Privacy notice
How VizToolsAI handles your account, files and requests.
Updated 19 September 2026Author and contact
Illia Fediushyn · support@viztoolsai.com
The service author is Illia Fediushyn. The seller’s registration details, business address and governing jurisdiction have not yet been published. Ask support@viztoolsai.com for the applicable operator details before a purchase. These documents do not replace mandatory consumer rights.
Microsoft Clarity · optional analytics
With your analytics consent, Microsoft Clarity helps us improve public marketing pages using heatmaps and masked session recordings. It can process page addresses, clicks, scrolling, device and browser information, and pseudonymous cookie identifiers. We mask page content and do not send account identifiers or form values. Clarity is excluded from the editor, account, sign-in, payments, MCP and private files. Advertising storage consent is denied. Before your choice or after refusal, the Clarity script is not loaded.
Optional Clarity cookies include _clck (a site-specific pseudonymous visitor identifier) and _clsk (links page views into a session). Microsoft also documents third-party cookies; their actual use depends on consent and project settings. See Microsoft’s current cookie information for details.
Withdraw consent in Cookie settings at any time. Withdrawal stops further collection in this browser and clears accessible Clarity cookies; it does not erase previously collected data. Contact support for a data request. Our consent choice is stored on this device for up to 180 days.
Who to contact
This notice applies to the VizToolsAI service at viztoolsai.com. Contact the service operator through the support form and select “Privacy / data request” for access, correction, export or deletion requests. Use the email associated with your account; identity verification may be required before account data is disclosed or changed.
Information processed
We process your email, display name, account identifiers, subscription status, coin transactions, generation history, prompts and files you choose to upload. Support requests include your contact email, selected topic and message. Technical information may include browser/device information, request logs and an approximate country supplied by the host. The account profile does not store your raw IP address.
Why it is used
Account and project data is used to provide the service you request and fulfill subscriptions. Billing records support payment reconciliation and legal obligations. Necessary technical processing helps secure the service, prevent abuse and troubleshoot failures. Country and language preferences help localize the interface; your manual choice takes priority. Optional processing requiring consent will request it separately.
Service providers
Netlify hosts the application and support forms; Supabase provides authentication, database and configured storage. AI tasks send the necessary prompts and source material to the selected connected provider, such as Freepik, Google or the audio/video provider shown in the tool. Google is involved when you choose Google sign-in. Lava.top processes new payments. VizToolsAI does not collect full payment card numbers. Cloudflare Turnstile may process anti-abuse signals when enabled.
Storage and retention
Cloud files count toward your plan’s storage allowance and remain until removed or otherwise handled under the service’s retention settings. Local drafts and imported media may also remain in your browser until you remove them. Removing one copy does not necessarily remove the other. Account, transaction and support records are retained as needed to provide the service, resolve disputes and meet applicable legal requirements. Sign-in rate-limit entries older than 24 hours are removed during subsequent checks. Providers may retain technical logs under their own policies.
Cookies and browser data
Necessary cookies maintain the signed-in session and secure authentication flows. Browser storage keeps preferences and project drafts. Microsoft Clarity is optional on public marketing pages after analytics consent. It does not run in the editor or private account areas. The Cookies page explains the storage used and how to reset preferences. Blocking necessary cookies prevents sign-in from working.
Your choices and rights
Depending on applicable law, you may request access, correction, export or deletion of personal data, or object to or restrict certain processing. Use the support form for these requests. The interface does not currently provide automatic full account deletion. You can export project work and sign out; clearing browser data may permanently remove local-only work. You may also contact your local data protection authority.
Security and international processing
Account permissions, paid access and coin charges are verified on the server. Session cookies use Secure, HttpOnly and SameSite=Lax. Providers may process data in countries other than yours under their applicable data protection arrangements. No online system can guarantee absolute security. Private project and library requests require authorization for the owner; knowing a project or asset ID does not grant access. Keep temporary provider URLs confidential and do not submit secrets in prompts.
Updates
Changes to this notice are published with a new update date. Material changes are communicated where required.
Processing purposes and legal grounds
Where data-protection law applies, account access, requested AI operations and paid services rely on performing the requested contract; transaction records may also be needed to comply with legal obligations. Security checks and fraud prevention serve the legitimate interest of protecting users and the service. Optional analytics or marketing require a separate choice where required. An account email is needed for authentication and support; without the necessary task input, the selected operation cannot run.
Provider categories and email
Recipients include hosting and CDN services (Netlify); database, authentication and storage services (Supabase); the AI providers involved in your selected operation; payment services (Lava.top); transactional email services (Resend when configured, and the authentication email service); anti-abuse services; and support-form processing. This release does not enable GA4, Yandex Metrica, advertising pixels or marketing email subscriptions. Provider access depends on the selected feature and its configuration.
Prompts, uploads and model providers
A submitted operation may transmit prompts, images, video, audio and derived inputs to the connected model provider. Do not submit client-confidential plans, biometric or other sensitive personal data without appropriate authority. This notice does not promise that every provider stores data in one region, immediately deletes inputs or excludes model training: the terms and account settings of the selected provider must be checked for the intended use. The Uploads policy explains the processing stages.
Retention, deletion and backups
Different records have different purposes: files and projects support your work; billing records support reconciliation and legal duties; support messages support resolving requests; security records support abuse investigations. A verified retention schedule for support, billing, backups and AI-provider copies has not yet been published. Deleting a library file does not prove deletion of every project reference, device copy, backup or provider copy. Request account-level erasure from support, and ask which records must be retained and why.
International transfers and requests
Processors may operate outside your country. The actual processing regions and any transfer safeguards depend on the deployed services and contracts; a verified provider-and-region register is not yet published. Contact support for the safeguards applicable to your request. Where applicable, you may request access, correction, portability, erasure, restriction or object to processing, and complain to the competent supervisory authority. Consent can be withdrawn in Cookie settings without changing earlier lawful processing.
Automated checks and service access
The service uses automated balance checks, task limits and abuse controls to decide whether an operation may start. These checks protect paid resources; they do not establish your residence or professional qualifications. If a security or billing decision appears incorrect, contact support with the task or payment reference for review. Do not send a password, authentication code, full card number or identity document through the public form.