodge a complaint with your local data protection authority if you believe we have not adequately addressed your concerns.