Privacy Policy
1. Controller
The VisiMention service is operated under the trading name VisiMention, from Brazil. Written notice may be sent to support@visimention.com.
This policy explains how we handle personal data under Brazil's General Data Protection Law (LGPD, Law 13.709/2018). Requests about your data go to support@visimention.com.
2. What we collect
- Account data — name, email address, hashed password, interface language, and the organizations you belong to.
- Workspace content — the brands, domains, competitors, markets, prompts, and notes you enter, and the reports generated from them.
- Billing data — plan, subscription status, and a Stripe customer identifier. Card numbers go directly to Stripe; we never receive them.
- Usage and technical data — log records such as IP address, browser type, timestamps, and actions taken, kept for security and debugging.
3. Why we use it, and on what basis
- To provide the service you have signed up for — performance of a contract (LGPD Art. 7, V).
- To bill you and prevent fraud — performance of a contract and compliance with legal obligations.
- To send service email such as verification, password resets, report notifications, and failure alerts — performance of a contract.
- To keep the service secure and working, including logs and abuse prevention — our legitimate interests (Art. 7, IX).
- To send product or marketing email, if you opt in — consent, which you can withdraw at any time.
4. Who we share it with
We use the following processors, each only for the purpose shown:
- Stripe — Payment processing and subscription billing.
- DigitalOcean — Application and database hosting.
- Cloudflare — DNS, CDN, and this website.
- Resend — Transactional email delivery.
- Anthropic, OpenAI, Google, and Perplexity — Running your prompts to measure brand visibility.
We do not sell personal data or share it for advertising. We may disclose data where the law requires it or to establish or defend a legal claim.
5. International transfers
Some of these processors, including the AI providers, operate outside Brazil, mainly in the United States and the European Union. When your content is transferred abroad for processing, we rely on the transfer mechanisms permitted by LGPD Art. 33, including contractual clauses with each provider and, where applicable, your consent or the necessity of the transfer to perform our contract with you.
6. Prompt content and AI providers
Running a report sends your prompt text to the AI providers listed above. Do not put personal data, credentials, or confidential third-party information into prompts unless you have a lawful basis to do so. We contract with these providers on terms that do not permit using your content to train their models, but they operate independently and their own terms apply to their processing.
7. Retention
We keep account and workspace data while your account is active. If you delete your account, we delete or anonymise the associated personal data within 30 days, except where we must keep records longer to meet legal, tax, or accounting obligations, or to defend a legal claim. Technical logs are kept for a short period and then discarded.
8. Security
We use encryption in transit, hashed passwords, access controls scoped to your organization, and restricted API credentials. No system is perfectly secure, but if a breach is likely to create relevant risk to you we will notify you and the ANPD as the LGPD requires.
9. Cookies
We set only the cookies needed to keep you signed in and to protect forms against cross-site request forgery. We do not use advertising or cross-site tracking cookies.
10. Your rights
Under LGPD Art. 18 you may ask us to:
- confirm that we process your data, and get access to it;
- correct data that is incomplete, inaccurate, or out of date;
- anonymise, block, or delete unnecessary or excessive data;
- port your data to another provider;
- delete data processed on the basis of your consent;
- learn who we have shared your data with;
- withdraw consent, or object to processing based on legitimate interests.
Write to support@visimention.com and we will respond within the period the law allows. You may also complain to the Brazilian data protection authority (ANPD).
11. Children
The service is for business use and is not directed at children. We do not knowingly collect data from anyone under 18.
12. Changes
We may update this policy. Material changes will be announced by email at least 30 days before they take effect, and the date at the top will change.