Privacy Policy
Plainly: your studio’s data is yours. We use it to run Viznerve for you — nothing else. We never sell it, and we never train AI models on it.
01Who we are
Viznerve is a product of VizNerve LLC, a limited liability company organised in Wyoming, USA (“Viznerve”, “we”, “us”). This policy covers viznerve.com and the Viznerve application. It explains what we collect, why, and the rights you have over your data.
02What we collect
We collect only what’s needed to run the operator for your studio:
- Account data — your name, work email, studio name, and authentication records. Viznerve is passwordless, so we never store a password.
- Studio data you connect — when you link a mailbox, calendar, billing account, or a cloud drive (Google Drive or Dropbox), Viznerve reads the inquiries, threads, events, invoices, and project files needed to triage, draft, and organise work on your behalf. For drives we use a per-file scope: Viznerve only ever sees the specific files it creates for a project or that you choose to attach — never your whole drive.
- Usage & diagnostics — actions taken, performance, and error reports, used to keep the product reliable.
03How we use it
Your data is used to operate Viznerve for you — and for nothing else:
- To classify inquiries, draft replies and quotes, and surface studio health.
- To meter and bill credits accurately.
- To keep the service secure, debug issues, and support you.
We do not sell your studio’s content, rent it, or share it for advertising. We do not use your studio’s content to train, fine-tune, or improve any AI model. (Our marketing website, viznerve.com, does use cookies for analytics and ad retargeting — see Cookies & advertising below.)
04Google / Gmail data
When you connect any Google service — Gmail, Google Calendar, or Google Drive — Viznerve accesses your Google user data through Composio’s verified Google OAuth, after you grant consent on Google’s own screen. Composio is the OAuth custodian for all three: it holds and refreshes the Google authorisation on your behalf and brokers each request. Viznerve never operates its own Google OAuth client and never holds your Google Gmail, Calendar, or Drive tokens directly.
- What we access. Gmail messages — read, to detect client activity and build your inbox and timeline; and send, to deliver the replies you approve, as your studio. We sync your Primary inbox (recent threads by default), not your entire mailbox.
- How we use it. Email content is used only to detect client activity, classify inquiries, prepare summaries, and draft suggested replies — only to provide these features. It is never used for advertising, and never to train AI models.
- How we store it. Raw email bodies are encrypted at rest with a per-studio key and retained for a limited window (default 30 days), after which they are automatically deleted. The structured CRM record derived from your email — clients, inquiries, summaries, activity — is kept until you delete your workspace. You can disconnect Gmail and delete imported email data at any time from Settings → Integrations.
- Who processes it. Email content is processed by Anthropic (our AI processor) solely to provide the features above. It is never sold, never used for advertising, and never used to train any AI model.
Limited Use. Viznerve’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We use Google user data only to provide and improve the user-facing features you connect Gmail for — detecting client activity, classifying inquiries, preparing summaries, and drafting replies you approve.
- We do not transfer Google user data to others except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition with appropriate notice.
- We do not use Google user data for advertising.
- We do not allow humans to read your Google user data unless we have your affirmative consent for specific messages, it is necessary for security or to comply with law, or the data has been aggregated and anonymised for internal operations.
- We do not use Google user data to train, fine-tune, or improve any generalised AI/ML model.
05AI processing
Viznerve performs its work using Anthropic as its sole AI processor. When you ask Viznerve to triage or draft, only the content required for that single action is sent to Anthropic to produce the result, then returned to you.
06Subprocessors
We rely on a short list of vetted providers to deliver the service. Each handles only the data needed for its function.
Application sub-processors — these help run Viznerve and may process your studio’s data:
- Anthropic — AI processing (the operator’s reasoning). USA.
- Auth0 (by Okta) — managed sign-in; processes your sign-in email to authenticate you. USA.
- Composio — the verified Google connection layer and OAuth custodian for Gmail, Google Calendar, and Google Drive; it holds the Google authorisation and brokers each request when you connect any of them. USA.
- Google — Gmail, Calendar, and Drive, when you connect them (your own account; accessed via Composio, above).
- Dropbox — project file storage, when you connect it (your own account).
- Stripe and PayPal — payment processing and billing.
- Resend — transactional email delivery (sign-in links, briefs).
- Cloudflare — DNS, CDN, and DDoS protection.
- Hostinger — application and database hosting (all live data at rest). India (Mumbai).
- Hostinger (backups) — full-server weekly snapshots. Malaysia.
- Backblaze B2 — encrypted off-site database backups (AES-256, encrypted client-side before upload — encrypted dumps only). USA (US-East).
- Amazon Web Services (KMS) — encryption-key management for data at rest (key material only, never your content). eu-north-1 (Sweden).
Marketing website only — these run on viznerve.com and never touch your studio’s application data:
- PostHog — website analytics.
- Meta (Facebook) — advertising measurement and retargeting.
- LinkedIn Insight — advertising measurement and retargeting.
Our error tracking (GlitchTip) runs on our own infrastructure — it is not a third-party sub-processor.
Connected drives. Files you add through Viznerve are uploaded into your own Google Drive or Dropbox account — into a folder per project — so your assets stay in your control. Viznerve stores only the share link, never a copy of the file content. Google Drive is brokered by Composio (the OAuth custodian); Viznerve does not hold your Google Drive token directly. You can disconnect a drive at any time from Settings → Integrations.
We’ll keep this list current and give notice of material changes.
07Security & isolation
Every studio is isolated at the database layer — your data is filtered to your tenant on every query, enforced at the storage level, not just in application code. Connection tokens are encrypted with a per-studio key and never logged. All traffic is served over HTTPS.
Formal SOC 2 Type II certification is on our roadmap; in the meantime we operate to the principles it describes. Found something? Email [email protected].
08Your rights
You can access, correct, and export your data from the app at any time. To delete your data, submit a deletion request from the app or by emailing us; we complete verified deletions within 30 days. We honour US state privacy rights, including under the CCPA — the right to a copy of your data and the right to erasure. Leaving Viznerve? Export everything, and we’ll delete the rest on request.
09Retention
We keep your data only as long as needed to run Viznerve for you:
| Data | Retention |
|---|---|
| Raw email bodies | 30 days rolling, then automatically purged |
| Derived CRM record (clients, inquiries, summaries) | Until you delete your workspace |
| Account + all studio data | Deleted within 30 days of account closure |
| Billing records | Retained only as long as legally required |
| Full-server backups (Hostinger, Malaysia) | Weekly snapshots, ~2 retained (~14 days), then auto-rotated |
| Encrypted database backups (Backblaze B2, USA) | ~30 days, then auto-deleted (bucket lifecycle); removed sooner on a verified deletion request |
10Cookies & advertising
This applies to our marketing website (viznerve.com) — not the Viznerve application, where the rules above govern. To understand who visits the site and to show relevant ads, we use:
- PostHog — first-party analytics for page views, clicks, and journeys, so we can improve the site. We do not use session recording / replay on the marketing website.
- Meta Pixel — sets cookies that let us measure ad performance and show Viznerve ads to people who’ve visited the site (retargeting) on Facebook and Instagram.
- LinkedIn Insight — measures LinkedIn ad performance and supports LinkedIn retargeting.
Visitors from the EU, UK, EEA, or Switzerland are not tracked. These analytics and advertising tools do not load at all for visitors in those regions — there is no cookie banner because nothing non-essential is set. Everywhere else, they load by default and you can opt out at any time from the “Cookie settings” link in the footer.
We honour the Global Privacy Control (GPC) signal everywhere: if your browser sends it, we treat it as a binding opt-out and load nothing. California residents can also use the “Do Not Sell or Share My Personal Information” link in the footer. These cookies are not used inside the application and never touch your studio’s content. You can additionally opt out via your browser’s cookie controls or Meta’s ad preferences.
11Changes to this policy
If we make a material change, we’ll update the effective date above and notify you in the app or by email before it takes effect.
12Contact
Questions about your privacy reach a real person: [email protected]. Viznerve, a product of VizNerve LLC.
Where we operate. Viznerve is offered to studios in the United States. We don’t target the service at EU/EEA or UK users, and we do not track EU/EEA/UK visitors on our marketing site, so we don’t appoint an Article 27 (GDPR) representative at this time. If we expand availability to those regions, we’ll update this policy and appoint one before we do.