Privacy Policy — Viziqo One

Viziqo (“we”, “our”, or “us”) operates Viziqo One (“the Service”), a unified customer engagement platform available at viziqo.com. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it.

By creating an account or using the Service, you agree to this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account and billing information

Name, email address, phone number, company name, and payment details (processed by Razorpay or Stripe — we do not store card numbers).

Usage data

Log data (IP address, browser type, pages visited), feature usage, campaign performance metrics, and session activity collected via cookies and analytics.

Contact data you upload

As a data controller, you upload your contacts into Viziqo One. We process this data on your behalf as a data processor. Your contacts' data is covered under your own privacy obligations.

Third-party integration data

When you connect social media accounts (Facebook, Instagram, LinkedIn, Twitter/X), WhatsApp Business, or SMS providers, we receive OAuth tokens and related configuration data to operate the integration on your behalf.

Communications

If you contact us via email or the contact form, we retain those communications to respond and improve support.

2. How We Use Your Information

Provide, operate, and improve the Service
Process billing and manage subscriptions
Authenticate and secure your account
Send transactional emails (receipts, password resets, onboarding)
Send product updates and marketing communications (you can opt out at any time)
Monitor and enforce our Acceptable Use Policy
Comply with legal obligations

3. Data Sharing

We do not sell your personal data. We share data only with:

Infrastructure providers — AWS (hosting, storage), Redis Labs (caching)
Payment processors — Razorpay (India), Stripe (international)
Email/SMS delivery — AWS SES, Twilio, or the provider you configure
Analytics — Google Analytics (anonymised, aggregated)
Legal requirements — when required by law or to protect our rights

All sub-processors are bound by data processing agreements.

4. Contact Data — Your Responsibilities

You are the data controller for the contacts you upload to Viziqo One. You are responsible for ensuring you have a valid legal basis (consent, legitimate interest, etc.) for processing your contacts' data and for complying with applicable laws (GDPR, India PDPB, CAN-SPAM, TRAI regulations, etc.). We provide tools — unsubscribe links, consent fields, DNC management — to help you comply.

5. Data Retention

We retain your account data for as long as your account is active, plus 90 days after deletion to allow for recovery requests. Campaign analytics data is retained for 24 months. Contact data you delete is purged within 30 days. Billing records are retained for 7 years as required by law.

6. Security

We use industry-standard security measures: TLS encryption in transit, AES-256 encryption at rest for sensitive fields, bcrypt-hashed passwords, JWT-based authentication with short expiry, and role-based access control. We conduct regular security reviews. However, no system is completely secure — please use a strong, unique password and enable 2FA when available.

7. Cookies

We use cookies for:

Essential cookies — authentication sessions, CSRF protection
Analytics cookies — Google Analytics (anonymous usage statistics)
Preference cookies — theme (dark/light mode)

You can disable non-essential cookies in your browser settings at any time.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion (“right to be forgotten”)
Restrict or object to processing
Data portability (receive your data in a machine-readable format)
Withdraw consent at any time

To exercise these rights, email us at hello@viziqo.com. We will respond within 30 days.

9. International Transfers

Our infrastructure is hosted on AWS in the Asia-Pacific (Mumbai) region. If you are located outside India, your data may be transferred to and processed in India. We apply appropriate safeguards (standard contractual clauses where required) to protect cross-border data transfers.

10. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email and by posting the updated policy here with a new effective date. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy questions, requests, or complaints, contact: hello@viziqo.com
Viziqo, India.