Privacy Policy

Scope and responsibility

This policy explains how Visual Wizard handles personal information when you visit our website, create an account, use the editor, connect an agent, or contact us. It does not replace the privacy terms of third-party services you choose to connect.

Information we collect

The information involved depends on which parts of Visual Wizard you use:

• Account information, including your email address, display name, authentication records, and account preferences.
• Project content, including prototype source, design files, assets, prompts, agent conversations, and the frame or element context you choose to send.
• Technical information, including IP address, browser and device details, timestamps, error reports, security events, and product usage data.
• Messages and files you provide when requesting support or giving feedback.

How we use information

We use information to operate the editor, save and synchronize projects, authenticate users, execute requested agent actions, provide support, prevent abuse, diagnose errors, measure product performance, and communicate material service or policy changes.

AI agents and connected tools

Built-in AI requests are routed through OpenRouter to the selected model provider. Prompts, conversation context, attached images, and relevant project source or selection context may be processed to answer your request. Connected MCP agents may read or change project content using the access you grant them. Provider retention and model-training practices depend on the provider and its settings; this policy does not promise that all providers retain no data or exclude it from training. Do not send credentials, secrets, or third-party confidential information unless you have authority and have reviewed the applicable provider settings.

Cookies, analytics, and session replay

Visual Wizard uses cookies and browser storage for sign-in, product preferences, and analytics. We use usage analytics and session replay to understand how the product is used, investigate problems, and improve interactions. Session replay reconstructs activity within our website or application; it is not a recording of your entire device screen.

• Google Analytics measures visits and usage events. Information may include page URLs, referral information, browser or device details, and online identifiers.
• Microsoft Clarity provides interaction analytics, heatmaps, and session replay. Clicks, scrolling, navigation, and page content that is not masked may be included in recordings.
• PostHog provides product analytics and session replay in the production dashboard and editor when enabled. It uses browser local storage and records page and interaction events. Its current configuration masks input fields; this does not mean all visible text, project names, or source displayed elsewhere is masked.
• Browser privacy controls can limit cookies or storage, but may also affect sign-in and saved preferences. Blocking cookies alone does not necessarily prevent every analytics request. Contact us with questions about collection or deletion; accepting the Terms is not a separate consent to optional tracking.

Service providers and disclosure

Information is processed by services used to operate Visual Wizard, including Supabase for account and project infrastructure, Google Analytics, Microsoft Clarity, PostHog, and OpenRouter and the selected model providers for AI requests. Hosting and connected tools may also process the information needed for their functions. We may disclose information when legally required or reasonably necessary to address fraud, abuse, or a security incident. Joining our Discord community sends information to Discord under its own privacy terms.

Where information is processed

Service providers may process information in countries other than your own. Applicable protections and transfer requirements depend on your location and the provider arrangement. Contact us for information about the services involved in your request. A local app running in a Web Frame should not be assumed to keep all information on your device: saved project data, analytics, and context sent to an agent can involve external services.

Retention and deletion

We retain account and project information while your account is active and as reasonably necessary to provide the service, resolve disputes, prevent fraud, maintain security, and meet legal obligations. Retention periods vary by data type and provider. Deleting content from the product may not immediately remove temporary copies, logs, or backups, which expire through normal retention cycles.

Security

We use reasonable administrative and technical safeguards designed to protect information against unauthorized access, alteration, loss, and misuse. No online service is completely secure. Keep your account and connected-agent credentials private and notify us through the official support channel if you suspect unauthorized activity.

Your choices and rights

Depending on where you live, you may have rights to access, correct, export, restrict, object to, or delete personal information, withdraw consent where processing relies on it, and complain to your local data protection authority. You can update some information in the product and contact us for help with other requests. We may need to verify your identity. Deleting an account or project does not automatically delete information held independently by a connected agent or provider.

Children, changes, and contact

Visual Wizard is not directed to children under 13, and local law may require a higher minimum age. We may update this policy as the beta and its providers change. We will update the date on this page and provide additional notice when a change materially affects your rights. Privacy questions can be sent through the official support channel listed in the product.