Trust & data
Where your data goes
The free design tools run in your browser. AI tools send your brief through our build server to the AI provider. Payments go through Polar. Here is each path, and every outside service involved.
Last updated:
Data flow
Your browser
Layout, brand kit, logo and images are edited and rendered on your device.
Browser storage
“My designs” (up to 50) are saved in this browser’s local storage, not in an account.
Your disk
PNG, SVG, theme JSON and PBIP files are generated in the browser and downloaded.
Counters and requests (Supabase)
Not your files: a gallery download or “open in studio” adds one anonymous count (asset, event, day and a daily-changing hash of your IP, never the raw IP). “Request a template” sends only the search, filters and note you type.
vizforge.ai (Vercel)
Checks your session and deducts credits (refunded automatically if the run fails).
Build server (Railway)
Sends your brief to Anthropic (and the prompt text to Voyage AI for retrieval), type-checks and packages the result.
Your account (Supabase)
Custom visual runs: the prompt, generated code and .pbiviz are stored for your history and refinements. Every run: the credit ledger entry.
Polar checkout
Polar is the merchant of record and handles card details, tax and receipts.
Order webhook
Polar tells vizforge.ai the order is paid or refunded.
Credit balance (Supabase)
Credits are added, or taken back on a refund.
Services that process data
Every outside service VizForge sends data to, what it’s for and what it receives. This list is checked against the code that calls each service.
- VercelEvery visit
Hosts the vizforge.ai website and its API routes.
Receives: Standard web request data (IP address, user agent, requested URL) for every page you open.
- Plausible AnalyticsEvery visit
Privacy-focused page analytics and product events (for example “Design Exported”).
Receives: Page views and event names with a few non-personal properties; no cookies.
- SupabaseSigned-in features and gallery counters
Accounts and sign-in, the database (credits, generation history) and file storage for generated .pbiviz packages. Without an account: the anonymous gallery counters and “Request a template” submissions from the free design tools.
Receives: Signed in: your email and name, prompts, generated code and packages, credit balance and order records. Free design tools: for each gallery download or “open in studio”, the asset, the event and the day with a keyed hash of your IP address that changes daily (no raw IP, no account); a template request stores the search text, filters and the note you type (up to 600 characters), no email. Review links (optional, signed in): a snapshot of the design, plus each reviewer comment with the display name typed, the text, the pin position and a hash of a random per-browser cookie id (no IP, no email).
- RailwayAI tools only
Runs the VizForge build server that orchestrates AI generation, type-checks the code and packages the .pbiviz.
Receives: Your prompt or brief (including AI theme descriptions), uploaded sketches and Synoptic images, and the generated code while a run is processed.
- AnthropicAI tools only
Claude models that classify requests, write and repair visual code, run the prompt coach and the support assistant, and pick colours for the AI theme generator.
Receives: Your prompt or brief, images you attach for sketch-to-prompt or Synoptic maps, support-chat messages, and AI theme descriptions (with any hex colours you add).
- Voyage AIAI tools only
Turns a generation prompt into an embedding to find relevant reference patterns.
Receives: The text of your generation prompt.
- PolarBuying credits
Merchant of record for credit packs: checkout, tax, receipts and refunds.
Receives: Payment and billing details you enter at checkout (VizForge never sees card numbers) and order status.
Questions
- Do the free design tools upload my files?
- No. The Design Studio, galleries, Theme Lab, the SVG measure builder and the pbiviz Inspector work in your browser. Logos, images and theme files you load stay on your device, and exports are generated in the browser. Two small things do leave the browser, both stored in Supabase without an account: an anonymous count when you download from a gallery or open an asset in the studio (the asset, the event, the day and a keyed hash of your IP address that changes daily, never the raw IP), and the text of a “Request a template” form if you send one (search, filters and a note of up to 600 characters, no email).
- What does a design share link contain?
- The design itself: the page layout, colours, text and brand kit, compressed into the link’s ?d= parameter. VizForge doesn’t save shared designs in a database. When someone opens the link, vizforge.ai decodes it to render the page and its preview image. Embedded images over 60 KB are left out, and links are capped at 16,000 characters. Anyone with the link can see and remix the design, so treat it like the design file.
- What does a review link store?
- Review links are optional and need a free account. Creating one stores a snapshot of the design (the same compressed format as a share link, up to 16,000 characters) in Supabase with your account id, so reviewers can pin comments to it. Reviewers don’t sign in: each comment stores the display name they type, the text (up to 2,000 characters, shown as plain text) and the pin position. To count distinct viewers and let a reviewer resolve their own thread, the browser gets a random ID in a cookie sent only to the review API; only a hash of it is stored, never an IP address or email. Links stay open 30 days after the last update; after that only you can open them, and the link and its comments are deleted 30 days after expiry unless you reopen or update it. You can delete any single comment, and deleting a link deletes all of its comments. The link is unguessable but not password-protected: anyone you send it to can read and comment.
- Is my dataset sent to the AI?
- No. The AI generator works from your written description (and an image if you attach one); you never upload your data model. Previews use sample data, and generated visuals run inside Power BI on your data without calling external services.
- Are prompts used to train AI models?
- VizForge doesn’t give your prompts or generated code to anyone to train AI models. Two of the AI services above see prompt text while doing their job: Anthropic (the prompt and generated code) and Voyage AI (the prompt text, to embed it for retrieval). Each handles API data under its own terms, which this page doesn’t restate; check their policies if model training matters to you. See the privacy policy for how VizForge itself uses aggregated, anonymised prompt patterns.
- Does VizForge hold SOC 2, ISO 27001 or similar certifications?
- No. VizForge does not hold security or compliance certifications, and doesn’t claim any. The services listed above publish their own.
Full policy: Privacy Policy and Terms of Service. What you may do with the design assets: Licence. Try the browser-only tools: Design Studio, Theme Lab. What changed recently: Changelog. Data requests: privacy@vizforge.ai.