Privacy Policy

1. Data We Collect

When you create an account, we collect your name and email address through our authentication provider, Clerk. We use cookies to maintain your authentication session and, only if you accept the analytics banner, to recognise your browser across visits for product analytics (section 6).

2. Your Dataset Data

Dataset data you upload stays in your browser, stored locally in IndexedDB, except when you use one of the features below — including AI features, which send data to Anthropic. Those local records are encrypted with AES-256-GCM via the Web Crypto API, but the key is held in your browser alongside them — so this guards against incidental exposure, not against someone with access to your device or browser. It should not be relied on to protect sensitive data on a shared or untrusted machine.

We transmit your data to our servers for these features: (a) using AI features (which send column metadata, sample rows, and computed statistics and query results; samples can contain every row of a small dataset); (b) sharing a dashboard (which uploads a snapshot so recipients can view it); or (c) signing in to your account, which auto-syncs your dashboards and your most recently loaded dataset to our cloud storage (Vercel Blob) so you can pick up work on a different device. Signing out clears the current browser session; the cloud copy is retained until you delete the account. Database and Google Sheets imports also use our server endpoints to retrieve data.

Predictive models (the Predict page) are trained and run entirely in your browser; the trained model is stored in IndexedDB on your device and is never uploaded.

3. AI Features

When you use AI-powered features (AI Query, AI Summary, dashboard natural-language commands, Auto Mode, and correlation explanations), we send your prompts and feature-dependent data contextplus computed statistics about the dataset — including column metadata, sample rows, query results, and extreme-value rows — to our server and on to our AI provider, Anthropic, for processing. What is sent depends on the dataset’s AI data-sharing setting, applied in your browser before anything leaves it: Mask personal data (the default) replaces names, email addresses, phone numbers, national ids, bank and card numbers and addresses with placeholders such as “email_7”, while other values are sent as they are; Summary statistics only sends no row-level values; Full rows sends sample rows unchanged. Columns you mark “Never send” are masked in every mode. Sample sizes vary by feature, and a sample may contain all rows of a small dataset. AI Data Stories send only an aggregated profile (counts, ratios, correlations), not raw rows. You are prompted to opt in before the first AI call, and the app works fully without AI features. Details: Security.

4. Payment Processing

Payments are handled entirely by Stripe. We never receive, store, or process your credit card details. Stripe's privacy policy governs how your payment information is handled.

5. Shared Dashboards

When you explicitly choose to share a dashboard, a snapshot of the dashboard and the rows it is built on is stored on Vercel Blob so anyone with the link can view it without an account. This only happens at your request. Free-plan links expire after 24 hours; Pro links expire after 7, 30 or 90 days, or never, as you choose, and can be password protected. An expired link stops opening and its snapshot is deleted the next time the link is requested. You can revoke any link you created at any time from your Workspace page, which deletes the snapshot immediately.

6. Analytics and Session Replay

We use two analytics services to understand how the product is used and to find bugs:

• Vercel Analytics — cookieless, anonymised page views. It sets no cookies and cannot identify you.
• PostHog (hosted in the EU) — feature-usage events such as “dashboard created” or “export clicked”, and, with your consent, session replay: a recording of how you move through the interface so we can reproduce problems.

PostHog runs in two modes, chosen through the banner shown on your first visit and changeable at any time under Settings or the “Cookie preferences” link in the footer:

• Declined or undecided — no cookies and no browser storage; events are anonymous and are not linked to your account. Sessions are not recorded.
• Accepted — PostHog stores an identifier in a cookie and in local storage so visits can be joined together. When you are signed in, events are linked to your account’s internal id (never your email or name), together with your plan and account creation date. Sessions may be recorded.

In every mode, the contents of your datasets stay out of analytics: event payloads contain only feature names, counts and flags, and session recordings mask all text and every input field before anything leaves your browser. We never receive your column values, questions or SQL through analytics. We do not use advertising trackers, and we do not share or sell your data to third parties for advertising or profiling.

7. Service Providers

Vizmatiq is built on a small set of infrastructure providers, each processing only what its role requires:

• Clerk — authentication (your name, email, and session).
• Vercel — hosting, anonymised analytics, and cloud storage for synced and shared dashboards.
• PostHog — product analytics and, with your consent, session replay, as described in section 6. Data is processed on PostHog’s EU (Frankfurt) infrastructure.
• Stripe — payment processing (we never see your card details).
• Anthropic — AI processing of the data samples described in section 3, only when you use AI features.
• Vercel KV / Upstash (Redis) — per-account usage counters (your account id and a number) that enforce daily AI and share-link limits, kept for at most 48 hours.

Our servers also keep short-lived request logs (IP address, path, status, time) for security, debugging and rate limiting, retained by Vercel for a limited period. The IP address is used to limit password attempts on protected share links.

8. Why We Process Your Data (Legal Bases)

• Performance of a contract — your account, sign-in, cloud sync of your dashboards and dataset, share links you create, and payment processing.
• Your consent — sending data samples to our AI provider (asked before the first AI call), and product analytics cookies and session replay (the analytics banner). You can withdraw either at any time; withdrawal does not affect processing that already happened.
• Our legitimate interests — keeping the service secure and available (request logs, rate limiting, abuse prevention) and understanding aggregate usage through cookieless analytics. You may object to this processing; see section 11.
• Legal obligations — keeping payment records for accounting and tax purposes.

9. International Transfers

Vizmatiq is operated from Sweden. Some of our providers process data in the United States: Clerk (authentication), Vercel (hosting, storage, request logs), Stripe (payments) and Anthropic (AI features). Each of them is certified under the EU-US Data Privacy Framework or bound by the European Commission’s Standard Contractual Clauses, which are the legal mechanisms that allow personal data to leave the EU/EEA and the UK. PostHog processes analytics data in the EU (Frankfurt). Your dataset itself stays in your browser unless you use a feature listed in section 2.

10. How Long We Keep Data

• Account (name, email, plan) — until you delete your account.
• Cloud copies of your dashboards, dataset and chats — until you delete them or your account, or after 12 months without signing in.
• Shared dashboard snapshots — until the link expires (24 hours on the Free plan; 7, 30 or 90 days, or never, on Pro) or you revoke it.
• AI requests — not stored by us; our AI provider retains inputs and outputs for a short period for abuse monitoring under its own terms.
• Request logs — 30 days.
• Usage counters (Redis) — 48 hours.
• Analytics and session recordings — up to 12 months, then deleted or aggregated.
• Payment records — 7 years, as required by Swedish accounting law.

11. Your Rights

Wherever you are, you can access, correct, export or delete the personal data we hold about you, and withdraw any consent you have given. Most of this you can do yourself: the Settings page deletes your account and cloud data, the Workspace page revokes share links, and the dashboard and table export buttons give you your data back in CSV, XLSX, JSON, PDF or PowerPoint form.

EU/EEA and UK residents additionally have the right to restrict or object to processing based on our legitimate interests, and to lodge a complaint with a supervisory authority. Our lead authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY); UK residents may contact the Information Commissioner’s Office (ICO). You may also complain to the authority in your own country.

California residents: we do not sell or share personal information for cross-context behavioural advertising, and we do not use it for profiling with legal effects. The rights above cover what the CCPA would grant.

To exercise a right we cannot serve through the app, emailvizmatiq.support@gmail.com. We answer within 30 days and never charge for a request.

12. Business Users

If you upload data about other people, such as your customers or employees, you are the controller of that data and Vizmatiq acts as your processor for the features that transmit it (section 2). We process it only on your instructions as given through the product, keep it confidential, apply the safeguards described in this policy, engage only the sub-processors listed in section 7, assist you with data-subject requests that concern it, and delete it when you delete it or your account. These terms are set out in full in our Data Processing Agreement; if you need a signed copy, email us.

13. Who We Are and How to Reach Us

Vizmatiq is operated by its founder as a sole proprietorship established in Sweden and is the controller of the personal data described here. Contact us atvizmatiq.support@gmail.com. The operator’s full legal name and postal address are provided on request to anyone who needs them for a data-protection or legal purpose.