Privacy Policy

This Privacy Policy applies to:

• Visitors to our website at visark.ai and any related subdomains
• Individuals who submit demo requests or contact us through our website
• Authorized users of the Visark service (“Customers” and “Authorized Users”)
• Anyone who otherwise interacts with us in connection with our services

This Privacy Policy does not apply to third-party websites, products, or services that may link to or integrate with our services. We are not responsible for the privacy practices of those third parties.

We collect the following categories of information:

Information you provide directly to us:

• Information submitted through our demo request form, including first name, last name, work email, company name, role, company size, and any free-text description of your customer success challenges
• Information provided when you contact us by email, including the content of your correspondence
• Information provided when you respond to surveys or research outreach (participation is always optional)

Information collected automatically when you visit our website:

• Standard log data including the pages you visit, the time and date of your visit, the website that referred you (if any), and your browser type and version
• Approximate location based on IP address (we hash IP addresses with a unique salt before storing them, so we cannot reverse-engineer your specific IP from our logs)
• Aggregated analytics about how visitors use our website, used to improve our content and user experience

Information from connected tools (Customers only):

When a Customer connects their tools to the Visark service, we receive data from those tools — including but not limited to CRM records, support tickets, task data, calendar events, billing events, messages from connected channels, and documents in connected workspaces. We only access the data that the Customer has explicitly authorized through the connector's permissions.

We use the information we collect for the following purposes:

• To respond to demo requests and other inquiries
• To provide, maintain, improve, and personalize our services
• To detect cross-tool drift, surface risk signals, and recommend recovery actions to Customers (the core function of our service)
• To execute approved actions through Customer-connected tools (only with explicit Customer approval)
• To send service-related communications (including security and privacy notifications)
• To analyze usage of our website and services
• To investigate, prevent, and respond to fraud, security incidents, and other prohibited activity
• To comply with legal obligations and enforce our rights

Visark's services are powered by artificial intelligence. The following commitments apply to all AI-related processing:

• We do not use Customer data to train AI models. Customer data is used only to power the specific Customer's instance of Visark — never to improve generic models, never to train future versions, never to benefit other customers.
• AI outputs are anchored to evidence. Every signal, recommendation, and action our AI surfaces is anchored to specific data from Customer-connected tools. AI outputs are not used in a manner that could constitute automated decision-making with significant legal effects on individuals without human approval gating.
• Human approval is required for execution. No AI-generated recommendation is executed without explicit Customer sign-off.

We do not sell your personal information. We share information only in the following limited circumstances:

• With service providers who process information on our behalf to provide our services (such as cloud hosting and infrastructure providers, email delivery providers, and customer support tools). These service providers are contractually bound to use information only as necessary to provide their services to us and to apply appropriate security protections.
• For legal reasons, if we believe disclosure is required by applicable law, legal process, or government request, or if disclosure is necessary to protect our rights, our customers, or the public.
• In connection with a business transaction, such as a merger, acquisition, financing, or sale of assets. In any such event, we will require the receiving party to honor the commitments made in this Privacy Policy with respect to your information.
• With your consent, for any other purpose disclosed at the time the information was collected.

A current list of our material sub-processors is available to enterprise customers under our Data Processing Addendum (DPA) upon request to privacy@visark.ai.

We use a limited set of technologies to operate our website and service.

Essential / strictly necessary:

• Server-side session handling for the demo request form and account authentication (Customers only)
• Configuration storage for UI state (dismissible announcement banner, accordion state, theme preferences)

Analytics:

We use first-party, privacy-preserving analytics to understand how visitors use our website. Analytics data is server-side logged (no third-party tracking pixels, no cross-site tracking) and IP addresses are hashed before storage. We do not use Google Analytics, Plausible, Mixpanel, or any third-party analytics service.

No advertising or marketing trackers:

We do not use cookies or similar technologies for advertising, retargeting, or cross-site tracking. We do not sell, share, or otherwise disclose your information for advertising purposes.

If our use of cookies or similar technologies changes in the future, we will update this Privacy Policy and, where required by law, request your consent.

We retain personal information only for as long as necessary to provide our services and for the legitimate business purposes described in this Privacy Policy.

• Demo request information: retained for up to 24 months from the date of your request, after which it is deleted or anonymized unless a customer relationship has been established.
• Customer data: retained for the duration of the customer relationship. Upon termination, customer data is deleted within 30 days, except for audit log records, which are retained for 12 months and then deleted.
• Website analytics: hashed IP addresses and request logs are retained for up to 13 months, then deleted.
• Communications: emails and other correspondence are retained for as long as necessary to respond and for record-keeping purposes.

You may request deletion of your personal information at any time by emailing privacy@visark.ai.

Visark is operated in the United States, and the personal information we collect may be processed and stored in the United States or other countries where our service providers are located. These countries may have data protection laws that differ from those in your country.

When we transfer personal information from the European Economic Area (EEA), United Kingdom, or Switzerland to other countries, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, where applicable. Enterprise customers may request a Data Processing Addendum (DPA) including these clauses by contacting privacy@visark.ai.

Depending on your location, you may have the following rights with respect to your personal information:

• Access — the right to request a copy of the personal information we hold about you
• Correction — the right to request that we correct inaccurate personal information
• Deletion — the right to request that we delete your personal information
• Restriction — the right to request that we restrict our processing of your personal information
• Portability — the right to receive your personal information in a structured, commonly used format
• Objection — the right to object to our processing of your personal information
• Withdrawal of consent — the right to withdraw consent at any time where we rely on consent as the legal basis for processing

To exercise any of these rights, email privacy@visark.ai. We will respond to verified requests within the timeframes required by applicable law. We do not discriminate against individuals who exercise their privacy rights.

If you are in the European Economic Area, United Kingdom, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

If you are a resident of California, you may have additional rights under the California Consumer Privacy Act, including the right to opt out of the sale or sharing of your personal information (we do not sell or share personal information for cross-context behavioral advertising).

If you are a resident of Nigeria, your rights under the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act (NDPA) apply.

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from loss, misuse, unauthorized access, disclosure, alteration, and destruction. Full details about our security practices are available on our Data & Security page.

No system is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and applicable regulators as required by law.

Our services are not directed to children under the age of 18. We do not knowingly collect personal information from individuals under 18. If you believe we have collected personal information from someone under 18, contact us at privacy@visark.ai and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this policy and, where required by law, provide additional notice. Your continued use of our website or services after the effective date constitutes acceptance of the updated Privacy Policy.

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Visark, Inc.

Email: privacy@visark.ai