Data Processing Agreement (DPA)
Last updated: September 4, 2026
This Data Processing Agreement ("DPA") is concluded between Vizible AI, operated by Mr. Louis Foweraker, Sole Proprietor (Entrepreneur Individuel), SIREN 100 199 645, registered at 37 Rue Jean-Jacques Rousseau, 92150 Suresnes, France ("Vizible AI", "we"), and any customer using our services ("you", "the Data Controller").
This DPA complements our Conditions of Service and applies whenever we process personal data on your behalf.
1. Purpose and Scope
This DPA governs the processing of personal data carried out by Vizible AI as a data processor on your behalf in the context of using our SaaS, including:
tracking, analyzing, and optimizing AI search analytics,
dashboards and reporting functionalities,
sending transactional emails, notifications, and other service-related communications.
2. Nature of Data Processed
Vizible AI may process the following categories of personal data:
Professional identifiers: Email addresses, names, company name
Technical data: IP address, device, browser, OS
Usage data: Page views, prompts usage, analytics, clicks
Other data voluntarily submitted by your users
❌ No sensitive data (health, financial, political) is collected.
Content and business context you submit to AI features (e.g. prompts, company information, generated articles)
3. Authorized Sub-processors
You authorize Vizible AI to use the following sub-processors, each contractually bound by confidentiality and security obligations:
Stripe (Ireland / USA) — payment processing
Supabase Inc. (USA; data hosted in the EU and Singapore) — database, authentication, edge functions
Cloudflare, Inc. (USA) — hosting, CDN and security
Resend (USA) — transactional, product-update and marketing email delivery
PostHog (USA / EU) — product analytics
Sentry — Functional Software, Inc. (USA) — error monitoring and performance
Sanity (Norway / USA) — content management for the blog and glossary
Firecrawl (USA) — website content retrieval for GEO audits
Vizible AI ensures that each sub-processor respects confidentiality and security commitments under this DPA, and maintains an up-to-date list available on request.
4. Instructions and Responsibilities
Vizible AI processes personal data only according to your documented instructions, unless required by law.
You are responsible for the lawfulness, accuracy, and purpose of data collected through our Service.
5. Transfers Outside the EU
Data processed by Vizible AI may be stored or processed outside the EEA — for example the United States (Cloudflare, Stripe, Resend, Sentry) and Singapore (Supabase).
Standard Contractual Clauses (SCCs) or equivalent safeguards are applied to ensure an adequate level of protection.
6. Security Measures
Vizible AI implements technical and organizational measures appropriate to the risk, including:
encrypted connections (HTTPS),
access controls,
logging and monitoring,
secure authentication.
7. Rights of Data Subjects
Vizible AI will assist you, within reasonable limits, in responding to requests from your users regarding:
Access to their data
Rectification or deletion
Data portability
Opposition to processing
Requests must be provided in writing by you, the Data Controller.
8. Data Retention and Deletion
Personal data is retained only as long as necessary to provide the Service.
After account closure, data is deleted within a reasonable timeframe, except where law requires retention.
9. Incident Notification
In the event of a personal data breach, Vizible AI will inform you without undue delay and provide necessary details to comply with your legal obligations.
10. Applicable Law
For customers in the EU / EEA: GDPR applies.
For customers outside the EU / EEA: French micro-entrepreneur law governs the contract, supplemented by sub-processor agreements.
11. Modifications to this DPA
Vizible AI may update this DPA due to legal or operational changes.
Material changes will be notified to customers.
12. Contact
For any questions concerning this DPA, contact:
By continuing to use Vizible AI, you acknowledge that you have read, understood, and accepted the terms of this Data Processing Agreement.