Privacy Policy

Version 2.1.0 · effective 28 September 2026

Last Updated: September 28, 2026 Version: 2.1.0

Who we are

Viszy is operated by Sylphx Limited, a company registered in England and Wales (company number 16438428) ("we", "us"). Registered office: 128 City Road, London EC1V 2NX. We are the controller of the personal data described here under the UK GDPR and the Data Protection Act 2018. Contact: privacy@viszy.ai.

This policy explains what personal data we collect when you use Viszy, why, and the rights you have over it.

Information We Collect

Account and payment information

Name, email address, and contact information
Account credentials and authentication data
Payment information: Stripe collects your card details; we receive your plan, payment status, amounts and Stripe references
Profile information and preferences

What you make

The prompts, product photos and reference images you upload
The images, video and audio generated for you

Your free try, before you sign up

You can make one free, watermarked product photo without an account. We keep your uploaded photo and the result (with and without the watermark) so you can download the clean version after you sign up. The two are tied to your browser by a random id in a cookie (viszy_guest), and we keep only a one-way hash of that id and of your IP address, to limit each browser and network to a few free tries a day and to keep the cost of free tries bounded. If you do not sign up and save it, we delete your photo, the results and both hashes 24 hours after you made them. If you sign up in that time, the clean result and your upload become part of your account, and everything else about the try is deleted within the same 24 hours.

Usage and technical information

How you use the service
IP address, approximate location derived from it, and device and browser information
Cookies and similar technologies, as the Cookie Policy describes

Where You Came From

If you arrive through a link that carries campaign tags (the utm_ parameters) or a referral id (ref), for example from another Sylphx product, we keep those tags with your account when you sign up. We use them to know which link brought you and to credit the referrer, including when you later start a subscription. They are deleted with your account. If you accept cookies, the tags are also kept in a first-party cookie for 30 days so that a sign-up on a later visit is still credited; if you do not, they are kept only for your current visit.

How We Use Your Information, and Our Legal Basis

To provide Viszy (your account, your creations, your plan, billing and support): performance of our contract with you, or, where you use Viszy for a business, our legitimate interest in serving our customers.
To keep Viszy secure and working (preventing fraud, abuse and misuse of the AI models, enforcing our terms and usage limits, and fixing faults): our legitimate interests in running a safe and reliable service.
To understand and improve Viszy (measuring how features are used, and developing new ones): our legitimate interests in improving the service. Analytics in your browser runs only with your consent.
To tell you about Viszy (service messages about your account and plan, and, for customers, news about similar Viszy features, which you can opt out of at any time): our contract with you and our legitimate interests.
To meet legal obligations and protect our rights (tax and accounting records, lawful requests, and establishing, exercising or defending legal claims): legal obligation and our legitimate interests.
If our business is sold or reorganised: our legitimate interest in transferring the business.

Where we rely on legitimate interests, we have weighed them against your rights; contact us for details. We do not sell your personal data.

Service Providers

We share personal information with the providers below, and only what each needs to do its job for us:

fal and Replicate run the AI models that generate your images, video, and audio. They receive your prompt and any reference image you attach.
Stripe processes payments for paid plans. It receives your payment details directly (we never see your full card number), your email address, and the plan you buy together with the campaign tags that brought you, if any.
Sylphx Observability, our own error service, receives error reports when something breaks, which can include technical information about your device, browser, and the request that failed. Reports from your browser are sent only after you accept analytics cookies, and email addresses, access keys, and web address query strings are removed before a report is stored.
Google Analytics measures how the site is used, and only after you accept analytics cookies.

We also use hosting and email providers, and we may share data with professional advisers, with authorities where the law requires it, and with a buyer or successor if our business is sold or reorganised.

International Transfers

Some of these providers process data outside the UK. Where they do, we rely on UK adequacy regulations or on safeguards the law approves, such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. Contact us for a copy of the relevant safeguard.

How Long We Keep Data

A free try made without an account is deleted after 24 hours unless you save it to an account, as described above. We keep your account and creations while your account is open. You can request deletion of your account from Settings > Privacy and data. A deletion request can be cancelled for 30 days. After that we permanently delete your account, your creations, and the rest of your data, including stored media files. Records we must keep, such as an audit entry you appear in, keep the entry but lose the link to you. Financial records (invoices and payments) are kept for as long as tax and accounting law requires, anonymised: your name, email, address, and account link are removed.

We keep other data only as long as we need it for the purposes above, including to meet legal obligations, prevent fraud and abuse, and establish or defend legal claims. Backups and logs are overwritten in the normal course of operation.

Data Security

We protect personal data with appropriate technical and organisational measures, including encryption in transit and access controls. No service is completely secure. If a personal data breach occurs, we notify the Information Commissioner's Office where the law requires, and we tell you directly where the breach is likely to result in a high risk to your rights and freedoms.

Your Rights

You have the right to:

Access your personal information, and download it from Settings > Privacy and data
Correct inaccurate information
Request deletion of your information
Ask us to restrict how we use it
Receive it in a portable form
Withdraw consent at any time, where we rely on it

Your right to object. You can object at any time to our use of your data based on legitimate interests, and to direct marketing. After an objection to direct marketing we stop.

We answer requests within one month, which the law allows us to extend by up to two further months for complex or numerous requests. We make reasonable and proportionate searches, and we may charge a reasonable fee for, or refuse, a request that is manifestly unfounded or excessive. We may ask you to confirm your identity first.

You can complain to us at privacy@viszy.ai, and to the Information Commissioner's Office (ico.org.uk) or the data protection authority where you live.

Children

Viszy is for people aged 18 and over. We do not knowingly collect personal data from children. If we learn that an account belongs to someone under 18, we may close it and delete its data.

Customer Content About Others

If you upload images or information about other people, you are responsible for having a lawful basis and any permission needed to do so.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@viszy.ai
Or use the contact form at https://viszy.ai/contact

Changes to This Policy

We may update this Privacy Policy. We post the new version on this page and update the "Last Updated" date. If we plan to use your personal data for a new purpose, we tell you before we do.

This policy is effective as of September 27, 2026.