Privacy Policy
Service: Vizix — https://vizix.tech
Last updated: 28 August 2026
Version: 0.5-draft
Draft for lawyer review. Not legal advice. Live payments after written legal sign-off.
This English edition is for users outside the Russian Federation, including the European Economic Area (EEA) and the United Kingdom. Users in the Russian Federation are covered by the Russian Privacy Policy (152-FZ).
1. Controller
| Form | Individual entrepreneur |
| Name | Samsonov Ilya Vyacheslavovich (ИП Самсонов Илья Вячеславович) |
| INN | 540409535131 |
| OGRNIP | 318547600123212 |
| Registered address | IE Samsonov I.V., Russia, Novosibirsk Oblast, Krasnoobsk urban-type settlement |
| Site | https://vizix.tech |
| Contact | legal@vizix.tech |
The Service is a SketchUp 2024+ extension, https://vizix.tech, and related APIs. Vizix accounts and databases are separate from other products we operate (including Debuto).
For EEA/UK users we act as controller of the personal data described here. Pack prices, credit expiry and refunds are contract terms, not privacy terms — see the Terms and the offer.
The Vizix name is not a registered trademark as of this date; it is used as a commercial designation.
A separate checkbox at registration records consent to transfer of the scene frame and related data to processors in the United States and the EEA. The timestamp of that checkbox is stored in PostgreSQL as crossBorderConsentAt, independently of pdnConsentAt (general processing consent) and cookieConsentAt. You may withdraw that consent; withdrawal ends generation.
2. Data we process
- Email; bcrypt password hash; Google / Yandex OAuth ids; last login; signup country;
pdnConsentAt(general processing consent) andcrossBorderConsentAt(US/EEA processor transfer) as separate timestamps; cookie-consent timestamp (cookieConsentAt). - SketchUp viewport frames; generation options (modes 1–3, quality Draft / Enhanced / Final, aspect, variants, scene options); internal processing instructions (assembled on the server; not included in ordinary client JSON or shown in the normal product UI).
- Render history, thumbnails, full files (limited cloud TTL plus a copy on your computer).
- Prepaid-lot records (technical retention: 90 days from grant or until spent); payment records without PAN/CVV.
- IP address: processed on the request for routing and abuse prevention; not stored on the user record. Web-server / hosting logs may keep IP for 30 days from the relevant request (including last sign-in), then delete or anonymize it.
- On device: JWT (
Sketchup.write_defaultkeyVizix/jwt, HtmlDialoglocalStoragevizix_jwt), theme/language/aspect,cookie_consent, optionaldev_mode.
We do not store card numbers or CVV. Cards are entered on T-Bank or Stripe pages.
Personal data of Russian citizens is stored in PostgreSQL at Timeweb Cloud, Moscow (MSK-1), database vizix_ru. Other accounts: vizix_world (Timeweb, Netherlands).
3. Purposes and legal bases (GDPR art. 6)
| Purpose | Legal basis | Data |
|---|---|---|
| Account and sign-in | Contract (art. 6(1)(b)); consent where a checkbox is used (art. 6(1)(a)) | Email, password hash, OAuth ids |
| Generating a still from your frame | Contract (art. 6(1)(b)) | Frame, options, assignment, output files |
| Prepaid balance accounting | Contract (art. 6(1)(b)) | Lots, balance |
| Payments | Contract (art. 6(1)(b)) | Email, order |
| Email verification | Contract (art. 6(1)(b)) | Email, token |
| Security / anti-abuse | Legitimate interests (art. 6(1)(f)) | IP in logs, service logs |
| Legal / tax records | Legal obligation (art. 6(1)(c)) | Anonymized payment rows |
| Cross-border transfer of the frame and related data to processors in the United States and the EEA | Separate consent (art. 6(1)(a) and Ch. V GDPR) and/or contract performance | Frame, assignment, email as needed by processors |
No marketing mail in v1.
4. Recipients and processors
| Recipient | Purpose | Location |
|---|---|---|
| Features & Labels, Inc. | Processes the SketchUp frame and the generation assignment | United States |
| T-Bank (AO TBank) / T-Kassa | RU acquiring and 54-FZ receipts | Russia |
| Stripe, Inc. / Stripe Payments Europe, Ltd. (as applicable) | World checkout | United States and/or EEA |
| Google LLC / Google Ireland Limited (as applicable) | OAuth sign-in | United States and/or EEA |
| Yandex | OAuth sign-in | Russia |
| Resend and/or SMTP | Transactional email | US (Resend) and/or SMTP host |
| Timeweb Cloud | Hosting | Russia (MSK-1) and Netherlands (vizix_world) |
We engage Features & Labels, Inc. under a data processing agreement (DPA) / processor contract: the processor acts on our documented instructions and must not use the frame or assignment for its own unrelated purposes.
Models and compute that Features & Labels, Inc. uses to fulfil the assignment are part of that processor’s infrastructure. The product UI has no “Powered by” badge and does not publish model names in client JSON.
4.1. Transfers outside the EEA (GDPR Chapter V)
Personal data may be processed by processors in the United States and the EEA. The frame processor Features & Labels, Inc. is in the United States. Payments and Google sign-in for EEA users are often performed by Stripe Payments Europe, Ltd. and Google Ireland Limited; where a US entity is involved, Chapter V GDPR applies.
Transfers from the EEA to the United States are made on the basis of:
- the European Commission’s Standard Contractual Clauses (SCC); and/or
- another Chapter V mechanism (including an adequacy decision, such as the EU–US Data Privacy Framework, where the recipient is certified).
A separate checkbox at registration asks for your consent to these transfers, including the scene frame. The timestamp is stored as crossBorderConsentAt, distinct from pdnConsentAt. Withdrawing consent (email legal@vizix.tech) ends generation.
5. Retention
| Category | Period |
|---|---|
| Account and thumbnails | While the account lives or until erasure |
| Full cloud frames | Period shown in the Service (admin-set, default 7 days) plus a local copy |
| Email tokens | Up to 2 days |
| JWT | 7 days |
| Credit-lot record | 90 days from grant or until spent (technical ledger) |
| Payments | ~5 years (anonymized if you delete the account) |
Cookie consent (cookieConsentAt) |
12 months |
PDN consent (pdnConsentAt) and cross-border consent (crossBorderConsentAt) |
While the account lives (independent columns) |
| IP | Not on the user record; server/hosting logs 30 days from the request / last sign-in, then delete or anonymize |
| Files on your disk | Until you delete them |
6. Security
bcrypt; HTTPS; JWT; access-restricted servers; ordinary client JSON omits the assembled assignment and processor model names. No absolute security guarantee over the Internet.
7. Your rights
7.1. GDPR (arts. 15–22) — EEA/UK
You may:
- art. 15 — access your data;
- art. 16 — rectification;
- art. 17 — erasure;
- art. 18 — restriction of processing;
- art. 20 — data portability;
- art. 21 — object to processing based on legitimate interests;
- art. 22 — not be subject to a solely automated decision producing legal or similarly significant effects (we do not take such decisions: generation is a requested service, not credit-scoring or similar);
- withdraw consent at any time (without affecting processing before withdrawal); withdrawing cross-border consent ends generation;
- lodge a complaint with a supervisory authority in your country of residence (EEA) or the UK ICO.
7.2. Requests
legal@vizix.tech (include the account email). We respond within 30 days (extendable as GDPR allows). Delete account: renders and sources are removed; payment rows stay anonymized for tax law.
8. Children
Intended for 18+. Photorealistic adult characters may be generated. Images of minors are prohibited. We do not knowingly collect children’s data.
9. Your content
By sending a viewport frame you grant a non-exclusive licence to store and process it only to provide the Service, including transfer to Features & Labels, Inc. You warrant rights to the model and frame. You warrant that you have obtained all required consents from any individuals whose personal data may appear in the frame, for processing by the Service and its processors. We do not train our own models on your scenes.
10. Changes and contact
Current text: https://vizix.tech/legal/privacy-en. Material changes: notice in the Service or by email.
legal@vizix.tech · https://vizix.tech
Russian citizens’ data must be localized in Russia. Using VPN to register a Russian resident on the world contour is prohibited; we may move or restrict such accounts.
Draft. Lawyer review required before treating this as the production policy. The DPA with Features & Labels, Inc. and SCCs must actually be in place.