Privacy Policy

Effective Date: July 15, 2026

1. Introduction

Vizcom Technologies, Inc. (“Vizcom,” “we,” “us,” or “our”) provides a web-based application that uses artificial intelligence (“AI”) to help designers and artists turn ideas, sketches, and images into rendered visual content. This Privacy Policy describes how we process personal information that we collect through our digital or online properties and services that link to it, including our website, our application, our social media pages, and our marketing activities, live events, and other activities described below (collectively, the “Service”).

Customer content. This Privacy Policy does not apply to personal information that we process on behalf of our business customers as a processor or service provider (for example, the files, prompts, images, and other content that an enterprise customer’s authorized users submit through the Service). Our handling of that data is governed by the agreement between Vizcom and the relevant customer (including any data processing agreement), and the customer is the controller of that data. If you are an authorized user of an enterprise account, please direct privacy questions to your organization.

Scope of this Policy. This Policy applies to personal information we process as a controller for example, information about visitors to our website, individuals who create individual accounts, and people who contact us or interact with our marketing.

Region-specific notices

Notice to U.S. state residents. If you are a resident of California or another U.S. state with a comprehensive consumer privacy law, please see the “Your U.S. State Privacy Rights” section below for additional disclosures and rights.

Notice to users in Europe. If you are located in the United Kingdom (“UK”) or the European Economic Area (“EEA”) (together, “Europe”), please see the “Notice to Users in Europe” section below for additional information, including our legal bases for processing and your rights under the EU and UK General Data Protection Regulation (“GDPR”).

2. Personal Information We Collect

We collect personal information relating to you (“Personal Information”) from the sources described below.

2.1 Information you provide to us

Account information. When you create an account, we collect the information needed to set it up and administer it, such as your first and last name, email address, username and password, and, where applicable, biographical details, links to your social-media profiles, and preferences you add to your profile. We intentionally limit the Personal Information required to use the Service.

User submissions and content. We receive and store the content you submit to the Service, such as sketches, drawings, photos, images, files, prompts and text descriptions, audio, comments, messages, and other works you create, upload, generate, or transmit, together with associated metadata. Where that content depicts a human face, our processing of it may include the biometric information described in Section 4(a) below. (For enterprise accounts, this content is handled as customer content as described in Section 1.)

Payment information. If you purchase a paid plan, our third-party payment processor (currently Stripe) collects and processes your payment card information directly. We do not store full payment card numbers. We may retain limited billing records and transaction history.

Communications and other information. When you contact us, respond to surveys, participate in promotions, or otherwise communicate with us, we collect the information you provide, such as your name, email address, phone number, and the contents of your message. You are not obligated to provide Personal Information, but some features may be unavailable without it.

2.2 Information from third-party sources

We may combine the Personal Information we collect from you with information we obtain from other sources, such as:

• Public sources, such as public records and publicly available social-media profiles;
• Marketing and event partners, such as joint-marketing partners and event co-sponsors; and
• Third-party login services, such as a social-media or single sign-on (“SSO”) service you use to log in to the Service, which may share your username, profile picture, and other information based on your settings on that service.

2.3 Information we collect automatically

We, our service providers, and our partners may automatically collect information about you, your device, and your interactions with the Service over time, including:

• Device data, such as operating system type and version, device manufacturer and model, browser type and settings, screen resolution, hardware characteristics (RAM, disk, CPU usage), device type, IP address, unique identifiers, language settings, mobile carrier, network information, and general (city/region-level) location.
• Usage data, such as pages or screens viewed, time spent, referring pages, navigation paths, access times, features used, and whether you opened our emails or clicked links.
• Communications interaction data, such as whether you open or forward our emails, collected through pixel tags and similar technologies.

2.4 Cookies and similar technologies

We use cookies and similar technologies (such as pixel tags, SDKs, and local storage) to operate and secure the Service, remember your preferences, analyze usage, and — where applicable — support marketing. Cookies may be session-based or persistent, and first-party or third-party.

Categories we use. We group these technologies into: (i) strictly necessary; (ii) functional/preference; (iii) analytics/performance; and (iv) advertising/targeting. A current, itemized list of the cookies and similar technologies used on our website is available at our Trust Center, trust.vizcom.com.

Your choices and opt-out preference signals. Where required, we obtain your consent before setting non-essential cookies and give you an equally easy way to accept or reject them through our cookie banner or preference center. You can also manage cookies through your browser settings. We honor opt-out preference signals, including the Global Privacy Control (“GPC”), as a valid request to opt out of “sale” or “sharing” of Personal Information for the browser or device that sends the signal, as described in the “Your U.S. State Privacy Rights” section. Blocking some cookies may affect how the Service functions.

3. How We Use Personal Information

We use Personal Information for the purposes below, and as otherwise described at the time of collection. For users in Europe, the legal bases for each purpose are set out in the “Notice to Users in Europe” section.

Service delivery and operations

To provide, operate, maintain, secure, and improve the Service; to create and administer your account; to enable features and organize your content; to provide customer support and respond to your requests; and to send administrative and Service-related communications (such as updates, security alerts, and changes to our terms or policies).

Personalization

To understand your preferences and personalize your experience with the Service and our communications.

Marketing and advertising

To send you direct marketing communications and, where permitted, to deliver and measure online advertising. You can opt out of marketing as described in “Your Choices.”

Analytics and product improvement

To analyze usage and trends, understand how the Service is used, debug and improve the Service, and develop new features and products. Where we use your content to develop or improve AI features, the “AI and Machine Learning” section describes our practices and your choices.

Compliance, safety, and protection

To comply with applicable laws and legal process; to respond to lawful requests from public authorities; to enforce our terms; to establish, exercise, or defend legal claims; and to detect, investigate, and prevent fraud, abuse, security incidents, and other harmful or unlawful activity.

Aggregated and de-identified data

We may create aggregated, de-identified, or anonymized data from Personal Information and use and share it for any lawful purpose. Where we maintain de-identified data, we will maintain and use it in de-identified form and will not attempt to re-identify it except as permitted by law.

With your consent or as later described

For any other purpose disclosed to you at the time we collect the information or with your consent.

4. AI and Machine Learning

Vizcom is an AI-powered creative tool. This section explains how your content and information relate to our AI features. It is intended to be read together with our Terms of Service.

Your ownership of content. As between you and Vizcom, you retain the rights you hold in the sketches, images, prompts, and other content you upload to or create with the Service, subject to the licenses you grant us in our Terms of Service to host, process, and display that content so we can provide the Service.

Use of content to train or improve AI models. Whether we use your content to train or improve our AI models depends on your plan:

• Paid and enterprise plans: We do not use the content you create or upload under a paid or enterprise plan to train our AI models. That content is used only to provide and support the Service to you (and, for enterprise accounts, as set out in the applicable customer agreement).
• Starter plans and Education plans: We may use content generated on free plans to operate, evaluate, and improve the Service, including to improve our AI models and features. Where an Education plan is provisioned by a school or district for students under 13, we do not use that content to train our AI models unless the institution has separately opted in under our Schools Privacy Addendum, as described in Section 11. We do not claim ownership of your designs, concepts, or original ideas. 

De-identification. Where we use content to improve AI features, we seek to use it in an aggregated or de-identified form and apply technical and organizational measures designed to limit the presence of Personal Information in training data.

Training-data transparency. To the extent required by applicable law, including the California Generative AI Training Data Transparency Act, we publish a high-level summary of the datasets used to develop our generative AI features. That summary is available at trust.vizcom.com .

AI-generated content and transparency. Content created with the Service may be labeled or embedded with metadata indicating that it was generated or modified using AI, and we may provide tools to detect such content, where required by applicable law (such as the EU AI Act and applicable U.S. state laws).

Automated decision-making. We do not use Personal Information to make decisions that produce legal or similarly significant effects about you through solely automated means. The AI features of the Service generate creative outputs at your direction and do not make such decisions about you.

4(a). Biometric Information

Because the Service is designed to process photographs and other images — which may depict human faces — our AI models may derive facial geometry or other biometric identifiers from that content as part of generating your Design. We retain such biometric identifiers only for as long as needed to generate your Design and do not store them separately from the underlying image, / We may retain derived biometric identifiers for the periods described in Section 9. We do not use biometric identifiers to identify you across unrelated images or to build a persistent biometric profile of you. Where required by applicable law, we will publish a retention schedule for biometric identifiers and obtain any required consent before collection. If you upload an image depicting another identifiable person, you are responsible for ensuring you have their consent to do so, as described in our Terms of Service.

5. How We Share Personal Information

We do not sell your Personal Information for money, and we do not “sell” or “share” it for cross-context behavioral advertising as those terms are defined under California law. We disclose Personal Information in the following circumstances:

Service providers and processors. We share Personal Information with third parties that perform services for us, such as cloud hosting and infrastructure, information technology, customer support, email delivery, analytics, and marketing. These providers may process Personal Information only on our instructions and for the purposes we authorize, under written agreements (including data processing agreements where appropriate). A current list of subprocessors is available at our Trust Center.

Payment processors. Payment card information you provide to make a purchase is collected and processed by our payment processor (currently Stripe) under its own privacy policy.

Affiliates. We may share Personal Information with our corporate affiliates for purposes consistent with this Policy.

Legal, safety, and compliance. We may disclose Personal Information to comply with applicable law and legal process; to respond to lawful requests from law enforcement, regulators, or other authorities; to professional advisers (such as lawyers, auditors, and insurers); to enforce our terms; and to protect the rights, privacy, safety, or property of Vizcom, our users, or others.

Corporate transactions. We may disclose Personal Information in connection with an actual or prospective corporate transaction such as a financing, investment, merger, acquisition, reorganization, sale of assets, or bankruptcy including to counterparties and their advisers and to a successor or assignee.

Linked third-party services. If you log in to or link the Service with a third-party service, we may share Personal Information with that service, whose use is governed by its own privacy policy and your settings.

Other users and the public. Your profile and content may be visible to other users or the public if you choose to make them available (for example, through public posts, comments, or shared content). Information you make public can be collected, copied, cached, and used by others, and we are not responsible for such use.

Aggregated or de-identified information. We may share aggregated or de-identified information that does not identify you for any lawful purpose.

6. Your Choices

Access and update. You can review and update certain account information by logging in to your account. You may also exercise the rights described in the region-specific sections below.

Marketing communications. You can opt out of marketing emails using the unsubscribe link in the message or by contacting us. You may continue to receive non-marketing, Service-related messages.

Cookies and opt-out preference signals. You can manage cookies and similar technologies as described in Section 2.4, including through our preference center, your browser settings, and opt-out preference signals such as GPC.

Declining to provide information. Where information is necessary to provide a feature or the Service, declining to provide it may limit your ability to use that feature or the Service.

7. Other Sites and Services

The Service may contain links to, or integrations with, websites, applications, and services operated by third parties. We do not control and are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies.

8. Security

We maintain technical, organizational, and physical safeguards designed to protect Personal Information, including encryption of information in transit using TLS or similar technologies. No security measure is perfect, and we cannot guarantee the security of Personal Information. If a breach of your Personal Information occurs, we will notify you and the appropriate authorities as required by applicable law.

9. Data Retention

We retain Personal Information for as long as necessary to fulfill the purposes for which we collected it, unless a longer retention period is required or permitted by law. To determine the appropriate retention period, we consider the criteria below.

‍

We may retain information longer where necessary to comply with legal obligations, resolve disputes, or enforce our agreements. For more information about our retention periods, contact us at privacy@vizcom.com.

10. International Data Transfers

We are headquartered in the United States and may use service providers located in other countries. As a result, your Personal Information may be transferred to, stored in, and processed in the United States or other countries whose data-protection laws may differ from those in your jurisdiction. Where we transfer Personal Information internationally, we take steps designed to ensure it receives an adequate level of protection, including by using appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Agreement or Addendum. Users in Europe should read the “Notice to Users in Europe” section for more detail, including information about the EU-U.S. Data Privacy Framework.

11. Children

The Service is not directed to, or intended for individual use by, individuals under the age of eighteen (18), and we do not knowingly collect Personal Information directly from anyone under 18 who is not using the Service through a verified Education Account provisioned by their school or district. We do not knowingly collect Personal Information from children under 13 within the meaning of the U.S. Children’s Online Privacy Protection Act (“COPPA”), except where an Institution (as defined in our Terms of Service) has provisioned Education Accounts for its students under our terms and conditions, which sets out the consent, use, and deletion practices that apply to those accounts in place of this Section, and we do not knowingly use or disclose any minor’s Personal Information for targeted advertising or “sale.” If you believe a minor has provided us Personal Information, outside of a verified Institution arrangement please contact us at privacy@vizcom.com, and we will take appropriate steps to delete it in accordance with applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the effective date above and, where appropriate, by additional notice (such as posting on the Service or emailing you). Changes are effective when posted unless stated otherwise. Your continued use of the Service after the effective date indicates your acknowledgment of the updated Policy.

13. How to Contact Us

Email: privacy@vizcom.com

Mail: Vizcom Technologies, Inc., 488 Bryant St., San Francisco, CA 94107, USA

14. Your U.S. State Privacy Rights

This section provides additional disclosures for residents of U.S. states with comprehensive consumer privacy laws, including California (CCPA, as amended by the CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, Nebraska, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island. The rights available to you depend on your state of residence and applicable law.

14.1 Categories of Personal Information

In the past 12 months, we have collected the categories of Personal Information described in Section 2. Using the California statutory categories, these are summarized below, together with the categories of recipients.

‍

Sources. We collect these categories from the sources described in Section 2 (directly from you, automatically, and from third-party sources).

Business and commercial purposes. We use these categories for the purposes described in Section 3.

No sale or sharing. We do not sell Personal Information and do not share it for cross-context behavioral advertising. We have not sold or shared the Personal Information of consumers, including minors under 16, in the preceding 12 months. 

14.2 Sensitive Personal Information

We collect a limited amount of sensitive Personal Information -- primarily account log-in credentials and, where you upload images depicting human faces, biometric identifiers derived from those images as described in Section 4(a) — to provide and secure the Service. We do not use or disclose sensitive Personal Information for purposes other than those permitted under applicable law (such as the CCPA’s “right to limit” exemptions), and we do not sell it or use it for targeted advertising. We ask that you not provide us with sensitive information (such as government identifiers, financial account numbers, precise geolocation, health, or genetic data, or information about protected characteristics) except where specifically requested or where inherent to your use of the Service's image-processing features as described in Section 4(a).

14.3 Your rights

Depending on your state of residence, you may have the following rights, subject to exceptions and verification:

• Right to know / access: to confirm whether we process your Personal Information and to access the categories and specific pieces we hold, the sources, the purposes, and the categories of recipients.
• Right to delete: to request deletion of Personal Information we collected from you, subject to exceptions.
• Right to correct: to request correction of inaccurate Personal Information.
• Right to data portability: to obtain a copy of your Personal Information in a portable, readily usable format.
• Right to opt out of sale, sharing, and targeted advertising: to opt out of any “sale” or “sharing” of Personal Information and of targeted advertising and certain profiling. (As noted, we do not sell or share Personal Information.)
• Right to limit use of sensitive Personal Information: where applicable, to limit the use and disclosure of sensitive Personal Information to permitted purposes.
• Right to non-discrimination: we will not discriminate against you for exercising your privacy rights.

14.4 How to exercise your rights

You, or an authorized agent acting on your behalf, may submit a request by emailing privacy@vizcom.com. To protect your information, we will take steps to verify your identity before responding, and we may ask for information sufficient to verify that you are the person about whom we collected Personal Information (or an authorized agent). We will not use information provided for verification for any other purpose.

Authorized agents. An authorized agent may submit a request with your written permission, and we may require you to verify your identity directly or confirm that you authorized the agent.

Timing. We will acknowledge and respond to requests within the timeframes required by applicable law (generally 45 days, extendable where permitted; opt-out preference signals are honored within 15 business days under California law).

14.5 Right to appeal

If we decline to act on your request, you may appeal by replying to our response or contacting us at privacy@vizcom.com. We will respond to your appeal within the time required by applicable law (generally 60 days). If we deny your appeal, you may contact your state Attorney General to submit a complaint.

14.6 Opt-out preference signals

We recognize the Global Privacy Control (GPC) and other opt-out preference signals as a valid request to opt out of “sale” or “sharing” for the browser or device that transmits the signal, where required by law. Because we do not sell or share Personal Information, these signals do not change the categories we disclose, but we honor them for the applicable browser or device.

‍

15. Notice to Users in Europe

This section provides additional information for individuals in the UK and EEA and applies in addition to the rest of this Policy. References to “Personal Information” include “personal data” as defined in the EU GDPR and UK GDPR (together, the “GDPR”).

15.1 Controller

Vizcom Technologies, Inc. is the controller of Personal Information processed under this Policy, except where we act as a processor for our business customers (see Section 1). Our contact details, and those of our EU and UK representatives (where appointed under Article 27 GDPR), are in the “How to Contact Us” section. Vizcom has assessed whether it is required to designate a Data Protection Officer under Article 37 GDPR in light of the biometric processing described in Section 4(a), and has designated a DPO, whose contact details are in the “How to Contact Us” section / has concluded designation is not currently required and has documented that assessment.

15.2 Legal bases for processing

We rely on the following legal bases under Article 6 of the GDPR:

Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You may contact us for more information about that balancing. Where we rely on consent, you may withdraw it at any time without affecting prior processing.

15.3 Sensitive (special category) data

We do not seek to collect special category data (Article 9 GDPR) other than the biometric identifiers described in Section 4(a), which we process only with your explicit consent obtained at the point of upload, and we ask that you not otherwise provide special category data through the Service.

15.4 Automated decision-making

We do not carry out solely automated decision-making that produces legal or similarly significant effects within the meaning of Article 22 GDPR. The AI features generate creative outputs at your direction.

15.5 Your rights

Subject to applicable law, you have the rights to: be informed; access your Personal Information (Art. 15); rectification (Art. 16); erasure (Art. 17); restriction of processing (Art. 18); data portability (Art. 20); object to processing, including direct marketing (Art. 21); not be subject to solely automated decisions with legal or similarly significant effects (Art. 22); and withdraw consent at any time (Art. 7(3)). To exercise these rights, contact us at privacy@vizcom.com.

Right to complain. You may lodge a complaint with your local supervisory authority. In the EEA, a list of authorities is available at edpb.europa.eu. In the UK, you may contact the Information Commissioner’s Office (ICO) at ico.org.uk. We would, however, appreciate the chance to address your concerns first.

15.6 International transfers

We are based in the United States and may transfer Personal Information to the U.S. and other countries outside Europe. Where we do so, we rely on an appropriate transfer mechanism, which may include:

• Adequacy. Transfers to countries the European Commission or UK government has determined provide an adequate level of protection.
• Standard Contractual Clauses / IDTA. For transfers not covered by an adequacy mechanism, we use the European Commission’s Standard Contractual Clauses and, for the UK, the International Data Transfer Agreement or the UK Addendum, together with supplementary measures where appropriate.

You may review relevant safeguards at trust.vizcom.com 

15.7 Retention

We retain Personal Information as described in Section 9 and only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements and to establish or defend legal claims.

‍