Privacy Policy

Effective date: [Insert date]
Controller: Vizguard [Insert legal entity name], [Insert registered address], EU

Vizguard is committed to protecting your privacy and handling personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable local data protection laws. This policy explains what data we collect, why we collect it, how we use it, and what rights you have.

1. Who we are

Vizguard provides no-code visual and accessibility testing tools for websites and web applications, including workflow recording, screenshot-based regression testing, and accessibility checks. Our service supports production, staging, and local environments, and may generate reports for issue trackers, audits, and compliance use cases.

For the purposes of GDPR, Vizguard acts as either:

• a controller for website visitors, prospects, and account administration data; or
• a processor when customers use the platform to test applications and content they control.

2. Data we collect

We may collect the following categories of personal data:

• Account data: name, work email, company name, role, login credentials, and billing details.
• Usage data: product interactions, feature usage, IP address, device/browser information, timestamps, logs, and diagnostic data.
• Workflow data: recorded test workflows, steps, URLs, screenshots, annotations, similarity scores, accessibility findings, and related metadata.
• Customer content: data entered into the platform by you or your organization, including browser session content, page states, and uploaded assets.
• Support data: communications you send to us, including support tickets, emails, and feedback.
• Marketing data: newsletter preferences, lead source, event participation, and website forms.

Some workflows may contain personal data if the tested website includes user names, profile details, order information, or other visible content. Vizguard allows selective hiding of dynamic or sensitive content in test flows.

3. How we use data

We use personal data to:

• provide, operate, and maintain the Vizguard platform;
• record and replay workflows for visual and accessibility testing;
• generate reports, diffs, and remediation guidance;
• authenticate users and manage accounts;
• process payments and provide customer support;
• improve product performance, reliability, and security;
• comply with legal obligations and enforce our terms;
• send product updates, service notices, and optional marketing communications.

4. Legal bases for processing

Where GDPR applies, we rely on the following legal bases:

• Contract: to provide the service and fulfill our agreement with you.
• Legitimate interests: to secure, improve, and monitor the platform, prevent abuse, and support business operations.
• Consent: for optional marketing communications and certain cookies or similar technologies where required.
• Legal obligation: to comply with tax, accounting, and regulatory requirements.

5. Customer content and testing data

Vizguard may process screenshots, browser recordings, accessibility results, and workflow data uploaded or generated by customers. Customers decide what pages, environments, and content to test, and they are responsible for ensuring they have a lawful basis to process any personal data included in those tests.

If you use Vizguard to test production systems, the resulting screenshots or logs may contain live user data. You should configure exclusions, masking, and workflow limits where appropriate, especially for sensitive data.

6. Sharing and disclosure

We may share personal data with:

• Service providers that help us host, secure, analyze, or support the platform;
• Payment processors and billing providers;
• Professional advisers such as lawyers, accountants, and auditors;
• Authorities where required by law;
• Other recipients at your direction, such as issue trackers or integrations you connect.

We do not sell personal data.

7. International transfers

As an EU-based company, we aim to store and process data in the EEA where feasible. If personal data is transferred outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses or other legally recognized transfer mechanisms.

8. Retention

We retain personal data only as long as necessary for the purposes described in this policy, including providing the service, complying with legal obligations, resolving disputes, and enforcing agreements.

Typical retention periods may include:

• account data for the life of the account and a reasonable period after closure;
• support data for issue resolution and audit purposes;
• workflow data and screenshots for the duration needed to deliver testing history and reports, or until deleted by the customer or account administrator, subject to our technical and legal obligations;
• marketing data until you unsubscribe or withdraw consent.

9. Security

We use appropriate technical and organizational measures to protect personal data, including access controls, encryption in transit and at rest where applicable, logging, and secure hosting practices. Vizguard’s product design also emphasizes isolated browser execution, audit logging, and credential protection for workflow authentication tokens.

No system is perfectly secure, and we cannot guarantee absolute security.

10. Data subject rights

If GDPR applies to your data, you may have the right to:

• access your personal data;
• rectify inaccurate or incomplete data;
• erase your data in certain circumstances;
• restrict processing;
• object to processing based on legitimate interests;
• data portability;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with a supervisory authority.

To exercise your rights, contact us at [privacy email]. We may need to verify your identity before responding.

11. Cookies and similar technologies

Our website and application may use cookies or similar technologies for essential functionality, analytics, and preferences. Where required by law, we will request your consent before placing non-essential cookies.

12. Children

Vizguard is not intended for children under 16, and we do not knowingly collect personal data from children under 16.

13. Controller contact

Vizguard
[Insert legal entity name]
[Insert registered address]
[Insert privacy email]
[Insert DPO, if appointed]

14. Changes to this policy

We may update this policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated version with a revised effective date.