Vizii

Legal

Last updated: April 2026

Your privacy matters to us. This policy explains what information we collect, how we use it, and what rights you have over your data.

1. Who We Are

Vizii Pty Ltd ("Vizii", "we", "our" or "us") operates the Vizii financial dashboard platform available at vizii.com. This Privacy Policy describes how we collect, use, store and disclose your information when you use our Service.

2. Information We Collect

We collect the following categories of information: • Account information: name, email address and authentication credentials when you register. • Usage data: pages visited, features used, session duration and browser/device information collected through analytics tools. • Financial data: invoices, bills, contacts and account data pulled from your connected accounting platforms (Xero, QuickBooks Online) via OAuth. This data is read-only and stored solely to provide the Service. • Payment information: billing name, address and the last four digits of your card. Full card details are processed directly by our payment provider (Stripe) and never stored by Vizii. • Communications: any information you provide when contacting our support team.

3. How We Use Your Information

We use your information to: • Provide, operate and improve the Service. • Process your subscription payments and send billing receipts. • Send transactional emails including sign-in links, payment notifications and due-date digest emails (where enabled). • Respond to support enquiries. • Monitor and analyse usage patterns to improve the product. • Comply with legal obligations.

4. Third-Party Integrations

To deliver the Service, we connect to your accounting platforms via OAuth 2.0. We access only the data scopes required to operate the features you use. We do not sell or share your financial data with any third party for advertising or marketing purposes. When you disconnect an integration, we delete the associated synced data within 30 days.

5. Data Sharing

We do not sell your personal data. We share your information only with: • Service providers who process data on our behalf (e.g. Stripe for payments, Resend for transactional email, Vercel for hosting, Render/infrastructure providers). These providers are contractually bound to process data only as instructed. • Law enforcement or regulatory bodies where required by applicable law. • A successor entity in the event of a merger, acquisition or sale of assets, provided the successor continues to honour this Privacy Policy.

6. Cookies and Analytics

We use first-party session cookies required for authentication. We also use MouseFlow for anonymous usage analytics. MouseFlow may collect mouse movements, clicks and page-level interactions but does not collect personally identifiable information without consent. You can opt out of MouseFlow analytics by using your browser's privacy controls.

7. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. Financial data synced from your accounting platforms is retained while you maintain an active subscription and for up to 90 days after cancellation to facilitate account reactivation. After this period, it is permanently deleted. You may request earlier deletion by contacting us.

8. Data Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest and regular security reviews. Access to production systems is restricted to authorised personnel. Despite these measures, no system is completely secure and we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the right to: • Access a copy of the personal data we hold about you. • Request correction of inaccurate data. • Request deletion of your data ("right to be forgotten"). • Object to or restrict certain processing. • Data portability. To exercise these rights, email us at privacy@vizii.com. We will respond within 30 days.

10. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will delete it promptly.

11. International Transfers

Vizii is based in Australia. If you access the Service from outside Australia, your data may be transferred to and processed in Australia or other countries where our service providers operate. We ensure appropriate safeguards are in place for any cross-border transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice. Continued use of the Service after the effective date of the updated Policy constitutes acceptance of the changes.

13. Contact Us

For privacy-related enquiries, contact our Privacy Officer at: Email: privacy@vizii.com Postal: Vizii Pty Ltd, Sydney, NSW, Australia For general enquiries, visit our contact page.