Privacy Policy

This Privacy Policy explains how Vizor (“we”, “us”, “our”), a service registered in the Republic of Kazakhstan, collects, uses and protects personal data when you use vizor.lol and the Vizor platform (the “Service”). We are the data controller for the account and usage data described below.

1. Data we collect

• Account data: your email address and authentication details (a hashed password and/or a Google sign-in identifier), and your language and interface preferences.
• Subscription and payment data: your plan, subscription status and billing history. Card payments are handled by Paddle (see Section 3) — we do not receive or store your full card number.
• Usage data: pages viewed, features used, searches and filters, and basic technical data such as IP address, browser type and device identifiers, used for security, abuse-prevention and product analytics.
• Interaction data: individual actions you take in the interface — which controls you use, in what order, how long a session lasts and how long you spend on a step — together with an approximate location (country, region and city) derived from your IP address by our network provider. We store that derived location, not the IP address itself. We record the terms you type into the search box, because they tell us what our users are looking for; we do not record the contents of any other input field.
• Cookies and similar local storage: see Section 4.
• Communications: messages you send to support@vizor.lol.

2. How we use data

• to provide the Service, authenticate you and enforce plan entitlements and device limits;
• to process subscriptions and renewals, and to prevent payment and refund fraud;
• to protect the Service against abuse (rate-limiting, bulk-extraction and multi-account detection);
• to communicate with you about your account, transactions and support requests;
• to understand usage and improve the product;
• to comply with legal obligations.

We rely on the performance of our contract with you (to provide the Service), our legitimate interests (security, abuse-prevention and product improvement) and legal obligations as the lawful bases for processing.

3. Payments

Card payments are processed by Paddle.com Market Ltd, which acts as the Merchant of Record and as an independent data controller for payment data it collects. Paddle handles your card details and billing information under its own privacy policy (paddle.com). Cryptocurrency payments (USDT) are processed by our crypto payment provider. We receive from these processors only the information needed to activate and manage your subscription (such as status, plan and a transaction reference).

4. Cookies and local storage

We use cookies and browser local storage that are necessary to run the Service — for example to keep you signed in, remember your language (the vizor_lang cookie) and theme, and to protect against abuse. We use our own first-party analytics to measure usage, and Microsoft Clarity to see where visitors click and how far they scroll on our public pages; Clarity sets its own cookies and is not loaded in the account or administrative areas. So that a visit can be matched between the two systems, we pass Clarity the random visit and visitor identifiers our own analytics already uses; we never pass it your email, account or plan. We do not sell your personal data and do not use third-party advertising cookies.

5. Source of the advertising data in the Service

The advertising creatives, advertiser pages and related information shown inside the Service are collected from the public Facebook Ad Library and other public sources. This is public advertising content published by advertisers, not personal data about you as a user. If you are an advertiser and believe content relating to you should be removed, contact us at support@vizor.lol.

6. Who we share data with

We share personal data only with service providers that help us run the Service, under appropriate confidentiality and data-protection terms:

• payment processors (Paddle as Merchant of Record for cards; our crypto provider for USDT);
• hosting and infrastructure providers (for application hosting, storage and content delivery);
• email delivery for account, verification and billing messages;
• our own first-party analytics, and Microsoft Clarity, which produces click and scroll heatmaps of the public pages. Clarity is not loaded in the account or administrative areas.

We may also disclose data where required by law or to protect our rights, users or the Service. We do not sell personal data.

7. International transfers

Our providers may process data in countries other than yours, including outside the Republic of Kazakhstan and the European Economic Area. Where required, such transfers are protected by appropriate safeguards (for example, standard contractual clauses used by our providers).

8. Data retention

We keep account and subscription data for as long as your account is active and as needed to provide the Service, then for a limited period as required for legal, accounting and fraud-prevention purposes. Detailed interaction records are kept for 90 days and then deleted automatically; beyond that we retain only aggregated statistics, which are not linked to you. Deleting your account also erases your interaction history. You can ask us to delete your account, subject to those obligations.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. If you are in the European Economic Area or the United Kingdom, you have these rights under the GDPR and may lodge a complaint with your local supervisory authority. To exercise any right, contact us at support@vizor.lol; we will respond within the time required by applicable law.

10. Security

We use reasonable technical and organizational measures to protect personal data, including encryption in transit, hashed passwords and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Children

The Service is intended for professional users aged 18 and over and is not directed at children. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and change the “Last updated” date; material changes may be notified by email.

13. Contact

For any privacy question or request, contact us at support@vizor.lol.