1. Information We Collect

Account information: When you sign up, we collect your email address and name. If you subscribe to a paid plan, payment processing is handled by Polar (polar.sh); we do not store credit card numbers.

Usage data: We collect prompts you submit, generated visual metadata (type, complexity, status), and basic usage analytics (pages visited, features used). We use this to improve the Service and AI model quality.

Technical data: Browser type, operating system, IP address, and device information are collected automatically for security and performance monitoring.

2. How We Use Your Information

We use your information to: (a) provide and maintain the Service; (b) process payments and manage subscriptions; (c) improve AI generation quality; (d) send service-related communications; (e) prevent abuse and enforce our Terms. We do not sell your personal information to third parties.

3. AI Processing and Prompts

Your prompts are processed by AI models (provided by Anthropic) to generate visual code. Prompts and generated output are stored in your account for history and regeneration purposes. We may use anonymized, aggregated prompt patterns to improve our classification and generation models. We do not use your specific prompts or generated code to train third-party AI models.

4. Data Storage and Security

Your data is stored on Supabase (PostgreSQL database) with encryption at rest and in transit. Generated .pbiviz files are stored in Supabase Storage with signed URLs. We implement industry-standard security measures including row-level security, encrypted connections, and secure authentication via Supabase Auth.

5. Third-Party Services

We use the following third-party services that may process your data:

Supabase — Database, authentication, and file storage
Polar — Payment processing and merchant of record (handles VAT/sales tax globally)
Anthropic — AI model provider for code generation
Vercel — Application hosting and CDN

6. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies. Analytics cookies (if any) are anonymized and can be disabled in your browser settings.

7. Your Rights

You have the right to: (a) access your personal data; (b) correct inaccurate data; (c) delete your account and associated data; (d) export your generation history and generated code; (e) opt out of non-essential communications. To exercise these rights, contact us at privacy@vizforge.ai.

8. Data Retention

Your generation history and generated files are retained as long as your account is active. When you delete your account, all personal data and generated content is permanently deleted within 30 days. Anonymized usage analytics may be retained indefinitely.

9. International Users

If you are located in the European Economic Area (EEA), UK, or other jurisdiction with data protection laws, we process your data under legitimate interest or your consent. You may request data portability or erasure under GDPR by contacting us.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes via email. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related inquiries, contact privacy@vizforge.ai.