Privacy Policy

1. Data Controller

Vizbase Ltd., registered at Krišjāņa Barona iela 30A, Centra rajons, Rīga, LV-1011, Latvia ("VizBase", "we", "us") is the data controller responsible for your personal data.

Contact: support@vizbase.ai

2. Data We Collect

We collect and process the following categories of personal data:

• Account data: name, email address, and authentication credentials when you create an account.
• Usage data: images you upload for rendering, generated outputs, session logs, and feature usage statistics.
• Payment data: billing information processed through our third-party payment provider (Stripe). We do not store full card numbers.
• Technical data: IP address, browser type, device information, and cookies for service functionality.

3. How We Use Your Data

We process your personal data for the following purposes:

• Providing and maintaining the VizBase rendering service.
• Processing your transactions and managing your subscription.
• Improving our AI models and service quality (aggregated, anonymized data only).
• Communicating service updates and responding to support requests.
• Complying with legal obligations.

4. Legal Basis for Processing

We process your data based on:

• Contract performance: to deliver the services you have subscribed to.
• Legitimate interest: to improve our services and ensure security.
• Consent: for optional marketing communications.
• Legal obligation: to comply with applicable laws and regulations.

5. Data Retention

Uploaded images and generated renders are stored for the duration of your active account. Upon account deletion, your data is removed within 30 days. Payment records are retained as required by applicable tax and accounting legislation.

6. Data Sharing

We share data only with:

• Cloud infrastructure providers: for image processing and storage.
• Payment processors: Stripe, for transaction handling.
• AI & cloud sub-processors: to create, enhance, and store your renders, we share the images and prompts you submit with the providers that power our rendering pipeline, including Cloudflare (image storage in its Eastern Europe region, and image delivery), Amazon Web Services (our self-hosted analysis models and older image storage, EU/Stockholm region), Vercel (application hosting), Google (Gemini — scene analysis and image generation), Microsoft (Azure OpenAI — image generation and editing), BytePlus, a ByteDance company (image generation), fal.ai (image generation), Meta Platforms, Inc. (image editing, directly and through fal.ai), Magnific.ai (image upscaling), and Anthropic and OpenAI models via Amazon Bedrock (scene analysis, reasoning and prompt generation). These providers process your content to deliver the features you request. They do not use your uploaded images to train their AI models, except that some may use anonymized or aggregated data derived from usage to improve their own services. Some providers retain inputs and outputs briefly (typically up to 30 days) for security and abuse-detection purposes. For the current list of sub-processors, contact support@vizbase.ai.
• Advertising and measurement partners: where you grant advertising consent, we share a hashed (irreversible) version of your email address, a pseudonymous account identifier, and conversion events (such as sign-up or subscription) with our advertising-measurement provider, Servo Group, SIA, which transmits them to advertising platforms including Meta Platforms, Inc. This lets us measure how effective our advertising is. These identifiers are hashed before transmission and are not used to contact you. Nothing is shared until you accept advertising cookies, and you can withdraw consent at any time.

International transfers:some of these partners — including certain AI sub-processors (such as Google, Microsoft, Anthropic and OpenAI models via Amazon Bedrock, fal.ai, and Meta, mainly in the United States, and BytePlus in Southeast Asia) and our advertising-measurement provider's infrastructure (Meta; Google Cloud, United States) — process data outside the European Economic Area. Where they do, such transfers are governed by the EU–U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. Our image storage is in Cloudflare's Eastern Europe region; older images and our self-hosted analysis run within the EU (AWS, Stockholm).

We do not sell your personal data to third parties.

7. Your Rights (GDPR)

As a data subject under the GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Request erasure of your data.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.

To exercise these rights, contact support@vizbase.ai.

8. Cookies & Consent

We use cookies and similar technologies in the following categories:

• Essential: required for authentication and session management. Always on.
• Analytics: help us understand how the service is used.
• Advertising: used for marketing measurement and to share the hashed identifiers described in Section 6 with our advertising partners. Off by default.

Analytics and advertising cookies are disabled until you opt in. When you first visit, our cookie banner lets you accept all, reject all, or customize each category, and you can change your choice at any time. We honor Google Consent Mode signals across these categories.

9. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a notice on our website.

11. Contact

For any privacy-related questions or requests, contact us at:

Vizbase Ltd.
Krišjāņa Barona iela 30A, Centra rajons, Rīga, LV-1011
Email: support@vizbase.ai
Phone: +371 27 137 307