Privacy policy

What we process

• Google sign-in: your Google account identifier, verified email address and profile information Google supplies, such as your name and profile image. Supabase handles authentication; VIZUL stores an account identifier and display name. Google and Supabase may retain the original sign-in metadata. We do not receive your Google password or request access to Gmail, contacts or Drive.
• Invitations: the email address and optional role you submit on an invite form, and invitation status, expiry and redemption records. If the operator invites you, they provide the email address for that invitation.
• Your creative settings: saved profiles, scene customizations, palettes and audio detection presets. Settings saved to your account are stored on our server. Other preferences, favorites and drafts stay in your browser until you save, export or clear them.
• Sessions and security: session identifiers, sign-in times, expiry, browser information and server-side authentication tokens. Hosting and authentication providers also process connection data such as IP addresses and request logs to deliver and secure the service.
• Support: messages and information you choose to send us.

Microphone and shared-tab audio analysis runs in your browser. VIZUL does not upload that captured audio or the rendered video to its servers. Remote controls exchange commands and output status. If you play an externally hosted demo track, your browser connects to that audio host, which receives normal connection information.

Why we use it

We use account details, saved settings and session data to provide the service you request and manage access to the beta (GDPR Article 6(1)(b)). We use invitation requests to respond to your request for access, including contacting you when an invitation is available.

We process security and diagnostic information to protect accounts, prevent abuse and investigate faults, based on our legitimate interests in operating a reliable service (Article 6(1)(f)). We may retain information needed to meet a legal obligation (Article 6(1)(c)).

Signing in with Google or requesting an invitation does not subscribe you to marketing. The current beta has no marketing subscription feature. If we introduce one, we will explain it separately and ask for the appropriate permission. We do not sell your personal data or use it for targeted advertising.

Cookies and browser storage

VIZUL uses necessary cookies to complete sign-in and keep your session active. The sign-in transaction expires after 10 minutes; the application session expires after at most seven days unless you sign out earlier. Browser storage remembers local creative settings and interface preferences. Clearing that storage removes those local preferences; it does not delete saved account data.

The current application does not include advertising cookies or a third-party analytics tracker. Google applies its own policies when you visit its sign-in pages.

Service providers and location

We use Render for application hosting, Supabase for authentication and database storage, and Google for Google sign-in. Authorized operator access is limited to operating, securing and supporting the beta. We may disclose information where required by law.

Our application and database use European hosting regions. Provider support, operational processing and subprocessors may involve other countries. Where personal data is transferred outside the EEA, applicable safeguards may include adequacy decisions or contractual safeguards. Contact us for details about the providers and transfer arrangements relevant to your data.

You can read the providers' information at Render, Supabase and Google.

How long we keep it

We keep account details and saved creative data while your account is active and needed to provide the service. You can request deletion by email. Invitation requests are kept while we manage beta access; you can ask us to remove yours at any time.

Session expiry ends access but does not mean every related database record, provider log or backup disappears immediately. Security records, redeemed invitation records and backups may remain for the period needed for security, recovery or legal obligations. We limit retained information to those purposes and can explain the applicable retention when you contact us.

Your choices and rights

Depending on the circumstances, you can ask to access, correct, delete or receive a portable copy of your personal data, restrict processing, or object to processing based on legitimate interests. Where processing depends on consent, you can withdraw it without affecting earlier lawful processing. We do not make decisions with legal or similarly significant effects about you solely through automated processing.

Email support@vizul.art from your account email if possible. We may need to verify your identity before fulfilling a request. You can also complain to your local data protection authority or the Estonian Data Protection Inspectorate.

You can stop audio capture in VIZUL and revoke microphone or screen-sharing permission in your browser. You can disconnect VIZUL in your Google account settings; contact us separately to delete your VIZUL account and saved data.

Changes to this policy

We will update this page as the service changes and revise the date above. We will provide additional notice for material changes where required.