Privacy Policy
How VizChat collects, uses, and shares your information.
Effective date: August 18, 2026
VizChat is operated by ZenFlow Technology LLC, a Rhode Island limited liability company with its registered address at 45 Alfred Stone Rd, Pawtucket, RI 02860, United States ("VizChat", "we", "us", "our"). We are the controller of the personal information described below.
This policy explains what we collect, how we use it, and — most importantly — who else receives it. VizChat is an AI product: producing a canvas, reading a document, or speaking a slide all require sending your content to third-party providers. Section Who we share it with describes that in specific terms rather than generalities.
Information we collect
Information you provide
- Account details — your name, email address, profile image, and a username derived at sign-up. If you write a bio, it appears on your public profile page along with your username.
- Content you create or upload — documents, canvases, widgets, and any files you add to a workspace.
- Your own model API keys (BYOK) — if you connect your own provider account, we store that key encrypted, not in plain text.
- Support messages — anything you send us by email or through the in-app feedback form.
Information created by your use of VizChat
- Usage records — credit consumption, model calls, and similar metering data needed for billing and quota enforcement.
- Session and device data — session tokens, and passkey credentials if you register one.
- Diagnostic data — error reports containing request metadata when something fails.
Information from third parties
- Sign-in providers — when you sign in with Google or GitHub, we receive the profile information and access tokens those services return.
- Payment processor — Stripe tells us your subscription status and customer identifier. We never receive or store your full card number.
How we use it
To operate the service and generate the output you ask for; to authenticate you; to meter usage and bill you; to send transactional email (receipts, security notices); to diagnose failures; and, only if you accept analytics cookies, to understand aggregate product usage.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
Who we share it with
Three disclosures matter more than the rest, because they are inherent to how the product works:
- Your conversations and the content of documents you reference are sent to third-party AI model providers to generate responses.
- The full text of documents you upload is sent to third-party OCR providers when a document needs to be parsed.
- In Present mode, your microphone audio is streamed in real time to a third-party voice provider.
Beyond those, we share information with providers in the following categories: AI models and inference, document OCR, speech synthesis, real-time voice, web search, payments, transactional email, authentication, hosting and storage, error monitoring, and product analytics.
We also disclose information where required by law, to enforce our terms, or in connection with a merger or acquisition (in which case this policy continues to apply to the transferred information).
Service providers
The table below lists the providers that may receive your information, by category. This list may be updated as the service evolves, and not all providers are active at the same time — we maintain it as a superset of what the product may use.
| Category | Providers | What they may receive | Region |
|---|---|---|---|
| AI models and inference | Google Gemini, DeepSeek, Alibaba Cloud, Moonshot, OpenAI, Anthropic | Conversation content and the content of documents you reference | United States, China |
| Document OCR | Zhipu, Baidu, DeepSeek | Full text and images of documents you upload | China |
| Speech synthesis | Alibaba Cloud, Google Gemini | Text to be spoken aloud | China, United States |
| Real-time voice (Present mode) | Alibaba Cloud | Microphone audio, streamed live | China |
| Web search | Serper | Your search queries | United States |
| Payments | Stripe | Name, email, and payment details you enter | United States |
| Transactional email | Resend | Your email address | United States |
| Authentication | Google OAuth, GitHub | OAuth profile and token data | United States |
| Hosting and storage | Google Cloud, Cloudflare | All stored user data and files | United States |
| Error monitoring | Sentry | Request metadata captured when an error occurs | United States |
| Product analytics | Google Analytics | Aggregate usage events — only if you accept analytics cookies | United States |
International transfers
We are based in the United States and our infrastructure runs in the United States. As the table above shows, some providers process your content in mainland China. By using VizChat you understand that your content may be transferred to and processed in the United States, mainland China, and other countries where our providers operate, which may have data protection rules different from those in your own country.
How long we keep it
We keep your account information and content for as long as your account is active. Usage and billing records are retained as long as needed for accounting and tax purposes. Diagnostic data is retained on a rolling short-term basis. See Your rights for what happens when you close your account.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of your personal information, and to appeal a decision we make about such a request. We do not discriminate against you for exercising these rights.
To exercise any of them, email contact@vizchat.ai. We respond within 45 days, which is the maximum period allowed under the California Consumer Privacy Act; we extend it only where the law permits and will tell you if we do.
Two points where we would rather be precise than reassuring:
- Deleting your account is not a full erasure of every row. When you close your account, we cancel your subscriptions, revoke third-party sign-in grants, delete your workspaces, documents, and stored files, and anonymize your account record. The account row itself is retained in an anonymized form and your username is permanently retired so that content attribution elsewhere in the product does not break. Your username will not be reusable by anyone else.
- There is no self-service data export today. Email contact@vizchat.ai and we will provide a copy of your information within the 45-day window above.
Cookies and similar technologies
We use a small number of cookies. Strictly necessary cookies keep you signed in and remember your cookie choice; they cannot be turned off without breaking the service. Analytics cookies (Google Analytics) are loaded only after you press Accept on the cookie banner — if you decline, or before you choose, no analytics script is loaded at all.
You can change your mind at any time by clearing the cookie-consent cookie in your browser, which brings the banner back.
Children
VizChat is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, email contact@vizchat.ai and we will delete it.
Changes to this policy
If we make a material change, we will update the effective date at the top and, where the change is significant, notify account holders by email or in-app notice. The service provider list above may change without individual notice — it reflects current operations rather than a commitment.
Contact us
ZenFlow Technology LLC 45 Alfred Stone Rd Pawtucket, RI 02860 United States
Email: contact@vizchat.ai