Privacy Policy

This policy explains what personal data Vispii (“Vispii”, “we”) processes when you use the Vispii platform, why we process it, who we share it with, and the rights you have. We are the data controller for the data described here.

Who we are

Vispii. You can reach us about anything in this policy at ops@vispii.com.

What we collect

Account data

When you create an account we process your email address, your display name, and the workspaces and organisations you belong to. Authentication is handled by Firebase Authentication; we never store your password.

Content you upload and create

Media files, projects, templates, renders, comments and annotations you or your colleagues put into a workspace. We process this content in order to provide the service — to store it, transcode it, render it and show it to the people you have given access. We do not use your content to train machine-learning models, and we do not sell it.

Connected advertising accounts

If you connect an advertising platform such as Meta, we store the access token that the platform issues, encrypted at rest, together with the identifiers of the ad accounts, pages and campaigns you selected. We use it only to carry out the deliveries you ask for. Disconnecting the account deletes the stored token.

Technical data

Server logs containing IP address, timestamps, requested routes and error details, kept so we can operate the service securely and debug failures. We use strictly necessary cookies to keep you signed in and to protect authentication flows against cross-site request forgery. We do not use advertising cookies.

Why we may process it

• Contract — to provide the platform to you or to the organisation that gave you access.
• Legitimate interests — to keep the service secure and reliable, to prevent abuse, and to improve it.
• Consent — where we ask for it specifically, such as connecting a third-party advertising account.
• Legal obligation — accounting and bookkeeping requirements.

Who processes data on our behalf

We use a small number of sub-processors, each under a data processing agreement and each limited to what the service needs:

• Google Cloud / Firebase — authentication, database, job queues and serverless functions.
• Cloudflare R2 — storage of uploaded media and rendered output.
• Vercel — hosting of this site and of the application.
• Resend — transactional email such as invitations.
• Meta and other advertising platforms — only the assets and metadata required for a delivery you have asked us to make.

Some of these providers operate outside the EU/EEA. Where that is the case, transfers rely on the European Commission’s Standard Contractual Clauses or an adequacy decision.

How long we keep it

Content stays for as long as the workspace it belongs to exists. When you delete an asset or a workspace we remove it from our live systems, and backups age out within 30 days. Account data is deleted when the account is closed, except where we must keep records to meet a legal obligation. Server logs are retained for up to 90 days.

Security

Data is encrypted in transit and at rest. Access to production systems is restricted to the people who need it and protected by two-factor authentication. Advertising platform tokens are additionally encrypted at the application layer, bound to the workspace they belong to.

Your rights

Under the GDPR you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we process it, and to receive it in a portable format. Where processing rests on consent, you can withdraw that consent at any time. Write to ops@vispii.com and we will respond within one month.

If you are in Denmark and are not satisfied with our response, you can complain to Datatilsynet, the Danish Data Protection Agency.

If you were invited by an agency

When you use Vispii through an agency or employer, that organisation decides what goes into its workspaces and for how long. For that content they are the controller and we act as their processor; requests about it are best directed to them.

Changes

We will update this page when our processing changes, and will tell account holders by email before a material change takes effect.