Privacy Policy

Last updated: November 2026

1. Information We Collect

We collect information you provide directly: email address, display name, profile photo (via Google sign-in), the brand assets (logos, colors, fonts, images) you upload and, if you connect Instagram or a Facebook Page, the information needed to publish to that account or Page (Page ID and name, Page access token, Facebook ID of the person who connected it) and, if you connect LinkedIn, the information needed to publish to your LinkedIn profile or Page (LinkedIn ID, profile name and photo, Page ID and name, access tokens). We also record how you found us (originating link or campaign, referring site, first page visited, and your answer to "How did you hear about us?" if you give one) and technical data (device type, operating system, app version, error reports, and your approximate country and city derived from your IP address when you sign in).

2. How We Use Your Information

We use your information to provide and improve the Service, manage your subscriptions, send service-related notifications, generate AI-based visual content for your brands, understand which channels bring us our users, and fix bugs. With your consent, we also use it to measure website audience and the performance of our ads.

3. Data Storage

Your data is stored securely with recognised cloud hosting providers. Payments are processed by Apple (App Store) or Google (Google Play) for in-app purchases. Your card details are entered directly with these providers and are never sent to or stored on our servers. On the website, for subscriptions taken out from the European Union, payments are processed by Mollie B.V. (the Netherlands), a licensed payment provider: your card or bank account details are entered on Mollie's payment page and never reach our servers. We only keep your billing identity, the payment references and the invoices (10 years, accounting obligation).

4. Third-Party Services

We use the following third-party services:

  • Google (Firebase / Google Cloud) — authentication, database, file storage, server functions (including video rendering), voice-overs (Text-to-Speech) and word timing of these voice-overs for the captions (Speech-to-Text)
  • Vercel — hosting of the website and its APIs
  • Apple (App Store) and Google (Google Play) — payment of subscriptions through in-app purchases
  • RevenueCat — in-app subscription management (account identifier, purchases, status and trials); may forward subscription events to Meta and Apple Search Ads to measure our campaigns
  • Mollie B.V. (the Netherlands) — payment of subscriptions taken out on the website from the European Union (name, email, country and billing identity, payment and mandate references; card or account details entered with Mollie)
  • Anthropic (Claude) — writing copy, captions, hashtags, video scripts and the assistant's answers
  • Replicate — AI image generation
  • ElevenLabs — voice-overs (some videos)
  • HeyGen — avatar videos (feature paused)
  • Meta (Instagram, Facebook) — publishing to and statistics of the Instagram account and Facebook Page you connect
  • Mailjet — service emails
  • Expo — push notifications of the mobile app
  • Sentry — error and crash reports to fix bugs
  • Cloudflare Turnstile — spam protection of the contact form
  • Google Analytics 4 / Firebase Analytics — audience measurement of the website and apps, only with your consent
  • Meta (Pixel and our server's events on the website, SDK in the apps) — measuring our ads: with your consent from Europe, unless you opt out elsewhere
  • LinkedIn (Microsoft) — publishing to your LinkedIn profile or Page, only if you connect it
  • Apple (Sign in with Apple) — sign-in with your Apple account in the app (Apple identifier, e-mail or relay address, name if you choose to share it)
  • Google Fonts — fonts of the website and of the template previews (website and app): your browser or the app loads them from Google's servers, which receive your IP address
  • Unsplash — default illustration photos of the templates (website and app): loaded from Unsplash's servers, which receive your IP address

5. Data Sharing

We do not sell your personal information. We share it only with the providers above, as far as needed to run the Service, with Google for website audience measurement if you consent, and with Meta for measuring our ads (see section 6 and "Your choices" below).

6. Cookies and Trackers

The session cookie is used for authentication: it is essential to the Service and always on. With your consent in the cookie banner, we also use Google Analytics (_ga cookies, audience measurement) and a VizBloom cookie (vb_acq, 30 days) that remembers where your visit came from to link it to your signup. You can change your mind at any time from the "Cookies" link at the bottom of the page. In our mobile apps, the Meta SDK sends Meta events (install, signup, first visuals ready, subscription offer shown) to measure our ads. On iOS, your device's advertising identifier is only shared if you allow it (App Tracking Transparency); otherwise measurement stays aggregated and anonymous (SKAdNetwork). On Android, you can reset or delete your advertising ID in the device settings. On the website, when you create an account, start a trial or pay for a subscription, our server may send the matching event directly to Meta, with your email and account identifier hashed (SHA-256), your IP address, your browser and the identifier of the ad click that brought you, to measure how well our ads work. From the European Economic Area, the United Kingdom and Switzerland, this only happens with your consent (cookie banner, or the box at sign-up, never ticked by default); if you withdraw it, the following events stop. Elsewhere, it happens unless you opt out (see "Your choices" below).

7. Your Rights

You have the right to access, update, or delete your personal information at any time through the Settings page. You can also delete your account entirely. To delete your account: on the website, Settings → Account → "Delete Account"; in the app, Settings → "Delete account"; or write to privacy@vizbloom.io from your account's email address. If a subscription taken on the website is active, cancel it first in Settings; an App Store or Google Play subscription is cancelled in the store. You can also lodge a complaint with the CNIL (www.cnil.fr). Some providers are located outside the European Union (United States): transfers rely on the Data Privacy Framework or the European Commission's standard contractual clauses.

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion, all personal data and brand assets are permanently deleted within 30 days. Our backups, stored in France and the United States, expire on a rolling basis within that period.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page.

10. Contact

The data controller is Asura Studio, a SARL registered under SIREN 994 847 358, 1 cours du Buisson, 77186 Noisiel, France. For questions about this Privacy Policy, please contact us at privacy@vizbloom.io.

11. Your choices: Do Not Sell or Share My Personal Information

We do not sell your personal information. Sending sign-up, trial and payment events to Meta to measure our ads may count as "sharing" under some US state privacy laws (such as California's). You can opt out at any time: with the button below (when you are signed in, it also stops the events our server sends for your account), by choosing "Decline" in the cookie banner, or by writing to us from the Contact page. We also honor your browser's Global Privacy Control signal as an opt-out.