Privacy Policy

1. Introduction

This Privacy Policy explains how Suzhou Maifangbao Technology Co., Ltd. ("we," "us," or "our"), a company registered in the People's Republic of China that operates vischart, collects, uses, shares, and stores personal information when you use https://vischart.com and the vischart application (the "Service").

It should be read with our Terms of Service at https://vischart.com/terms. By using the Service, you acknowledge this Policy. If you do not agree, do not use the Service.

Controller. Suzhou Maifangbao Technology Co., Ltd. is the controller (and, under the Personal Information Protection Law of the People's Republic of China, the personal-information handler) of personal information processed through the Service unless we state otherwise. Registered address: Room 1-E50, Unit D-2, No. 859 Panxu Road, Gusu District, Suzhou, Jiangsu, China. Contact: support@vischart.com.

2. Information we collect

Account and identity. When you sign in with Google or Apple, we receive identifiers such as your email address and, if the provider supplies them, your name and profile photo. We use email to create and secure your workspace.

Workspace content. We store projects, canvas documents, uploaded files, generated assets, brand settings, and similar materials you create or import. If you enable sharing or plaza publication, that content (or a preview of it) can be accessed by others as you configured.

AI inputs and logs. When you use AI features, we process prompts, reference images, datasets you attach, model parameters you choose, and operational logs (request type, status, credits spent, timestamps) needed to run, bill, debug, and prevent abuse.

Payments. If you buy credits or a subscription, our payment processor collects payment details (for example, card number, billing name, and address). We receive limited billing metadata such as payment status, last4, amount, currency, and transaction identifiers—not your full card number.

Feedback. If you send feedback, we collect the message, optional attachment, and the contact email you provide.

Technical data. We automatically collect IP address, device and browser type, approximate time zone, request URLs, referrers, and diagnostic logs needed to operate and secure the Service.

3. Cookies and similar technologies

We use strictly necessary cookies and local storage to keep you signed in, protect the session, and remember essential workspace state. These are required for the Service to function.

We do not currently use advertising cookies or sell personal information. If we later add optional analytics or marketing cookies, we will update this Policy and, where required, request consent.

4. How we use information

We use personal information to:

• Provide, maintain, and secure the Service, including authentication, storage, rendering, export, and sharing.
• Process credit usage, payments, invoices, refunds, and fraud prevention.
• Run AI features you request and restore credits when a request fails.
• Respond to support, feedback, and legal requests.
• Monitor reliability, abuse, and rate limits.
• Communicate service-related notices (security, billing, material changes to Terms or this Policy).
• Comply with law and enforce our Terms.

Legal bases (EEA/UK). Where GDPR or UK GDPR applies, we rely on: performance of a contract (providing the Service you request); legitimate interests (security, product reliability, preventing abuse); consent (where we ask for it); and legal obligation (tax, accounting, lawful requests). Where PIPL applies, we process personal information based on consent, necessity to conclude or perform a contract, legal obligation, or other grounds permitted by PIPL.

5. AI processing

AI features transmit the inputs you provide to third-party model providers and infrastructure (for example, via an AI gateway). Those parties process the data to generate output and may process it under their own privacy policies for abuse monitoring, safety, and service operation.

vischart does not use your prompts or User Content to train our own foundation models. We do not sell your prompts. We cannot control whether a third-party provider uses inputs to improve its models; review that provider’s policy if this matters to your use case.

Do not submit secrets, special-category data, or information you are not allowed to share with subprocessors when using AI features.

6. How we share information

We share personal information with:

• Infrastructure and storage providers that host accounts, projects, and files (including Supabase).
• Identity providers you choose (Google, Apple) for sign-in.
• AI model and gateway providers when you use AI features.
• Payment processors (such as Stripe) when you pay.
• Font, icon, map, and stock-image services when the product loads those assets in your browser.
• Professional advisors and authorities when required by law or to protect rights, safety, and security.
• A successor in the event of a merger, acquisition, or sale of assets, subject to this Policy.

Share links and plaza. If you create a share link, anyone with the URL can view that project. If you publish to the plaza, other users of the Service may view and use the listing as the product allows. That disclosure is initiated by you.

We do not sell personal information as “sale” is defined under the California Consumer Privacy Act (CCPA/CPRA), and we do not share it for cross-context behavioral advertising.

7. International transfers

We and our processors may process information in countries other than yours, including the United States. Where required, we use appropriate safeguards such as standard contractual clauses or the processor’s comparable transfer mechanism.

8. Retention

We keep account and workspace data for as long as your account is active. AI request logs, security logs, and billing records are kept for a limited period needed to operate the Service, prevent abuse, and meet tax and accounting duties, then deleted or aggregated.

When you request deletion at support@vischart.com, we delete or de-identify personal information we control, except information we must retain (for example, completed payment records) or that has been copied by someone with a share link you distributed.

9. Security

We use administrative, technical, and organizational measures appropriate to the nature of the Service, including encrypted transport, access controls, and isolated object storage. No method of transmission or storage is completely secure. You are responsible for protecting your identity-provider account.

10. Your rights

Depending on your location (including mainland China, the EEA, UK, and California), you may have the right to request access, correction, deletion, portability, restriction, or objection to certain processing, and to appeal a denial. Under PIPL, you may also request an explanation of our processing rules. California residents may request that we disclose the categories of personal information we collected and the categories of third parties with whom we shared it. You will not be discriminated against for exercising these rights.

To make a request, email support@vischart.com from the address on your account. We may need to verify your identity. You may use an authorized agent where the law allows, subject to verification. EEA/UK users may also lodge a complaint with their local supervisory authority. Users in mainland China may complain to the Cyberspace Administration of China or another competent authority.

11. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have, contact support@vischart.com and we will delete it. Users under 18 may only purchase paid features with a parent or guardian.

12. Do Not Track

The Service does not respond to browser Do Not Track signals. We do not track you across third-party websites for advertising.

13. Changes

We may update this Policy. The current version will be posted at https://vischart.com/privacy with a new effective date. Material changes will be indicated by updating that date and, where required, by additional notice. Continued use after the effective date means you accept the updated Policy.

14. Contact

Privacy requests, including access and deletion: support@vischart.com. Operator: Suzhou Maifangbao Technology Co., Ltd.. Registered address: Room 1-E50, Unit D-2, No. 859 Panxu Road, Gusu District, Suzhou, Jiangsu, China. Website: https://vischart.com.