Privacy Policy

Last updated: September 16, 2026

Introduction

This Privacy Policy explains how VisFlip ("VisFlip," "we," "us," or "our") collects, uses, shares, and protects information when you use our website, applications, accounts, workspaces, APIs, and related services (the "Service").

By using the Service, you acknowledge this Privacy Policy and our Terms of Service. For information about cookies and similar technologies, see our Cookie Policy.

Information we collect

The information we collect depends on the features you use and how you interact with the Service.

Account and authentication information

We may collect your name, email address, login method, account identifiers, session information, language preference, and information you provide when you contact us or manage your account.

Google sign-in is a user-requested authentication function, separate from optional analytics. Automatic Google One Tap is disabled in strict or unknown privacy regions; ordinary Google sign-in remains available. Supported identity prompts may be mediated by the browser through FedCM.

Prompts, uploads, tasks, and outputs

When you use AI features, we may collect and process your prompts, generation settings, uploaded images, videos, audio, reference materials, task status, provider task identifiers, generated outputs, output URLs, and related metadata. We use this information to receive requests, process tasks, show progress, deliver outputs, provide history, prevent abuse, troubleshoot failures, and support you.

You should not submit confidential information, trade secrets, payment credentials, or unnecessary sensitive personal information in prompts, uploads, or support requests. You are responsible for having the rights and permissions needed for us to process the content you submit.

Billing and transaction information

We may collect order records, subscription records, credit balances and transactions, payment status, refunds, and information needed to reconcile a purchase or provide billing support. Full payment-card numbers are handled by the payment service selected for the transaction and are not stored on our servers.

Usage, device, and technical information

We may collect IP address, user-agent, browser and device information, approximate location inferred from technical data, referring URL, language, timestamps, error logs, feature usage, and other information needed to operate, secure, and improve the Service.

Basic statistics measure aggregate service usage. In EEA, UK, Switzerland and unknown regions they require consent; elsewhere you can decline them. Optional traffic/product analytics and separate experience diagnostics require consent worldwide. Necessary task, payment and security records continue to support the service you request; rejecting analytics does not stop those business records. See our Cookie Policy for the tools, purposes and choices.

Cookies and similar technologies

We use essential and, where enabled and permitted, optional cookies and similar technologies. Your choices and the categories of technologies we use are described in our Cookie Policy.

How we use information

We may use information to:

• Provide, maintain, secure, troubleshoot, and improve the Service;
• Create and manage accounts, authenticate users, and protect sessions;
• Receive prompts and files, run requested processing, and return or store outputs;
• Track task status, maintain history, administer credits, and reconcile payments;
• Process refunds, respond to support requests, and send technical or account notices;
• Detect, prevent, investigate, and respond to fraud, abuse, security incidents, and policy violations;
• Measure performance and usage where permitted by your choices and applicable law; and
• Comply with legal obligations, resolve disputes, and enforce our agreements.

How we share information

We do not sell your personal information. We may share information in the following circumstances:

• Service providers: with external providers that support AI processing, hosting, storage, authentication, email, analytics, payments, customer support, security, or other operations. The applicable providers may change by feature, region, account, and configuration.
• Your instructions: when you use a feature that makes content available to another person or asks us to send information to a destination you select.
• Legal and safety reasons: when reasonably necessary to comply with law, respond to valid legal process, protect rights and safety, investigate abuse, or prevent fraud and security threats.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to applicable law.
• With your consent: when you direct us to share information or otherwise provide permission.

We aim to share only the information reasonably necessary for the relevant purpose. External providers may process information under their own privacy notices and applicable contractual or legal obligations.

Data retention

We retain information for as long as reasonably necessary to provide the Service, maintain security and records, administer accounts and billing, resolve disputes, enforce agreements, and comply with legal obligations. Retention periods vary by data type, feature, account state, storage lifecycle, and legal or operational requirements.

Do not assume that the Service provides permanent storage or backup. You should download or otherwise preserve any output you need to keep. Deletion from an account or interface may not immediately remove copies in backups, security records, billing records, dispute records, or external services where retention is required or permitted by law.

Your choices and rights

Depending on where you live and subject to applicable law, you may have rights to access, correct, export, delete, or restrict certain uses of your personal information, and to withdraw consent where processing relies on consent.

You can manage available account information through the Service. To request access, correction, deletion, or help with a privacy matter, contact support@visflip.com. We may need to verify your identity and may retain limited information when necessary for security, fraud prevention, billing, dispute resolution, or legal compliance.

You can manage optional cookies through the controls described in our Cookie Policy. You can unsubscribe from non-essential promotional messages using the available opt-out method; we may still send essential service and account messages.

Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the information and risks involved. No method of internet transmission or electronic storage is completely secure. You are responsible for protecting your account credentials, API keys, invite codes, and devices.

Children

The Service is intended for people who are at least 18 years old or the age of majority in their jurisdiction, whichever is higher. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information to us, contact us so we can review and take appropriate action.

International processing

We and the external providers that support the Service may process information in countries other than the country where you live. Where required, we use appropriate safeguards for such transfers.

Changes to this policy

We may update this Privacy Policy when our Service, practices, or legal obligations change. We will post the updated version and date on this page and provide additional notice for material changes where appropriate.

Contact

Questions or privacy requests can be sent to support@visflip.com.