Vizirush

Privacy Policy

Last updated: July 7, 2026

1. Who We Are

Vizirush (“we”, “us”, “our”) is a service owned and operated by ReachWave Media. Our address is: Office No. 26, 4th Floor, MOTIAZ ROYAL BUSINESS PARK, Zirakpur, Gazipur, Punjab 140603, India.

For privacy matters, contact us at support@vizirush.com.

2. Data We Collect

We collect the following categories of personal data:

  • Account data: email address, full name, and hashed password provided at sign-up.
  • Business data: organization name, location address, phone number, website, and business category.
  • Google Business Profile data: reviews, reply drafts, and post content accessed via the Google Business Profile API after you grant OAuth authorization.
  • Customer contact data: customer phone numbers you upload for review-request campaigns (WhatsApp messaging).
  • Call log data: inbound call metadata (masked caller number, duration, status) collected via Twilio call tracking.
  • Billing data: subscription plan, payment status, and billing history. We do not store full card numbers — all payment processing is handled by Paddle.
  • Usage data: AI reply usage counts, rank check logs, post schedules, and feature usage metrics.

3. How We Collect Your Data

We collect data:

  • Directly from you when you create an account, set up a business, or use platform features.
  • Automatically from your browser (session tokens, cookies) when you use the service.
  • From Google Business Profile via OAuth once you connect your account.
  • From Paddle when you complete a subscription purchase.

4. Why We Collect It

We use your data to:

  • Provide, operate, and improve the Vizirush service.
  • Generate AI-assisted review replies using the Anthropic Claude API.
  • Send WhatsApp review-request messages via Meta WhatsApp Business Platform.
  • Track incoming calls and missed-call history via Twilio.
  • Process subscription payments via Paddle.
  • Authenticate your identity and maintain account security.
  • Send transactional emails (account confirmation, billing receipts).
  • Prevent fraud and unauthorized access.

5. Legal Bases for Processing (GDPR)

For users in the European Economic Area, our legal bases for processing personal data are:

  • Contract performance — processing needed to deliver the service you signed up for.
  • Legitimate interests — fraud prevention, security, and product analytics.
  • Legal obligation — retaining billing records for tax compliance.
  • Consent — where you have provided explicit consent (e.g., marketing communications).

6. Third-Party Data Processors

We share data with the following third parties strictly to operate the service:

  • Supabase — database and authentication infrastructure. Data is stored in the EU (Frankfurt) region by default.
  • Paddle — payment processing and subscription management. Paddle is our Merchant of Record and processes payment card data on your behalf.
  • Anthropic — AI review reply generation. Review text you submit is sent to Anthropic's Claude API to generate draft replies.
  • Twilio — call tracking. Call metadata is processed by Twilio.
  • Meta WhatsApp Cloud API — WhatsApp Business Platform for sending review request messages.
  • Google — Business Profile API for review sync and post publishing.
  • Vercel — application hosting. Request logs may contain IP addresses and request metadata.
  • DataForSEO — keyword rank tracking. Search keywords and location data are sent to DataForSEO to check local search rankings.

We do not sell your personal data to any third party for marketing purposes.

7. International Data Transfers

Vizirush is operated from India. When we process your data using third-party services based in the United States or the EU (such as Supabase, Anthropic, and Vercel), your data may be transferred internationally. We rely on the third parties' own data transfer mechanisms (Standard Contractual Clauses, adequacy decisions) to ensure appropriate protection.

8. Data Retention

We retain your account data for as long as your account is active. After account deletion or plan downgrade, personal data is retained for up to 30 days before deletion, except:

  • Billing records are retained for 7 years for tax and legal compliance.
  • Review content and call logs are retained for the duration of your subscription and 30 days after cancellation.
  • Customer contact data uploaded for campaigns is retained only while your subscription is active unless you delete it earlier.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your account and personal data.
  • Port your data in a machine-readable format.
  • Withdraw consent where processing is based on consent.
  • Object to processing based on legitimate interests.

To submit a request, email support@vizirush.com. We will respond within 30 days.

10. Cookies and Tracking

We use session cookies to keep you signed in. We do not use third-party advertising cookies. For details on the specific cookies we set and how to control them, see our Cookie Policy.

11. Security

All data is encrypted in transit (TLS 1.2+) and at rest. Access to production systems is restricted by role-based permissions. We use Row-Level Security (RLS) in our database so each organization can only access its own data. Despite these measures, no system is completely secure — report any suspected breach to support@vizirush.com.

12. WhatsApp Messaging

When you send review request campaigns, the customer's phone number and your business name are transmitted to Meta's WhatsApp Business Platform to dispatch the WhatsApp message. You are responsible for obtaining consent from your customers before adding them to a campaign.

13. AI Processing (Anthropic)

Review text that you submit for AI reply generation is sent to Anthropic's Claude API. Anthropic may retain this data according to their own data retention policies. We recommend not including sensitive personal data in review text beyond what is needed to generate an accurate reply.

14. Payment Data (Paddle)

We do not store your full credit card number or CVV. All payment processing is handled by Paddle, our Merchant of Record. Paddle stores your payment data under their own PCI-DSS compliant systems. We receive only your subscription status and billing history from Paddle.

15. Children's Privacy

Vizirush is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us immediately.

16. Links to Other Websites

Our service may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. Review their privacy policies before submitting data to them.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date and, where required, by email or in-app notice. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

18. Contact — Privacy Requests

For privacy-related questions or requests, email support@vizirush.com with the subject line “Privacy Request”. You may also write to us at: Office No. 26, 4th Floor, MOTIAZ ROYAL BUSINESS PARK, Zirakpur, Gazipur, Punjab 140603, India.

19. How to Exercise Your Rights

To access, correct, or delete your data: email support@vizirush.com from the email address associated with your account. Include your full name and the specific action you are requesting. We will verify your identity before processing any request and respond within 30 days.