Privacy Policy (updated July 2026) — Vizera AI

Responsible for data processing:

AI & Co GmbH
Lättichstrasse 6
6340 Baar
Switzerland

Email: info@vizera.ai
Website: www.vizera.ai

Vizera.ai is a brand and product of AI & Co GmbH.

Contact person for data protection enquiries:

Pascale Tschaler
c/o AI & Co GmbH
Lättichstrasse 6
6340 Baar, Switzerland
Email: privacy@vizera.ai

2.1 When visiting our website

We automatically process the following data (server logs):

• IP address (truncated/anonymized)
• Date and time of access
• Browser type, version, operating system
• Referrer URL
• Pages visited
• Error logs (for stability and security)

2.2 When creating an account or using the platform

• First name, last name
• Company name (optional)
• Email address and login data
• Usage data (generated images, projects, settings)
• Payment data (via our external payment provider Stripe)
• Support requests and communication

2.3 Uploaded files (sketches, 3D models, photos)

Special rules apply here:

• Files are used exclusively for providing our services.
• No training use for AI models by Vizera. Your data is not used by Vizera for training AI models.
• With our standard models (Google Imagen 4 via Vertex AI, Banana Nano, Banana Nano Pro), it is contractually guaranteed that no customer data is used for model training.
• If you manually select alternative models (e.g. BFL Labs Flux models) that are not among our standard models, we cannot guarantee that the respective provider does not use the data for training purposes. That is why we deliberately select the most secure options as defaults.
• No disclosure to third parties, except where strictly necessary for processing (e.g. AI models via API, see Section 5).

4.1 No training use of your designs

Your uploaded sketches, CAD plans, 3D models and generated images are not:

• used to train publicly accessible AI models
• disclosed to external datasets
• used for model improvements, unless you explicitly give your consent in writing

4.2 How your images are processed

Your content is transmitted temporarily to the following systems (depending on the selected function):

• Google Imagen 4 (via Google Cloud / Vertex AI)
• Banana Nano (Google)
• Banana Nano Pro (Google)
• Flux Kontext Pro (BFL Labs)
• Flux Pro 2.0 (BFL Labs)

Note: This model list reflects the status as of June 2026. This list will be updated if changes are made to the models used.

These external model providers process the data to carry out your request.

Transparency note: Our standard models (Google Imagen via Vertex AI, Banana Nano, Banana Nano Pro) are contractually protected — Google does not use paid API data for training. For alternative models (BFL Labs Flux models), we select providers with the strongest possible data protection agreements; however, a contractual no-training guarantee does not currently exist there. For this reason, the safest options are preset as default.

4.3 EU AI Act — transparency and labelling

From 2 August 2026, the EU AI Act (Regulation (EU) 2024/1689) requires providers of generative AI systems to label AI-generated content as artificially created in a machine-readable format (Article 50).

What Vizera does:

• By August 2026, Vizera will implement technical metadata (C2PA standard or comparable) in all generated images, marking them as AI-generated.
• Vizera provides a means of detection so that AI-generated outputs are identifiable through metadata inspection.

What this means for you as a customer:

• Swiss customers (CH-only projects): The EU AI Act does not apply directly. No labelling obligation.
• German and Austrian customers: The EU AI Act applies. But the editorial exemption protects you: if you edit, curate and integrate AI-generated images into your professional work, the labelling obligation for the end product does not apply.
• Creative and artistic works: For content that is evidently creative or artistic (such as architectural visualizations), only a minimal, non-intrusive disclosure is required.

4.4 Copyright and AI-generated content

Swiss law (CopA):
Under the Swiss Copyright Act, only natural persons can be authors (Art. 6 CopA). If you contribute sketches, provide creative direction and edit the result, the output is attributable to your creative contribution. Purely autonomous AI outputs without human control are not protected by copyright.

Our Terms assign all usage rights in the generated content to you. You can use Vizera images in presentations, competitions and marketing.

We only disclose data when necessary for providing our services:

5.1 Hosting and infrastructure

5.2 Payment providers

Payment processing via Stripe:

Payment processing for Vizera AI is handled directly by the payment service provider Stripe. The sole contracting party and payee is AI & Co GmbH (Switzerland). All payment receipts and invoices are issued in the name of AI & Co GmbH.

GDPR role: As a payment service provider, Stripe is an independent controller within the meaning of Art. 4 No. 7 GDPR for payment processing (fraud prevention, KYC, compliance with payment regulations). AI & Co GmbH remains the controller for all other data processing within the Vizera AI platform.

• Data scope: Stripe has access to the data necessary for payment processing (name, email, billing address, transaction data, and where applicable payment method information). Credit card data is processed exclusively by Stripe in a PCI-DSS-certified environment and is not viewable in plain text by AI & Co GmbH.
• Legal basis for data transfer: Contract performance (Art. 6(1)(b) GDPR) — processing the payment is necessary to perform the subscription contract.
• International data transfer: Stripe may transfer data to the USA. The transfer is secured by:
  • Swiss-US Data Privacy Framework (for data from Switzerland)
  • EU-US Data Privacy Framework (for data from the EU/EEA)
  • Standard Contractual Clauses (SCCs) as an additional safeguard
  • Technical safeguards: TLS encryption, PCI-DSS compliance, role-based access restrictions

5.3 AI API services

5.4 Analytics and performance (with consent only)

5.5 Communication

5.6 No disclosure for advertising purposes

There is no disclosure or sale of data to third parties for advertising purposes.

See also our separate retention policy for details.

7.1 Rights under GDPR (EU/EEA)

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent (Art. 7(3) GDPR)

7.2 Rights under nDSG (Switzerland)

• Access (Art. 25 nDSG)
• Release or transfer of your data (Art. 28 nDSG)
• Erasure
• Withdrawal of consent

Please direct enquiries to: privacy@vizera.ai

We respond to enquiries within 30 days.

We implement the following technical and organizational measures:

• End-to-end encryption (HTTPS/TLS 1.2+)
• Encryption of data at rest (AES-256)
• Access restrictions and roles
• Data isolation between projects and organizations
• Audit logs and monitoring
• Hosting on Google Cloud Platform with global security standards (ISO 27001, SOC 2)
• Regular security reviews

See also our separate data security policy (TOMs) for details.

We only use cookies that are technically necessary, as well as (with consent):

• Google Analytics 4
• Platform performance tracking
• Conversion tracking for advertisements

All optional cookies can be disabled via the cookie banner. Details can be found in our Cookie Policy.

You can at any time:

• Delete your account
• Delete your projects
• Withdraw consent
• Unsubscribe from newsletters
• Request deletion of all personal data

Contact: privacy@vizera.ai

Where data is processed outside Switzerland/EU, we ensure:

• Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR
• Adequacy decisions, where available (e.g. Swiss-US Data Privacy Framework)
• Additional safeguards pursuant to Schrems II case law
• Data minimization: only technically necessary data is transmitted

Current third-country transfers:

Switzerland:
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern
www.edoeb.admin.ch

EU (for complaints from EU citizens):
You may contact the data protection supervisory authority in your country of residence.

We update this Privacy Policy as needed, particularly in the event of legal changes or new processing activities. The current version is always available at www.vizera.ai/en/privacy-policy.

AI & Co GmbH
Email: privacy@vizera.ai

As of: 26 June 2026. This Privacy Policy was prepared on the basis of the Swiss nFADP (in force since 1 September 2023), the EU GDPR and the EU AI Act (Regulation (EU) 2024/1689).

We use Vercel Web Analytics (Vercel Inc.) for privacy-conscious audience measurement. According to the provider, the service does not use cookies, stores only anonymized and aggregated usage data, and identifies visitors using a hash that changes daily. Processing is based on our legitimate interest in reliably and securely measuring website usage.

The following optional services are activated only after your explicit selection in the cookie banner:

• Vercel Speed Insights (Vercel Inc.) for performance measurement — Analytics category.
• Microsoft Clarity (Microsoft Corporation) for heatmaps and session analysis — Analytics category.
• Tidio Chat (Tidio LLC) for the optional chat support function — Functional category.

Without the corresponding consent, these optional scripts are not loaded. You can withdraw your selection at any time through the cookie settings; after withdrawal, the page reloads so that previously initialized optional third parties are fully stopped.