Last updated: February 25, 2026

Privacy Policy

Your privacy matters to us. This policy explains what information we collect, how we use it, and the choices you have over your data.

🔒End-to-end encrypted
SOC 2 compliant
🚫Never sold to third parties
1

Introduction

DeViz, Inc. (“DeViz,” “we,” “us,” or “our”) is committed to protecting your personal information. This Privacy Policy describes how we collect, use, store, and share information when you use the DeViz platform and related services (“Service”).

By using the Service, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.

Our commitment: We never sell your personal data. Your documents are processed solely to provide the Service and are not used to train our AI models without your explicit consent.
2

Information We Collect

We collect information in the following categories:

Account Information
  • Name and email address
  • Company name (optional)
  • Password (hashed)
  • Profile preferences
Content & Documents
  • Uploaded files and documents
  • Generated visual stories
  • Annotations and edits
  • Exported outputs
Usage Data
  • Features used and actions taken
  • Processing job logs
  • Error and performance data
  • Session duration
Billing Data
  • Payment method details (via Stripe)
  • Billing address
  • Transaction history
  • Plan and subscription status
3

How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Service
  • Process your documents and generate visual outputs
  • Authenticate your identity and manage your account
  • Process payments and send billing communications
  • Send product updates, security alerts, and support messages
  • Analyse aggregate usage patterns to improve our product (anonymised data only)
  • Comply with legal obligations and enforce our Terms of Service
We do not use your uploaded documents or generated stories to train AI models without your explicit opt-in consent.
4

Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

  • Service providers: Trusted vendors (e.g., Stripe for payments, AWS for hosting) under strict data-processing agreements
  • Legal requirements: When required by law, court order, or to protect the rights and safety of DeViz and its users
  • Business transfers: In connection with a merger, acquisition, or sale of assets — you will be notified before any such transfer
  • With your consent: When you explicitly authorise us to share information with a third party
5

Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specific retention windows:

Account informationDuration of account + 30 days after deletion
Uploaded documentsPer your storage settings (default: 90 days)
Generated storiesIndefinitely while account is active
Billing records7 years (legal requirement)
Usage/analytics logs12 months (anonymised after 90 days)

You may request deletion of your account and associated data at any time from your account settings or by contacting us.

6

Security Measures

We implement industry-standard technical and organisational measures to protect your data, including:

  • TLS 1.3 encryption for all data in transit
  • AES-256 encryption for data at rest
  • Regular third-party security audits and penetration testing
  • SOC 2 Type II compliance
  • Role-based access controls for internal staff
  • Automated threat detection and incident response procedures

No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security, but we work diligently to protect your information.

7

Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

Access
Request a copy of the personal data we hold about you
Correction
Request correction of inaccurate or incomplete data
Deletion
Request deletion of your personal data ("right to be forgotten")
Portability
Request your data in a structured, machine-readable format
Objection
Object to processing based on legitimate interests
Restriction
Request restriction of processing in certain circumstances

To exercise any of these rights, contact us at privacy@deviz.io. We will respond within 30 days.

8

Cookies & Tracking

We use cookies and similar tracking technologies to operate and improve the Service. Types of cookies we use:

  • Essential cookies: Required for authentication and core service functionality. Cannot be disabled.
  • Analytics cookies: Help us understand how users interact with the Service (anonymised). Can be opted out via settings.
  • Preference cookies: Remember your settings and customisations. Optional.

You can manage cookie preferences in your account settings or via your browser settings.

9

International Transfers

DeViz is based in the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US and other countries where our service providers operate.

For users in the European Economic Area (EEA) or United Kingdom, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to lawfully transfer personal data outside the EEA.

10

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:

DeViz Privacy Team

Email: privacy@deviz.io

Atlanta, GA, USA

You may also submit a request via our contact page. We respond to all privacy requests within 30 days.