Privacy Notice

Last updated: June 29, 2026

This Privacy Notice explains how Ovisah Limited ("Ovisah", "we", "us") collects, uses, shares, and retains personal data when you use VizRender (the "Service"). Ovisah Limited is the data controller for personal data processed through the Service.

1. Categories of Personal Data We Collect

• Account data: name, email address, password hash, profile preferences.
• Authentication data: sign-in tokens, OAuth identifiers (Google).
• Content you provide: uploaded sketches, floor plans, photos, prompts, project metadata, estimator entries, support messages and attachments.
• Usage and telemetry: AI credit usage, feature interactions, log/error data.
• Device data: IP address, browser, device identifiers, approximate location.
• Billing data: subscription status, plan, renewal dates. Payment card details are collected and stored by our payment processor (see Section 4), not by us.
• Student verification (optional): student ID image, institution name, when applying for the educational plan.

2. Purposes and Legal Basis

• Provide the Service — account creation, rendering, estimator, collaboration, exports. Legal basis: performance of a contract.
• Billing and subscription management — process payments, manage renewals, send receipts. Legal basis: performance of a contract; legal obligation (tax/invoicing).
• Security and fraud prevention — abuse detection, attachment scanning, account freezing. Legal basis: legitimate interests; legal obligation.
• Support — respond to your messages and chat. Legal basis: performance of a contract; legitimate interests.
• Product improvement — diagnose errors, improve features. Legal basis: legitimate interests.
• Service notifications — invites, billing, account updates. Legal basis: performance of a contract.

3. AI Processing

Prompts and images you submit to AI features are sent to our AI providers solely to generate the requested output. We do not use your content to train third-party foundation models.

4. Data Sharing and Recipients

• Paddle — our Merchant of Record and payment processor. Paddle handles checkout, billing, tax, and refunds, and acts as an independent controller for payment data. See Paddle's Privacy Policy.
• Cloud hosting and database — to host the Service and store your content securely.
• AI providers — to generate renders, floor plans, and estimates from your inputs.
• Email delivery — to send transactional emails (receipts, invites, password resets).
• Professional advisers — legal, accounting, and auditors where necessary.
• Authorities — where required by law or to protect rights, safety, and security.

5. International Transfers

Your data may be processed outside your country of residence. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We retain personal data only as long as needed for the purposes above. Account and project data is kept while your account is active and deleted or anonymised within a reasonable period after account deletion, subject to legal, tax, and accounting obligations. Billing records are retained as required by applicable law (typically up to 7 years).

7. Security

We use appropriate technical and organisational measures including encryption in transit, access controls, row-level security on our database, and attachment scanning. No system is perfectly secure, but we work to protect your data.

8. Your Rights

Subject to your local law, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. UK/EEA users have the right to lodge a complaint with a supervisory authority. To exercise any right, contact us at /contact. We aim to respond within one month.

9. Cookies

We use essential cookies and similar storage to keep you signed in and to operate the Service. We do not use advertising cookies. Payment pages served by Paddle may set their own cookies.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

11. Changes

We may update this Notice. Material changes will be communicated through the Service or by email.

12. Contact

Ovisah Limited — questions about this Notice or your data can be sent via our contact page.

See also our Terms of Service and Refund Policy.