Account identity — name, email, and the mobile number you give at sign-up — handled by our authentication provider. What you make and upload: briefs, generated decks, reference documents, brand assets, stored so the product can work for you. Product usage events (which features are used — never the content of your work) through our analytics service. Payment records come from our payment processor, Razorpay; card and UPI details never touch our servers.
What we do with it
Deliver the product: generate your decks, keep your work available across devices, bill your plan, and email only what you asked for (every notification is controlled in Settings). We do not sell personal data, and we do not use your documents or decks to train AI models.
Who processes it
Vetted providers in these categories: authentication, payments (Razorpay), transactional email, product analytics, cloud hosting and storage, and AI model providers that process briefs transiently to generate your decks — with zero-data-retention routing enforced, so prompts are not retained or used for training. Each provider receives only what its job requires. A current subprocessor list is available on request at support@visualworks.ai.
Your rights (GDPR · India DPDP Act)
Wherever you are, you can ask for: access to your data, correction, deletion, a portable export, and withdrawal of consent. Write to support@visualworks.ai — we act within 30 days. Where GDPR applies, our legal bases are contract (running your account), legitimate interest (product analytics, abuse prevention), and consent (marketing emails, which are opt-in only).
Retention
Your decks stay while your account exists. Files you attach to build a deck or to brief the assistant are deleted 30 days after upload — the decks you built from them are not affected — and you can delete a file sooner from Documents. Revoked share links go immediately; account deletion removes personal data within 30 days, keeping only what payment law obliges us to retain (transaction records, held by Razorpay and our billing ledger).
Cookies
One session cookie keeps you signed in. Product analytics inside the app uses first-party storage only. Our public marketing pages use Google Analytics to understand how visitors find us — it never runs inside the app, and never sees your documents or decks. No advertising trackers on your work, ever.
Children
visualworks is not directed at children under 13, and we do not knowingly hold their data. If you believe a child has an account, contact us and we will remove it.
Where
Your account data, decks and files are stored in the United States (Ohio), with point-in-time backups kept for seven days. Requests are served from our cloud provider's global edge network, so the app answers from a location near you while your data stays in the United States. Payments are processed in India by Razorpay. Cross-border transfers rely on our processors' standard contractual safeguards.
Changes
If this policy changes materially, we say so by email and here, with the date above. Questions, requests, complaints: support@visualworks.ai.