Privacy Policy

Effective Date: January 1, 2025

Last Updated: 2/3/2026

1. Introduction and Scope

Vizcraft Inc., a Delaware corporation ("Vizcraft," "we," "us," or "our"), operates the Vizcraft AI-powered architectural visualization platform (the "Service"). This Privacy Policy describes how we collect, use, disclose, retain, and protect your personal information when you access or use our Service, visit our website at vizcraft.ai, or otherwise interact with us.

By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use our Service.

This Privacy Policy applies to all users worldwide, including users in the European Economic Area (EEA), United Kingdom, California, and other jurisdictions with specific privacy regulations.

2. Data Controller Information

For the purposes of applicable data protection laws, Vizcraft Inc. is the data controller responsible for your personal information.

Vizcraft Inc.

Data Protection Inquiries

Email: privacy@vizcraft.ai

3. Information We Collect

3.1 Information You Provide Directly

  • Account Information: Name, email address, password (encrypted), and optional profile information when you create an account.
  • Billing Information: Payment card details, billing address, and transaction history when you purchase credits or subscriptions. Payment processing is handled by third-party processors; we do not store complete payment card numbers.
  • User Content: Images you upload, text prompts, generation parameters, and any other content you submit to the Service.
  • Communications: Information you provide when you contact our support team, respond to surveys, or communicate with us.

3.2 Information Collected Automatically

  • Device Information: Device type, operating system, browser type and version, unique device identifiers, and mobile network information.
  • Usage Data: Pages visited, features used, actions taken, time spent on pages, click patterns, and navigation paths.
  • Log Data: IP address, access times, referring URLs, error logs, and server logs.
  • Location Data: Approximate geographic location inferred from your IP address.

3.3 Information from Third Parties

  • Authentication Providers: If you sign in using a third-party service (e.g., Google, GitHub), we receive information from that service as authorized by you.
  • Payment Processors: Transaction status and limited payment information from our payment partners.

4. Legal Bases for Processing (EEA/UK Users)

For users in the European Economic Area and United Kingdom, we process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to provide the Service, manage your account, and fulfill our contractual obligations to you.
  • Legitimate Interests: Processing for our legitimate business interests, such as improving our Service, preventing fraud, and ensuring security, where such interests are not overridden by your rights.
  • Consent: Processing based on your explicit consent, which you may withdraw at any time.
  • Legal Obligation: Processing necessary to comply with applicable laws and regulations.

5. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, operate, and maintain the Service
  • To process your AI image generation requests
  • To manage your account, billing, and subscriptions
  • To communicate with you about the Service, including updates, security alerts, and support messages
  • To improve, personalize, and optimize the Service and user experience
  • To develop new features, products, and services
  • To train and improve our AI models using anonymized and aggregated data
  • To detect, prevent, and address fraud, abuse, security issues, and technical problems
  • To enforce our Terms of Service and other legal rights
  • To comply with legal obligations and respond to lawful requests
  • For analytics and research purposes

6. Third-Party Service Providers

We share your information with third-party service providers who perform services on our behalf. These providers are contractually bound to protect your information and may only use it for the specific purposes we authorize.

6.1 AI Processing Services

6.2 Infrastructure and Hosting

  • Cloud Storage Providers: Secure storage of your uploaded images and generated content.
  • Database Providers: Storage of account information and application data.

6.3 Analytics and Advertising

  • PostHog: Product analytics and feature usage tracking to understand how users interact with our Service.
  • Meta Pixel (Facebook): Conversion tracking, audience building, and advertising measurement. Meta may use this data in accordance with their Privacy Policy.

6.4 Payment Processing

We use third-party payment processors to handle payment transactions. These processors have their own privacy policies governing the use of your payment information.

7. Information Disclosure

We may disclose your personal information in the following circumstances:

  • With Your Consent: When you direct us to share information with third parties.
  • Service Providers: To third parties who provide services on our behalf, as described in Section 6.
  • Legal Requirements: To comply with applicable law, legal process, or government requests; to enforce our Terms of Service; to protect our rights, privacy, safety, or property, or that of our users or others.
  • Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.
  • Aggregated or De-identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your interactions with our Service.

8.1 Types of Cookies We Use

  • Essential Cookies: Required for the Service to function properly, including session management and authentication.
  • Analytics Cookies: Help us understand how users interact with our Service to improve functionality and user experience.
  • Advertising Cookies: Used to deliver relevant advertisements and measure campaign effectiveness.
  • Preference Cookies: Remember your settings and preferences.

8.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies may affect the functionality of our Service. For more information about managing cookies, visit www.allaboutcookies.org.

8.3 Do Not Track

Some browsers transmit "Do Not Track" signals. We currently do not respond to "Do Not Track" signals because there is no consistent industry standard for compliance.

9. Data Security

We implement appropriate technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using TLS/SSL protocols
  • Encryption of sensitive data at rest
  • Regular security assessments and penetration testing
  • Access controls and authentication mechanisms
  • Employee training on data security practices
  • Incident response procedures

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

  • Account Information: Retained for the duration of your account plus a reasonable period thereafter for legal and business purposes.
  • Generated Content: Retained in your account until you delete it or close your account.
  • Transaction Records: Retained for up to 7 years to comply with tax and accounting requirements.
  • Usage Data: Typically retained for up to 24 months, unless a longer retention period is required by law.

After account deletion, we may retain certain information as required by law, to resolve disputes, enforce our agreements, or for legitimate business purposes (e.g., fraud prevention).

11. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States. These countries may have data protection laws different from those in your country.

When we transfer personal information from the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Data Processing Agreements with service providers
  • Other legally recognized transfer mechanisms

12. Your Privacy Rights

12.1 Rights for All Users

Regardless of your location, you have the right to:

  • Access and review your personal information
  • Update or correct inaccurate information
  • Delete your account and associated data
  • Opt out of marketing communications

12.2 Additional Rights for EEA/UK Residents

Under the GDPR, you also have the right to:

  • Request restriction of processing
  • Data portability (receive your data in a structured format)
  • Object to processing based on legitimate interests
  • Withdraw consent at any time (where processing is based on consent)
  • Lodge a complaint with your local supervisory authority

12.3 California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the CCPA/CPRA:

  • Right to know what personal information is collected, used, and disclosed
  • Right to delete personal information
  • Right to opt out of the sale or sharing of personal information
  • Right to non-discrimination for exercising privacy rights
  • Right to correct inaccurate personal information
  • Right to limit the use and disclosure of sensitive personal information

We do not sell your personal information. To exercise your California privacy rights, contact us at privacy@vizcraft.ai.

12.4 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@vizcraft.ai. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

13. Children's Privacy

Our Service is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@vizcraft.ai. We will take steps to delete such information promptly.

Users between 13 and 18 years of age (or the age of majority in their jurisdiction) may only use the Service with the consent and supervision of a parent or legal guardian who agrees to be bound by these terms.

14. Third-Party Links

Our Service may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party services you access. We are not responsible for the privacy practices or content of third parties.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this policy
  • Notify you via email (if you have an account)
  • Post a prominent notice on our Service

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

16. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

Vizcraft Inc.

Data Protection Officer / Privacy Team

Email: privacy@vizcraft.ai

For EEA/UK residents, you also have the right to lodge a complaint with your local data protection authority if you believe we have not adequately addressed your concerns.

Política de Privacidade | Vizcraft