Trust center.
How Visibian protects the data customers trust it with: security, privacy, retention, the providers we use and the legal documents, in one place.
The Milky Way over Earth's airglow, a long exposure from the International Space Station above the Indian Ocean, 8 April 2021. Photo: NASA.
The basics
Your data is not training data
No model, ours or anyone else's, is trained on what we hold for you, and none of it is ever sold.
Your work is isolated
Nothing you enter is shown to another customer. Industry figures come only from totals no one can trace back.
Leaving is a button
Delete a brand or your whole account yourself, in Settings. Deletion runs at once; every copy is gone within 90 days.
Security
Section 12 of our privacy policy lists the technical and organisational measures we take, matched to the risk. They include:
- encryption of data in transit and of stored secrets;
- hashed passwords and tokens;
- access only for the people who need it;
- a separate database for each product.
The portal, the Brand Intelligence Center and the learning center each run on their own database. Card payments are entered on Stripe's own pages and never reach our servers.
If a breach is likely to put you at high risk, we tell you in plain language without undue delay and notify the supervisory authority as the law requires.
Reporting a security issue
If you find a weakness in any Visibian site or product, write to [email protected] with the subject "Security". Please give us a chance to fix it before you share it.
Privacy
Visibian processes personal data under the EU's General Data Protection Regulation; the company's details are on visibian.com's legal notice. Our supervisory authority is the Commission for Personal Data Protection in Sofia. You can access, correct, delete or export your data, and most of that you can do in the product. You can also send any request to [email protected], and we answer within one month.
The providers we use
We share personal data only with service providers that act on our instructions, each under a data processing agreement:
- server infrastructure;
- Cloudflare, for delivery and security;
- transactional email;
- support chat, only when you open it;
- website analytics, with consent where the law requires it;
- the AI and search providers the product queries, which receive only the questions being tracked.
Stripe handles payments under its own terms.
When a provider processes data outside the European Economic Area, the transfer rests on one of three grounds: the EU-US Data Privacy Framework, another adequacy decision, or the European Commission's Standard Contractual Clauses. For the full list of providers and the ground for each, write to [email protected].
Retention
Every kind of data has a fixed retention period, enforced by scheduled jobs. The periods are listed on our transparency page and in section 11 of the privacy policy.
Legal documents
| Terms of service | The agreement for the Brand Intelligence Center and the Academy, with the withdrawal notice for consumers |
|---|---|
| Privacy policy | What we collect, why, for how long, and your rights |
| Data processing agreement | For business customers whose data we process on their behalf |
| Legal notice | The company behind Visibian and how to reach it |
| Our principles | Six rules on AI and data, each built into the product |