Privacy Policy

Visionyr ("we", "us", "our") operates visionyr.co and the Visionyr platform, an AI brand builder that helps founders create and grow brands. This policy explains what we collect when you use the service, why we collect it, and what you can do about it.

By using the service you agree to this policy. If you do not agree with it, please do not use the service.

We collect only what the service needs to work.

• Account information — your name, email address, and phone number when you register, plus a securely hashed password. We never store your password in readable form.
• Brand inputs — the brand name, industry, target audience, price position, and brand vision you enter to generate a Brand Blueprint, together with the blueprint we generate from them.
• Enquiries — the name, email address, phone number, and message you send through our contact form.
• Technical data — IP address, browser type, device information, and pages visited, collected automatically so we can keep the service secure and working.
• Payment data — if you subscribe to a paid plan, our payment processor handles your card details. We receive only the billing status and the last few digits of the card; we never see or store full card numbers.

We use the information we collect to:

• Create and operate your account, and sign you in.
• Generate, store, and display your Brand Blueprints so you can return to them.
• Respond to enquiries you send us.
• Take payment for paid plans and issue receipts.
• Keep the service secure — detecting abuse, rate limiting sign-in attempts, and investigating incidents.
• Understand which parts of the service are used, in aggregate, so we can improve them.
• Send service messages about your account. We will only send marketing email if you have asked for it, and every marketing email has an unsubscribe link.

We do not sell your personal information, and we do not use your brand inputs to train models for anyone else.

The vision, audience, and positioning you describe are commercially sensitive, and we treat them that way. Your brand inputs and the blueprints generated from them belong to you.

We use them to produce your blueprint and to show it back to you. We do not publish them, share them with other users, or sell them. Where generation is performed by a third-party AI provider, we send only what is needed to produce your result, under contracts that prohibit that provider from using it to train their models.

A blueprint is reachable by its unique link. Anyone who has that link can view that blueprint, so share it only with people you intend to see it.

We share personal information only in these situations:

• Service providers — hosting, database, email delivery, payment processing, and AI generation providers who process data on our instructions and are bound to protect it.
• Legal obligations — where we are required by law, regulation, or a valid legal request.
• Protecting rights — where disclosure is reasonably necessary to protect the safety, rights, or property of our users, the public, or us.
• Business transfers — if we are involved in a merger, acquisition, or sale of assets, in which case we will tell you before your information is transferred.

We keep your account information and blueprints for as long as your account is open. If you close your account, we delete or anonymise your personal information within 90 days, except where we must keep records longer to meet legal, tax, or accounting obligations.

Contact enquiries are kept for up to 24 months so we can follow up and keep a record of correspondence.

We use industry-standard measures to protect your information: encrypted connections, hashed passwords, access controls limiting who on our team can reach production data, and rate limiting on sign-in.

No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authority as required by law.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct information that is wrong or incomplete.
• Delete your account and the personal information attached to it.
• Export your information in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where our processing relies on it.

To exercise any of these, email us at hello@visionyr.co. We will respond within 30 days. We may need to verify your identity first.

We use a small number of cookies, and only for things the service needs:

• A session cookie that keeps you signed in.
• A security token that protects forms against cross-site request forgery.
• A preference cookie, if you choose "keep me signed in".

You can block cookies in your browser, but the service will not be able to sign you in without them.

We are based in Indonesia, and some of our service providers operate in other countries. Where your information is transferred outside your country, we take steps to ensure it remains protected by appropriate safeguards.

The service is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us personal information, contact us at hello@visionyr.co and we will delete it.

We may update this policy as the service changes. When we do, we will update the effective date at the top of this page, and for significant changes we will notify you by email or in the app before they take effect.

Questions about this policy, or about your information? Email hello@visionyr.co, or use the contact form on this site and we will get back to you.