Privacy Policy

This Privacy Policy explains how Obidowski Company Sp. z o.o. ("Visualizee.ai", "we", "us", or "our") collects, uses, shares, and protects your personal information when you visit https://visualizee.ai or use our AI visualization services (the "Services"). It also describes the rights you have over your information.

For the purposes of the EU/UK General Data Protection Regulation (GDPR), the data controller is Obidowski Company Sp. z o.o., a company registered in Poland at Pasieczna 8/12/139, 91-362 Łódź (VAT number PL9471986146). If you have any questions about this policy or how we handle your data, contact us at support@visualizee.ai.

Information we collect

We collect the following categories of information:

Information you provide to us

• Account information — when you register, we collect your name, email address, and (where applicable) company name and password.
• Uploaded content — the images, sketches, reference files, and prompts you upload or enter so that we can generate renders for you, together with the renders we produce.
• Payment information — when you purchase a plan, our payment processor (Stripe) collects your payment-method and billing details. We do not store full card numbers on our own servers.
• Communications — if you contact us for support or by email, we receive your name, email address, the contents of your message and any attachments, and any other information you choose to provide.

Information we collect automatically

When you use the Services, our servers and analytics tools automatically record certain information, including your internet protocol (IP) address, browser type, Internet Service Provider (ISP), device and operating-system information, referring/exit pages, date and time stamps, and how you interact with our pages and features. This information is used to operate and secure the site, to analyze trends, and to improve the Services.

How we use your information and our legal bases

We use the information we collect for the purposes below. Where the GDPR applies, the relevant legal basis is noted in brackets:

• To provide, operate, and maintain the Services, including generating and storing your renders [performance of a contract].
• To process payments and manage subscriptions [performance of a contract; legal obligation for tax and accounting].
• To communicate with you about your account, provide customer support, and send service-related notices [performance of a contract; legitimate interests].
• To improve, personalize, and expand the Services and to understand how they are used [legitimate interests; consent where analytics cookies are used].
• To send you marketing or promotional communications, which you can opt out of at any time [consent; legitimate interests].
• To detect, prevent, and address fraud, abuse, and security issues, and to comply with our legal obligations [legitimate interests; legal obligation].

Your content and AI processing

The images and prompts you upload are processed solely to generate the renders you request and to operate the Services. To produce renders, your content is transmitted to and processed by trusted AI model and GPU-infrastructure providers acting as our processors.

We do not use your uploaded images or generated renders to train or fine-tune our own or any third party's AI models. Your content is yours. You can delete your uploads and renders from your account, and we remove them from our active systems in line with the retention periods below.

How we share your information

We do not sell your personal information. We share it only with the following categories of recipients, and only as needed:

• Payment processing — Stripe, to process payments and manage subscriptions.
• Hosting & database — Supabase, which provides our database, authentication, and account storage.
• Analytics — PostHog, which helps us understand product usage and improve the Services.
• AI infrastructure — AI model and GPU-compute providers that process your uploads to generate renders.
• Legal and safety — authorities or third parties where required by law, to enforce our terms, or to protect the rights, safety, and property of our users or others.

Each of these providers is bound by a data processing agreement and may only use your information to provide services to us.

International data transfers

We host and process data in Germany, Poland, and the United States, and our service providers may process data elsewhere. When we transfer personal data outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. You can contact us for more information about these safeguards.

Data retention

We keep your personal information only for as long as necessary for the purposes described in this policy:

• Account data — for as long as your account is active.
• Uploaded content and renders — while your account is active or until you delete them; deleted from our active systems within 30 days of account closure and purged from backups within 90 days.
• Payment and invoicing records — for as long as required by applicable tax and accounting laws (generally up to five years).
• Analytics data — in pseudonymized or aggregated form for up to 24 months.

Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the site, and — with your consent — measure and improve how the Services are used. Non-essential cookies, including analytics cookies, are only set after you provide consent through our cookie banner, and you can change or withdraw your choices at any time. You can also manage cookies through your browser settings; doing so may affect how some features work.

Security

We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, and authentication safeguards. No method of transmission or storage is completely secure, so while we work to protect your information we cannot guarantee its absolute security. If we become aware of a personal data breach that affects you, we will notify you and the relevant authorities as required by law.

GDPR data protection rights

If you are in the European Economic Area or the UK, you are entitled to the following rights regarding your personal data:

• The right to access – You have the right to request copies of your personal data. The first copy is provided free of charge.
• The right to rectification – You have the right to request that we correct any information you believe is inaccurate, and to complete information you believe is incomplete.
• The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability – You have the right to request that we transfer your data to another organization, or directly to you, under certain conditions.
• The right to withdraw consent – Where we rely on consent, you can withdraw it at any time without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us at support@visualizee.ai. We will respond within one month. You also have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, https://uodo.gov.pl).

CCPA/CPRA privacy rights (California residents)

If you are a California resident, you have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the right to request deletion of your personal information, the right to correct inaccurate personal information, and the right to opt out of the "sale" or "sharing" of your personal information and to limit the use of sensitive personal information. You also have the right not to be discriminated against for exercising these rights.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. To exercise any of these rights, contact us at support@visualizee.ai. We will respond within 45 days (extendable by a further 45 days where permitted).

Children's information

The Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

Third-party links

The Services may contain links to third-party websites or services that we do not operate. This Privacy Policy does not apply to those third parties, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any third-party site you visit.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email or through the Services. We encourage you to review this page periodically.

Contact us

If you have any questions or requests about this Privacy Policy or your personal data, contact us at support@visualizee.ai or by mail to Obidowski Company Sp. z o.o., Szafranowa 17, 05-500 Zamienie, Poland. This policy should be read together with our Terms of Service.