Privacy Policy

Visibella ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI visibility monitoring platform.

By using Visibella, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2.1 Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• Password (encrypted)
• Organization details (company name, domain, industry)

2.2 Usage Data

We automatically collect information about your use of the Service:

• Audit history and analysis results
• Dashboard interactions and feature usage
• Search queries and "Ask Visibella" conversations
• Organization and team management activities

2.3 Payment Information

Payment information is processed securely through Stripe. We do not store your credit card details on our servers. Stripe collects and processes payment information according to their privacy policy.

2.4 Technical Data

We collect technical information including:

• IP address
• Browser type and version
• Device information
• Operating system
• Referring URLs
• Access times and dates

2.5 Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze Service usage. You can control cookies through your browser settings.

We use your information to:

• Provide the Service: Process AI visibility audits, generate reports, and deliver dashboard analytics
• Process LLM Requests: Send your organization data to LLM APIs for analysis
• Manage Your Account: Authenticate users, manage subscriptions, and process payments
• Customer Support: Respond to inquiries, troubleshoot issues, and provide assistance
• Improve the Service: Analyze usage patterns, develop new features, and enhance user experience
• Security: Detect fraud, prevent abuse, and protect against security threats
• Communications: Send service updates, billing notifications, and marketing messages (with your consent)
• Legal Compliance: Comply with legal obligations and enforce our Terms

4.1 LLM Integrations

To provide our AI visibility monitoring service, we integrate with the following LLM providers:

• OpenAI (ChatGPT): For AI-powered analysis and insights
• Google Gemini: For competitive intelligence gathering
• Perplexity: For search and discovery analysis
• DeepSeek: For deep learning-based evaluations
• Grok: For AI visibility monitoring and analysis

4.2 Data Sent to LLM Providers

When you run an audit, we send the following to LLM APIs:

• Your organization name and domain
• Industry and product information
• Target market and location details
• Generated questions for analysis

4.3 Third-Party Privacy Policies

Each LLM provider processes data according to their own privacy policies. We recommend reviewing:

• OpenAI Privacy Policy
• Google Privacy Policy
• Perplexity Privacy Policy
• DeepSeek Privacy Policy
• Grok Privacy Policy

4.4 Data Processing Agreements

We have data processing agreements with our service providers to ensure they handle your data responsibly and in compliance with applicable privacy laws.

5.1 Database Hosting

Your data is stored securely in Supabase (PostgreSQL database) with industry-standard encryption and access controls.

5.2 Security Measures

We implement multiple security measures including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure authentication (Supabase Auth)
• Regular security audits and updates
• Access controls and role-based permissions
• Monitoring for suspicious activity

5.3 Data Retention

We retain your data according to the following schedule:

• Account Data: Until you delete your account
• Audit Results: According to your subscription plan (72 hours to unlimited)
• Payment Records: 7 years for tax and legal compliance
• Logs: 90 days for security and troubleshooting

5.4 Data Deletion

You can request deletion of your account and data at any time through your account settings or by contacting support@visibella.com. We will delete your data within 30 days, except where retention is required by law.

Depending on your location, you may have the following rights regarding your personal data:

6.1 Right to Access

You can request a copy of the personal data we hold about you.

6.2 Right to Rectification

You can update or correct inaccurate information through your account settings.

6.3 Right to Erasure

You can request deletion of your account and personal data (subject to legal retention requirements).

6.4 Right to Data Portability

You can request an export of your data in a machine-readable format.

6.5 Right to Object

You can object to processing of your data for marketing purposes.

6.6 Right to Withdraw Consent

You can withdraw consent for data processing at any time (where processing is based on consent).

To exercise these rights, contact us at privacy@visibella.com. We will respond within 30 days.

7.1 Essential Cookies

Required for the Service to function properly (authentication, session management, security).

7.2 Analytics Cookies

Help us understand how users interact with the Service to improve user experience.

7.3 Cookie Management

You can control cookies through your browser settings. Note that disabling essential cookies may affect Service functionality.

We do not sell your personal data. We may share your information only in the following circumstances:

• Service Providers: Stripe (payments), Supabase (database), LLM APIs (analysis)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Protection: To protect our rights, safety, or property, or that of our users
• With Consent: When you explicitly authorize sharing

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by regulatory authorities
• Data processing agreements with service providers
• Compliance with GDPR, CCPA, and other privacy regulations

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a prominent notice on the Service. Your continued use after changes take effect constitutes acceptance of the updated policy.

The "Last Updated" date at the top indicates when this policy was last revised. We encourage you to review this policy periodically.

If you have questions about this Privacy Policy or our data practices, please contact us: