Your information, in context. This policy covers our own websites and business relationships, and explains our role when customers use Visualizely to manage applications, workflows and end-user data.
1. Scope and accountability
This Privacy Policy explains how Visualizely Inc., operating as Visualizely in Ontario, Canada (“we,” “us” or “our”), handles personal information in connection with our websites, the Visualizely platform, demo and waitlist requests, and our account, support and business relationships.
Visualizely enables individuals, teams and organizations to build applications, websites and business workflows with visual tools and AI. Depending on their plan, customers may work with databases, APIs, CRM, search, marketing tools and connected services. The information involved depends on the features actually used; a feature description does not mean we collect every category from every person.
Our designated privacy contact can be reached at contact@visualizely.com, with “Privacy” in the subject. We handle personal information under applicable law, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies.
2. Customer workspaces and end-user data
When a customer uses Visualizely to operate an application, website, database or business workflow, that customer generally decides what personal information to collect and why. We process the information on its behalf under the service agreement and authorized instructions, including storing, displaying, searching, routing or exporting it to deliver the selected service.
The customer must provide its own notices and obtain necessary permissions for the information it collects from clients, staff, website visitors and other users, and for any tracking or communications it enables. This policy does not replace the privacy notice for a customer-operated application, website or business process.
Administrators and authorized users may access workspace information according to their permissions and customer arrangements. Access sponsored by an employer, client or partner does not automatically make all your information visible to that organization or to every other user.
If a customer organization controls your information, contact it first to ask about its decisions or request changes. You may also contact us; we will assist as appropriate under our agreement and law, including routing requests to the responsible customer. We do not use that distinction to avoid obligations that apply directly to us.
3. Information we collect
Information you provide directly
- Demo requests: first and last name, work email, company, job title, employee range, annual revenue range and your optional description of what you want to build.
- Waitlist requests: email address and the eligibility category for businesses under US$3 million in annual revenue. The current waitlist form does not submit the other demo details you may have typed.
- Accounts and commercial relationships: account and contact details, organization and role, permissions, subscription information, billing or transaction records, and communications needed to manage the relationship.
- Support and other correspondence: messages, attachments and diagnostic details you choose to provide. Please avoid passwords and unnecessary sensitive information.
Information involved in using the platform
Depending on the features enabled, Customer Content can include website and app content, business contact records, enquiries, search preferences, workflow and database records, uploaded files, prompts, generated output, and information exchanged with customer-selected integrations. If a customer enables a real-estate integration, this may also include property enquiries and listing-related information. Account activity and technical events can be used to operate and secure the service.
Technical information and other sources
Our hosting and security providers may receive IP addresses, browser/device information, request times, requested URLs, referring pages and error or security events. Form processing uses a request identifier and hashed request/IP values for duplicate prevention and abuse controls. We may also receive information from an authorized workspace administrator, connected service or customer referral, within the permissions for that interaction.
4. How and why we use information
We use information for the purposes relevant to your interaction:
- Reply to an enquiry, assess demo eligibility and arrange a relevant product conversation.
- Send the availability updates you request when joining the waitlist.
- Create and administer accounts, provide contracted functionality, process orders and support customers.
- Carry out customer instructions for their websites, CRM, applications and authorized integrations.
- Investigate errors, secure the service, prevent spam and duplicate submissions, and enforce our agreements.
- Measure website usage and improve our content and navigation through the analytics described below.
- Meet legal, accounting and recordkeeping duties, resolve disputes and respond to valid legal requests.
We seek meaningful consent where required, with the form of consent reflecting the sensitivity and context. A demo request lets us respond to that request; it is not consent to unrelated promotional campaigns. We will give appropriate notice and obtain any required consent before using personal information for a materially different purpose.
Providing optional information is your choice. You may decline a requested field, although we may then be unable to provide the associated service. Withdrawal of consent is subject to legal or contractual restrictions; we will explain any effect on the service.
6. Demo and waitlist processing
Our website sends submitted forms through Amazon Web Services (AWS) infrastructure in the United States. Amazon Simple Email Service (SES) delivers the submitted information to our business mailbox at contact@visualizely.com so we can respond. The submitted email address is used as the reply address.
The intake database holds short-lived request receipts, hashed request/IP values and rate-limit counters, not a second copy of the form’s full content. Full submissions remain in the delivered email and any correspondence needed to manage your enquiry. Operational logs may also contain delivery and technical events.
Choosing the waitlist sends your email and eligibility category, together with technical submission information. It requests availability updates from Visualizely. You can withdraw that request by emailing us or using the unsubscribe instructions in an update. We honour applicable unsubscribe requirements, including CASL’s deadline of no later than 10 business days. Essential service or security notices may still be sent when appropriate.
7. AI features and your information
When an AI feature is used, relevant prompts, selected content or search inputs may be processed by the model or infrastructure provider supporting that feature. Only submit information you are authorized to provide. Avoid unnecessary personal information and do not submit sensitive regulated records without an agreed processing arrangement.
AI processing depends on the feature, provider and customer configuration. Before personal or confidential information is used with an AI feature, its applicable processing terms must identify the permitted purposes, retention and any model-training use. This policy does not grant consent to use personal information for general-purpose model training. Contact us to confirm the applicable processing arrangement before submitting sensitive information.
AI output can be inaccurate or reveal information you did not intend to publish. Review it before sharing it or using it in a decision affecting a person. Customers determine the use of automation in their own applications and must provide any notices, choices and review mechanisms required by law.
9. Processing outside Canada
Visualizely operates in Ontario, but information is not necessarily stored only in Canada. Our current website form infrastructure processes information in the United States, and our hosting, email, authentication and other providers may process information in other countries depending on the service.
Information processed abroad may be accessible to courts, law enforcement or government authorities under that country’s laws. We remain accountable for personal information under our control and use appropriate contractual and organizational measures for providers processing it on our behalf. No contract can override a foreign legal requirement.
If your organization requires a particular hosting region, restricted subprocessors or a data-processing addendum, confirm those requirements with us in writing before submitting the affected information. This policy is not a promise of Canadian-only residency.
10. Retention and safeguards
We retain information for as long as reasonably needed for the stated purpose, the customer relationship and applicable legal obligations. Relevant factors include whether an enquiry is active, whether a waitlist update is still requested, the term of a customer agreement, accounting requirements, security investigations and dispute-resolution needs. We then delete or anonymize it, subject to permitted retention.
The current form-processing system sets short expiry periods for duplicate-request and abuse-control records; request receipts are set to expire after two days. Automatic database deletion can occur later than the expiry time. The intake function’s operational logs are configured for 14-day retention. These periods do not apply to the delivered email, correspondence, provider records or all platform data.
Customer Content retention and export arrangements follow the relevant agreement and lawful instructions. Deletion from backups may follow backup rotation rather than occur immediately. Information retained for legal, security or backup purposes remains restricted to those purposes.
We use safeguards appropriate to the sensitivity of the information, including access restrictions and technical and organizational controls. No transmission or storage method is absolutely secure. We investigate suspected incidents and make required notifications to affected individuals, customers or regulators under applicable law. Report a concern to our privacy contact.
11. Access, choices and complaints
Contact contact@visualizely.com to request access to personal information under our control, ask how it has been used or disclosed, correct an inaccuracy, withdraw consent, request deletion where applicable, or raise a privacy concern. Identify the relevant service or organization; do not email identity documents unless we ask through an appropriate process.
We may take reasonable steps to verify your identity and authority. We will explain any lawful exception that limits our response, unless prohibited. Under PIPEDA, we normally respond to access requests within 30 calendar days; we will give notice if a permitted extension is necessary. Other applicable legal deadlines will be honoured. Withdrawal or deletion may be limited by legal duties, valid retention needs or the need to provide a requested service.
You can unsubscribe from optional marketing or waitlist updates without cancelling an account. You may also contact our privacy contact to challenge our handling of your information. If a concern remains unresolved, you can complain to the Office of the Privacy Commissioner of Canada or another regulator with jurisdiction.
12. Visitors from other jurisdictions
Mandatory privacy rights in your location still apply. Where an applicable law, including the California Consumer Privacy Act, covers our processing, eligible individuals may have rights to know or access information, correct or delete it, receive a portable copy, opt out of sale or sharing or certain other processing, limit specified uses of sensitive information, and exercise those rights without unlawful discrimination. The precise rights and exceptions depend on the law and our role.
Use the privacy email above to exercise an applicable right, ask about an authorized-agent request or appeal a decision where an appeal right exists. We will provide instructions and any required verification. These provisions do not claim that every service is available in every jurisdiction or replace additional notices and contractual safeguards that may be required before a regional launch.
13. Children and policy updates
Visualizely’s business services and marketing pages are directed to adults, not children. We do not knowingly solicit personal information from children under 18 through these pages. If you believe a child has provided information, contact us so we can assess and address it. Customers must not use the platform for child-directed collection without an expressly agreed and legally appropriate arrangement.
We may update this policy as our services or practices change. We will revise the date shown at the top and provide additional notice of material changes where required. We will obtain fresh consent where required for a new purpose; merely posting an update does not remove that requirement.
14. Privacy contact
Address privacy questions and requests to the person responsible for privacy at Visualizely. We can also provide this notice in an accessible format on request.