Privacy Policy

1. Data We Collect

When you create an account, we collect your name and email address through our authentication provider, Clerk. We use cookies solely to maintain your authentication session.

2. Your Dataset Data

All dataset data you upload stays in your browser by default. It is stored locally in IndexedDB, encrypted with AES-256-GCM via the Web Crypto API. We transmit your data to our servers only in these opt-in cases, each listed in the following sections: (a) using AI features (which send column metadata, sample rows, and computed statistics — never your full dataset); (b) sharing a dashboard (which uploads a snapshot so recipients can view it); or (c) signing in to your account, which auto-syncs your dashboards and your most recently loaded dataset to our cloud so you can pick up work on a different device. Signing out clears the current browser session; the cloud copy is retained until you delete the account.

3. AI Features

When you use AI-powered features (AI Query, AI Summary, dashboard natural-language commands, Auto Mode, and correlation explanations), we send a sample of your actual data rows (up to 10) plus computed statistics about the dataset — including column metadata, aggregates, and a handful of extreme-value rows — to our server and on to our AI provider, Anthropic, for processing. These are real values from your data, not anonymised placeholders, though your full dataset is never uploaded. AI Data Stories send only an aggregated profile (counts, ratios, correlations), not raw rows. You are prompted to opt in before the first AI call, and the app works fully without AI features.

4. Payment Processing

Payments are handled entirely by Stripe. We never receive, store, or process your credit card details. Stripe's privacy policy governs how your payment information is handled.

5. Shared Dashboards

When you explicitly choose to share a dashboard, the dashboard data is stored on Vercel Blob so others can view it via the shared link. This only happens at your request and you can delete shared dashboards at any time.

6. No Tracking or Analytics

We do not use any tracking pixels, analytics services, or third-party cookies. We do not share your data with any third parties for advertising or profiling purposes.

7. Your Rights (GDPR)

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate personal data
• Request deletion of your personal data
• Request portability of your data

You can exercise these rights at any time by emailing vizmatiq.support@gmail.com or by deleting your account from the Settings page, which removes all your data.