Privacy policy

This policy covers Vizebel, which helps businesses plan and improve their website content. Where this page and our security page overlap, both are accurate: the security page simply explains the same practices in more practical terms.

Who we are

Vizebel is operated by Vizebel Limited (NZBN 9429053934284), a company registered in New Zealand. If you have a question about this policy or about data we hold, send us a message.

Information we collect

Information you give us

Your name and email address when you create an account, your organisation name, the website addresses of the brands you want to monitor, and anything you type into the product: brand profiles, audience notes, questions and edits. If you connect Google Search Console or Google Analytics, read-only access to them. If you connect Claude, the workspaces and permissions you approve for that connection.

Information we generate

Brand profiles, audience descriptions and tone-of-voice summaries derived from your public website; the questions we draft for you; the answers assistants give; content audits; article drafts; keyword rankings; and, if you connect Google, search and traffic totals such as clicks, impressions and sessions.

Information we collect automatically

Basic operational data needed to run and secure the service: log records of requests to our API, error logs, usage counts used for billing and for the spend controls that stop a runaway job, and a log of each call a connected Claude makes.

What we do not collect

We do not collect credentials for your website or CMS, your customer or CRM data, data about individual visitors to your site, or payment card details.

How we use it

We use the information above to:

Provide the service: build your brand profile, ask assistants your questions, audit your content, and produce reports and drafts. Bill you accurately, by recording what work was run. Keep the service working and secure, including diagnosing faults and preventing abuse. Contact you about your account, and reply when you write to us.

We do not use your data to train models. We do not sell your data. We do not share one customer’s data with another customer.

Who we share it with

We use a small set of specialist processors, each receiving only what it needs: the AI assistants we ask your questions (this is the core function of the product), and the services that monitor them for us, except Claude, which we ask directly through Anthropic’s API; AI models that help draft and analyse your workspace; providers of search and keyword data; a service that reads the public pages of your website; and providers for sign-in, payments, email, hosting and our database, and analytics (see Cookies and analytics below). A current list of our processors is available on request.

If you connect Claude, your own Claude receives the workspace data it asks for, within the workspaces and permissions you approved. That conversation is between you and Anthropic, under your own agreement with them.

These providers operate outside New Zealand, which means your data is processed overseas. We may also disclose information where we are legally required to, or to protect our rights or the safety of others.

Google user data

If you connect a Google account to a workspace, we ask Google for read-only access to:

Google Search Console: the search queries, pages, clicks, impressions and average positions for the property you choose.

Google Analytics: the list of GA4 properties your account can see, so you can choose one, and for that property only, daily sessions, engaged sessions and key events by landing page from organic search. We do not request audience, demographic or visitor-level data.

Your Google account email address, so the workspace can show which account is connected.

How we use it. Only to show you your site's search and traffic numbers inside your own workspace: on its content, page and topic screens and in its reports. We never write to or change anything in your Google account.

How we store it. The token Google gives us is encrypted at rest. The numbers we pull are stored in your workspace and are never visible to another customer.

Who we share it with. No one, except the hosting and AI providers that run features in your workspace, and then only to provide those features; your own Claude, if you connect it and it asks for these numbers; or where the law requires it. We do not sell Google user data, use it for advertising, or use it to train AI models.

Removing access. Disconnect Google in the workspace's Settings at any time: we revoke our access with Google and stop syncing. You can also remove Vizebel from your Google Account permissions. Numbers already synced stay in the workspace until you delete it, which erases them 30 days later, or until you email us to delete them sooner.

Vizebel's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How long we keep it

We keep your workspace data for as long as your account is open, because the value of the product is the historical trend. Delete a brand client, or ask us to close your organisation, and access ends immediately; the data itself, including every question, result and draft, is erased 30 days later, so a mistaken deletion can still be undone. Billing and usage records we are required to keep are retained with your name removed. The log of a Claude connection's calls is kept for 90 days.

Your rights

You can ask us to show you the personal information we hold about you, correct it if it is wrong, delete it, or provide it in a portable form. Under the New Zealand Privacy Act 2020 you also have the right to complain to the Office of the Privacy Commissioner if you think we have handled your information badly. If you are in the UK or EU, equivalent rights apply to you under UK GDPR and GDPR respectively.

To exercise any of these, send us a message. We will respond within 20 working days.

Cookies and analytics

The application uses cookies strictly necessary to keep you signed in. Both the marketing site and the application use an analytics provider, which sets its own cookies, to measure page views and how the product is used. In the application this is linked to an account ID, never your name or email address, and it is never used for advertising or remarketing. Block it the way you'd block any analytics script.

Security

Data is encrypted in transit. Access within the product is enforced on the server against your organisation and brand boundaries. We describe our practices, and our current limitations, honestly on the security page.

Children

Vizebel is a business tool and is not directed at children. We do not knowingly collect information from anyone under 16.

Changes to this policy

If we change this policy in a way that materially affects you, we will let account holders know by email before it takes effect. The date at the top of this page always reflects the current version.