Privacy Policy

Welcome to Visualix AI (“Company”, “we”, “us”, or “our”). We are committed to protecting the privacy of our users (“User”, “you”). This Privacy Policy explains our practices regarding the collection, use, disclosure, retention, and protection of the information we receive through our website (https://visualixai.com) and any of our related mobile applications, APIs, or software services (collectively, the “Services”).

Acceptance: By visiting our website or using our Services, you agree to the terms of this Privacy Policy. If you do not agree with any terms within this Policy, please do not access or use the Services. This Policy is integrated into and subject to our Terms of Service.

We collect information that identifies, relates to, describes, or is reasonably capable of being associated with you (“Personal Information”). Over the past 12 months, we have collected the following categories of Personal Information:

• Identifiers: Real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, Google OAuth tokens, or other similar identifiers.
• Personal Information Categories (Cal. Civ. Code § 1798.80(e)): Name, address, telephone number, state ID (if provided for business verification), credit card number, debit card number, or any other financial information (processed directly by our PCI-compliant partners like Stripe).
• Commercial Information: Records of products or services purchased, obtained, or considered, AI credits consumed, subscription history, or other purchasing or consuming histories or tendencies.
• Internet or Similar Network Activity: Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. Specifically, we collect metrics on render queue durations, button clicks, and error tracking via Microsoft Clarity.
• Geolocation Data: Physical location or movements approximated from your IP address to comply with regional tax laws (such as Indian GST calculation).
• User-Generated Content (Sensory & Audio Data): Audio tracks, video files, YouTube URLs, images, and transcripts uploaded or submitted to the Services for the purpose of running AI transformations.

We obtain the categories of Personal Information listed above from the following categories of sources:

• Directly from You: For example, from forms you complete, accounts you register, files you upload, or subscriptions you purchase.
• Indirectly/Automatically: For example, from observing your actions on our Services. We use cookies, web beacons, and session telemetry to track how you navigate the dashboard.
• From Third Parties: For example, if you authenticate using Google, Google provides us with your basic profile info. If you link a YouTube account, YouTube provides API metadata. Additionally, our payment gateways (Stripe, Razorpay) send us webhook data confirming transaction success without passing raw card numbers.

Under the General Data Protection Regulation (GDPR) and similar laws, we must establish a legal basis to process your data. We use your data for:

• Performance of a Contract: To provide the core AI rendering services, process payments, manage subscriptions, deliver customer support, and fulfill our Terms of Service.
• Legitimate Interests: To improve and optimize our Platform, detect and prevent fraud, secure our rendering infrastructure, perform data analytics, and market our services (where consent is not legally required).
• Consent: To place non-essential tracking cookies (e.g., Microsoft Clarity), send promotional newsletters, and connect to third-party APIs (like Google OAuth). You may withdraw consent at any time.
• Legal Obligations: To maintain tax records, respond to valid law enforcement requests, and comply with DMCA/copyright regulations.

Visualix AI does not sell your Personal Information for monetary compensation. However, we may share your data with the following entities to operate our business:

• Cloud Infrastructure Providers: AWS, Google Cloud, or Replicate for hosting databases, processing videos, and temporarily storing generated assets.
• AI & API Partners: Deepgram (for audio transcription), OpenAI (for text analysis), or specific LLM providers. These partners process your media strictly as data processors and are contractually prohibited from using your private media to train their foundational models.
• Payment Processors: Stripe and Razorpay to handle secure checkout, subscriptions, and tax compliance securely.
• Analytics & Marketing Providers: Microsoft Clarity, Google Analytics, and Facebook Pixel to measure website performance. (See section on Cookies and State Laws regarding "Sharing" for targeted ads).
• Legal and Corporate Transfers: We may disclose data if required by a subpoena, court order, or to defend against legal claims. Furthermore, if Visualix AI is involved in a merger, acquisition, or asset sale, your Personal Information may be transferred as a business asset.

Our Service utilizes YouTube API Services to allow you to seamlessly authenticate, retrieve video metadata, and optionally publish Generated Content to your channel. By using these features, you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.

We retain your Personal Information only as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained for the life of your account. If you request account deletion, we purge your account details within 30 days.
• Rendered Media & Transcripts (User Content): To optimize server costs and protect privacy, raw uploaded videos, audio tracks, and temporary final renders hosted on our S3 buckets are **automatically scheduled for deletion 30 days after generation**. You are responsible for downloading and archiving your content locally.
• Billing & Tax Records: Retained for a minimum of 7 years to comply with international tax, auditing, and accounting obligations.
• Log Data & Telemetry: Anonymized and aggregated logs are kept indefinitely. Raw interaction logs are purged after 90 days.

We have implemented robust technical, administrative, and physical security measures designed to protect your Personal Information from unauthorized access, loss, or alteration. These include AES-256 database encryption, TLS 1.3 for data in transit, strict role-based access control (RBAC) for engineering staff, and routine penetration testing.

Depending on your state of residence (e.g., California, Virginia, Colorado, Connecticut, Utah), you may possess specific rights under acts like the CCPA/CPRA, VCDPA, and CPA.

• Right to Know / Access: You may request disclosure of the specific pieces of Personal Information we have collected, the sources, the purpose, and the third parties with whom we share it.
• Right to Delete: You may request the deletion of your Personal Information, subject to certain legal exceptions (e.g., completing a transaction, detecting security incidents).
• Right to Correct: You may request that we correct inaccurate Personal Information.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal data for money. However, the use of third-party cookies (like Facebook Pixel) for targeted advertising may constitute "sharing" or "selling" under California law. You may opt out of this by adjusting your cookie preferences or broadcasting a Global Privacy Control (GPC) signal.
• Non-Discrimination: We will not deny you services, charge different prices, or provide a lower quality of service if you exercise these rights.

Notice to Nevada Residents: We do not "sell" your covered information as defined under Nevada Revised Statutes Chapter 603A.

Notice to California Residents ("Shine the Light"): California Civil Code Section 1798.83 permits users who are California residents to request information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. We currently do not share data with third parties for their direct marketing.

European Economic Area (EEA) & UK Users (GDPR)

If you are a resident of the EEA or UK, you have the right to:

• Access, correct, update, or request deletion of your Personal Information.
• Object to the processing of your data, ask us to restrict processing, or request data portability.
• Withdraw your consent at any time without affecting the lawfulness of processing conducted prior to your withdrawal.
• Lodge a complaint with a Data Protection Authority (DPA) regarding our collection and use.

Indian Residents (DPDP Act, 2023)

If you reside in India, in compliance with the Digital Personal Data Protection Act, you have the right to access a summary of your data being processed, request correction or erasure, appoint a nominee in case of death or incapacity, and access our Grievance Redressal mechanism via [email protected].

Our Services are not intended for or directed at children under the age of 13 (or under 16 in the EEA). We do not knowingly collect Personal Information from children under these ages. If we become aware that a child under the legal age has provided us with Personal Information without verifiable parental consent, we will take immediate steps to delete such information from our servers and terminate the associated account. If you are a parent or guardian and believe your child has provided us with data, please contact us at [email protected].

Many web browsers include a Do-Not-Track (“DNT”) feature or setting. Currently, there is no universally recognized industry standard for recognizing or responding to DNT signals. Therefore, we do not currently respond to DNT browser signals.

However, we strive to respect the Global Privacy Control (“GPC”) signal. If our systems detect a valid GPC signal originating from your browser or extension, we will treat it as a valid request to opt-out of the "sharing" of your Personal Information for targeted advertising purposes under applicable US state privacy laws.

Updates: We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by revising the "Last updated" date at the top of this Policy, displaying a prominent notice on our dashboard, or sending an email notification. Your continued use of the Services following the posting of changes constitutes your acceptance of the revised Policy.

Contact the Data Protection Officer (DPO) / Support: If you have any questions, concerns, or requests regarding this Privacy Policy, your rights, or how we process your data, please contact us at: