Privacy Policy

Last updated: September 4, 2026

This Privacy Policy explains how Vizible AI ("we", "us", "our") collects, uses, and protects personal data when you access or use our SaaS platform (the "Service").

This Service is intended exclusively for business users (B2B).

1. Data Controller

The data controller is:

Name: Mr. Louis Foweraker

Status: Sole Proprietor (Entrepreneur Individuel)

SIREN: 100 199 645

Registered office: 37 Rue Jean-Jacques Rousseau, 92150 Suresnes, FRANCE

Email: [email protected]

Country: France

2. Scope

This Privacy Policy applies to:

visitors of the website,

users of the Vizible AI platform,

representatives of business clients.

It does not apply to third-party websites or services linked from the Service.

3. Personal Data Collected

We collect only strictly necessary professional data, including:

3.1 Data provided by users

Name

Professional email address

Company name

Account credentials

Billing information (processed by third-party providers)

Google Analytics data (traffic metrics, session sources, and geographic data) — only when you voluntarily connect your Google Analytics account via OAuth. This data is fetched directly from Google's servers on demand and is never stored on our servers.

3.2 Automatically collected data

IP address

Device and browser information

Usage logs

Access timestamps

3.3 Payment data

Payment information is never stored by us. Payments are processed securely by third-party payment providers (e.g. Stripe), subject to their own privacy policies.

When you use our AI features, the content and business context you submit are processed by third-party AI providers to generate results (see the AI Processing section).

4. Purpose of Data Processing

We process personal data for the following purposes:

Providing and operating the Service

Creating and managing user accounts

Processing subscriptions and payments

Improving product performance and reliability

Ensuring security and fraud prevention

Complying with legal and regulatory obligations

Communicating service-related information

Sending product updates and marketing communications, where permitted by law or with your consent

5. Legal Basis for Processing (GDPR)

Personal data is processed based on:

Performance of a contract (Article 6(1)(b) GDPR)

Legal obligations (Article 6(1)(c) GDPR)

Legitimate interest in operating and securing the Service (Article 6(1)(f) GDPR)

6. Data Retention

We retain personal data only for as long as necessary:

Account data: for the duration of the contractual relationship

Billing records: as required by applicable tax laws

Technical logs: for security and debugging purposes

Data may be archived or anonymized when no longer required.

7. Data Sharing

Personal data may be shared only with:

Hosting and infrastructure providers (Cloudflare, Supabase)

Payment processors (Stripe)

Email delivery providers (Resend), for transactional, product-update and marketing emails

Analytics and monitoring providers (Google Analytics via OAuth when connected — read-only aggregated metrics; PostHog; Sentry)

Third-party providers used to generate AI content and analyses from what you submit

Content management provider (Sanity) for the blog and glossary

Legal or regulatory authorities when required by law

All service providers are contractually bound to protect personal data and act as data processors under GDPR.

We never sell personal data.

7a. Google Analytics Integration

When you choose to connect your Google Analytics account, Vizible AI:

Accesses your GA4 property data in read-only mode using OAuth 2.0

Fetches aggregated metrics (sessions, traffic sources, geographic data) on demand — data is displayed directly and never stored on our servers

Creates a custom channel group named 'AI Traffic' in your GA4 property to help you identify AI-referred sessions

Never accesses raw user-level data, individual user identifiers, or personal data of your website visitors

Never shares, sells, or transfers your Google Analytics data to third parties

You can disconnect your Google Analytics account at any time from your account settings, which immediately revokes our access

Our use of Google Analytics data complies with Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy

8. International Data Transfers

Some service providers may be located outside the European Union.

Where applicable, data transfers are safeguarded through:

adequacy decisions,

standard contractual clauses,

or equivalent legal mechanisms.

9. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

encrypted connections (HTTPS),

access controls,

limited administrative access,

regular system monitoring.

However, no system is completely secure, and absolute security cannot be guaranteed.

10. Cookies and Tracking

The Service may use cookies or similar technologies for:

authentication and security (strictly necessary),

analytics and product usage (Google Analytics 4 and PostHog),

error and performance monitoring (Sentry),

performance optimization.

Non-essential analytics are loaded only after you accept them in our cookie banner. You can change your choice at any time.

11. User Rights (GDPR)

Users have the right to:

access their personal data,

request correction or deletion,

restrict or object to processing,

request data portability,

withdraw consent where applicable.

Requests can be sent to: [email protected]

12. Complaints

Users may lodge a complaint with their local data protection authority, including the CNIL (France), if they believe their data is processed unlawfully.

13. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information.

Your Rights Under CCPA

California residents have the right to:

Right to Know: Request disclosure of personal information collected, used, disclosed, or sold about you in the preceding 12 months.

Right to Delete: Request deletion of personal information we have collected from you, subject to certain exceptions.

Right to Opt-Out: Opt-out of the sale of your personal information. Note: We do not sell personal information.

Right to Non-Discrimination: Not receive discriminatory treatment for exercising your CCPA rights.

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

Identifiers (name, email address, IP address)

Commercial information (subscription history, billing records)

Internet or network activity (usage logs, browsing history on our Service)

Professional information (company name, industry)

Do Not Sell My Personal Information

We do not sell, rent, or trade your personal information to third parties for monetary consideration. As defined under CCPA, we do not engage in the "sale" of personal information.

Exercising Your Rights

To exercise your CCPA rights, you may submit a verifiable consumer request by:

Emailing us at: [email protected]

Including "CCPA Request" in the subject line

We will verify your identity before processing your request and respond within 45 days as required by law.

Authorized Agents

You may designate an authorized agent to make a request on your behalf. We may require written proof of the agent's authorization and verify your identity directly.

14. Changes to This Policy

We may update this Privacy Policy at any time.

The latest version will always be available on the website and applies from the date of publication.

15. Contact

For any questions regarding this Privacy Policy or personal data processing, please contact:

[email protected]

16. Acceptance

By using Vizible AI, you acknowledge having read, understood and accepted this privacy policy.

By using Vizible AI, you acknowledge having read, understood and accepted this privacy policy.

If you do not consent to it, you must stop using the service.

We may modify this policy at any time, remember to consult it regularly.

7b. AI Processing

Some features (e.g. our AI agent, prompt and article generation, GEO audits) process the content and business context you provide through third-party services to generate AI results.

We do not send the personal data of your website's visitors to these services.

Some of these services may process data outside the EEA. Where required, appropriate safeguards apply.

11a. Marketing and Product Communications

We use Resend to send transactional emails (account, billing, security), product updates, and marketing communications.

Marketing emails are sent on the basis of your consent or our legitimate interest in informing existing business customers about relevant features, in line with applicable law.

You can unsubscribe from product-update and marketing emails at any time using the link in every email or from your account settings. Transactional and security messages required to operate your account are not affected.