Privacy Policy

VizRace (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at vizrace.com (the “Service”). Please read this policy carefully. If you do not agree with the terms of this policy, please do not access the Service.

Information you provide directly

• Account information — when you register with email, we collect your name, email address, and password (hashed — we never store plaintext passwords).
• Google OAuth data — if you sign in with Google, we receive your name, email address, and profile photo from Google. We do not receive or store your Google password.
• Profile information — your display name, selected use cases, and referral source provided during onboarding.
• Content — datasets you upload or paste, chart configurations, project titles, and thumbnails you create within the Service.
• Communications — messages you send us via email or support channels.

Information collected automatically

• Usage data — pages visited, features used, time spent, and interactions within the Service.
• Device information — browser type, operating system, IP address, and device identifiers.
• Cookies and similar technologies — see our Cookie Policy for details.

Payment information

• Billing data — if you subscribe to a paid plan, payment is processed by Lemon Squeezy, our third-party payment processor. We receive your subscription status, plan type, and billing period from Lemon Squeezy. We do not receive or store your credit card number, CVV, or full billing address — that data is held exclusively by Lemon Squeezy.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create and manage your account
• Process and store your chart projects so you can access them across sessions and devices
• Process subscription payments and manage your plan
• Send you transactional emails (account confirmations, password resets)
• Send product updates and feature announcements (you may opt out at any time)
• Analyse usage patterns to improve the Service
• Detect and prevent fraudulent or abusive activity
• Comply with legal obligations

We do not sell, trade, or rent your personal information. We share information only with the following service providers, each bound by confidentiality agreements:

• Supabase — authentication and database hosting. Stores your account data and project data.
• Lemon Squeezy — payment processing. Receives your billing information when you subscribe to a paid plan.
• Google — OAuth authentication. Receives a token exchange when you sign in with Google.
• Vercel — application hosting and CDN. Processes incoming web requests.

We may also share information when:

• Required by law — when compelled by court order, subpoena, or governmental authority.
• Business transfers — in connection with a merger, acquisition, or sale of all or part of our business, with appropriate notice to you.
• With your consent — for any other purpose with your explicit permission.

We retain your personal information for as long as your account is active or as needed to provide the Service. Your project data (datasets, configurations, and thumbnails) is retained while your account is active so you can access and manage your projects.

You may request deletion of your account and all associated data at any time by contacting us at privacy@vizrace.com. We will delete or anonymise your data within 30 days of such a request, except where retention is required by law.

We implement industry-standard security measures — including encryption in transit (TLS) and at rest, access controls, and regular security reviews — to protect your information.

Chart rendering and video export are performed entirely within your browser. During the export process, your dataset does not leave your device — it is processed locally using the Canvas API and WebCodecs / MediaRecorder APIs. This means your raw data is never transmitted to our servers or any third party during rendering.

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information (right to erasure)
• Restrict or object to processing
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at privacy@vizrace.com.

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it promptly.

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any third-party site you visit.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date above. Continued use of the Service after changes constitutes your acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: privacy@vizrace.com
• Website: vizrace.com