Vissario LLC ("Vissario," "we," "us," or "our") operates the website at vissario.ai and the Vissario application (together, the "Service"). This policy explains what information we collect, how we use it, who we share it with, and the choices you have.
If you have questions about this policy, contact us at info@vissario.ai or:
The Service is offered to businesses and business operators located in the United States. We do not currently offer the Service to residents of the European Economic Area, the United Kingdom, or Switzerland. The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children.
If you use the Service from outside the United States, understand that your information will be stored and processed in the United States.
Account information. When you create an account, we collect your email address and a password. Your password is stored only as a cryptographic hash by our authentication provider — we never see or store your actual password.
Business information. To run an audit, you provide details about the business you want us to analyze: business name, street address, city, state, phone number, website URL, industry category, and a business description. You may enter these manually or select your business from Google's business search, which pre-fills these fields for you to review and edit before saving. We may also generate a draft business description for you based on a crawl of your public website, which you can edit.
Note that if you are a sole proprietor, your business name, address, and phone number may also be your personal name, address, and phone number. We treat this information as personal information where that is the case.
Payment information. When you subscribe to a paid plan, payment is processed by Stripe. Stripe collects and processes your card details directly. We never receive or store your full card number. We store only a Stripe customer identifier, a subscription identifier, and your subscription status and plan level.
Support communications. If you contact us for support, we keep the messages you send and our replies.
Google Business Profile data. If you choose to connect your Google Business Profile, we use Google's OAuth process to request your permission. We then store access and refresh tokens that let us read your business profile, and we retrieve profile fields such as your business name, address, phone number, hours, categories, and profile completeness. This connection is entirely optional and you can disconnect it at any time. See Section 6 for how we handle Google user data.
Log and device data. Our hosting and database providers automatically record technical information when you use the Service, including your IP address, browser type, device type, pages accessed, and timestamps. This is standard server logging used for security, debugging, and reliability.
Cookies. We use only essential cookies and browser storage required to keep you signed in and to operate the Service. We do not currently use advertising cookies, analytics cookies, or tracking pixels. If this changes, we will update this policy and provide any notices or choices required by law.
To produce your audit, we retrieve publicly available information about your business from third-party sources, including online directories such as Google, Bing, the Better Business Bureau, and Apple Maps, and from your own public website. The specific directories we check may change over time. This information is already publicly accessible; we collect it to compare it against what you told us and identify inconsistencies.
We also collect and store publicly available information about competitor businesses in your area — up to five per location — so we can show you how your AI visibility compares to theirs.
We use the information described above to:
We do not use your information to train artificial intelligence models. We do not use your data to build benchmarks, industry reports, or aggregate products.
This is the part of our Service most people have questions about, so we want to be direct about it.
To measure how AI search engines describe your business, we send prompts about your business to third-party AI engines and record how they respond. These prompts contain information about your business — typically your business name, city, state, and industry category — phrased the way a potential customer might ask.
The AI engines we query are operated by:
We also use Anthropic's Claude to generate the audit prompts themselves and to write business descriptions based on a crawl of your public website.
Each of these providers handles the data it receives under its own privacy policy and terms, and some may use submitted content to improve their own services in accordance with those terms. We send only business information — we do not send your email address, password, payment details, or Google account tokens to any AI engine.
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We have not done either in the preceding 12 months.
We share information only with service providers who help us operate the Service, and only as needed for them to perform that work:
| Category (providers) | What they receive |
|---|---|
| Hosting and database (Supabase, Vercel) | Account, business, and audit data; connection and log data |
| Payment processing (Stripe) | Payment and billing information |
| Email delivery (Postmark) | Your email address and message contents |
| AI processing (OpenAI, Anthropic, Perplexity, Google) | Business name, location, and industry |
| Business data lookup (Google) | Business search terms; Google profile data you authorize |
| Marketing website (Webflow) | Website visitor log data |
We may also disclose information if required by law, valid legal process, or a government request; to enforce our terms; or to protect the rights, property, or safety of Vissario, our users, or the public.
If Vissario is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
Vissario's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, with respect to data obtained from your Google account through Google Business Profile APIs:
You can disconnect your Google Business Profile from Vissario at any time within the Service, and you can revoke Vissario's access directly at myaccount.google.com/permissions. When you disconnect, we delete the associated access and refresh tokens.
We keep your account and audit data for as long as your account is active.
When you cancel or your account is closed, we begin deleting your personal information promptly and complete deletion within one (1) month. This includes your account record, the business information you provided, your audit history, and any Google tokens.
We may keep limited information beyond that period where we are required to — for example, billing and transaction records that we must retain for tax and accounting purposes, and security logs. We may also keep information as necessary to resolve disputes or enforce our agreements.
We take security seriously and use measures appropriate to the sensitivity of the data we hold, including:
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.
Access and correction. You can view your account information and update your business details within the Service. Your plan determines how many business locations you can add. Some business fields may be locked after setup — if you need a locked field or other account information corrected, contact us at info@vissario.ai and we will make the change for you manually.
Deletion. You can request deletion of your account and associated data by contacting info@vissario.ai.
Email. Transactional emails — password resets, billing notices, security codes — are part of the Service and cannot be turned off while your account is active. If we send marketing email in the future, every message will include an unsubscribe link.
Google connection. You can disconnect your Google Business Profile at any time, as described in Section 6.
Under the California Consumer Privacy Act, as amended by the CPRA, you have the right to:
To exercise any of these rights, email info@vissario.ai. We will verify your request by confirming control of the email address associated with your account. You may use an authorized agent to submit a request on your behalf; we may ask for proof of their authority.
We will respond within 45 days, and may extend once by an additional 45 days if we notify you.
Nevada law gives residents the right to direct us not to sell certain personal information. We do not sell personal information, but you may submit a request to info@vissario.ai.
We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top. If we make material changes — for example, if we begin using analytics or advertising tools, or change how we handle your data — we will notify you by email or through the Service before the changes take effect.
Questions, requests, or complaints: