Privacy Policy

Last updated: 7 September 2026 (v3)

This policy explains what personal data Vizzie Trading Pty Ltd (ACN 701 787 902), trading as Vizzie ("we", "us"), collects when you use the Vizzie application and website, how we use it, and the choices you have. Vizzie is a tool for turning open data into maps, charts, and tables.

Data we collect

• Account details — your email address and display name, provided when you sign up or sign in (including via Google or Facebook).
• Your content — the projects, maps, charts, and the data sources you follow (open-data portals, publishers, datasets).
• Usage & security events — sign-in events (time and browser type), the storage your downloaded data uses, and a record of exports you create.
• Product analytics & session recordings — free plan only — while Vizzie is in beta we use PostHog to record how the app is used, including session replays, so we can see where people get stuck. This runs on the free plan only, and stops as soon as an account moves to a paid plan. The free plan is for working with public open data; paid plans are where you bring your own data, and we would rather hold no recording of that at all. Anything you type is masked — form fields, search boxes and passwords are blocked out before the recording leaves your browser. Other text on the page is recorded, so we can see which dataset you opened or what an error said. This is part of why recording is limited to the free plan: there, what is on screen is public open data. You can turn recording off at any time under your profile, and we honour your browser’s “Do Not Track” setting.
• Website analytics and campaign attribution — on www.vizzie.org and in the app we use the same tool (PostHog) to count page visits and see which pages people read, and we record the campaign, search or link that brought you here (for example the utm_source tag on an advertisement). This is kept in a cookie on the vizzie.org domain, written by whichever of our sites you land on first, so that if you later create an account we can tell which campaign it came from; it is then stored against your account for that purpose. Session recording is not used on the marketing website — only in the app, as described above. We honour your browser’s “Do Not Track” setting here too.
• Feedback you send us — if you use the feedback button, we keep your message and the page you were on. A screenshot you choose to attach is emailed to us and not stored.
• Published-map visits — when someone opens a map you publish, we record the visit for your own analytics. We store a hashed (irreversible) form of the visitor's IP address, an approximate country, and the address of the page that referred them — never the raw IP.

Publishing & sharing a map

When you publish or share a map, the data behind it is encoded directly into the shareable link. This means anyone who has the link can view that data — so treat published links as public, and do not publish maps built on personal or sensitive data.

How we use it

• To provide the service — sign you in, save your projects, and show your usage and analytics.
• To secure accounts and prevent abuse.
• To send essential account emails (e.g. confirmation and password reset), and optional product updates you opt into.

Who we share it with

We do not sell your personal data. We use trusted service providers to run Vizzie, who process data on our behalf:

• Supabase — authentication and database hosting for your account and content.
• PostHog — product analytics and session replay while we are in beta.
• Resend — delivering feedback you send us by email.
• Google / Facebook — only if you choose to sign in with them, to verify your identity.
• Mapbox — optional address lookup and routing features, when used.
• Open-data providers you connect to serve the public datasets you map.

Data retention

We keep your account data for as long as your account is active. Raw map-visit records are rolled up into aggregate counts after about 30 days, and old sign-in records are pruned over time. You can delete your account and data at any time — see Data Deletion.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. To exercise these, contact us at the address below or follow the deletion instructions.

Security

Access to your data is restricted so that you can only reach your own records; passwords are handled by our authentication provider and are never stored by us in plain text.

Children

Vizzie is not directed to children under 13, and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be reflected by the "last updated" date above.

Contact

Questions or requests: privacy@vizzie.org.

Template notice: this page is a good-faith summary of how Vizzie handles data. Review and adapt it (legal entity name, contact address, jurisdiction-specific rights) and have it checked before public launch — it is not legal advice.