Privacy Policy

Last updated: June 2026 · VISIONMADE AI LTD

1. Who is responsible for your personal data?

This Privacy Policy explains how personal data is collected, used and protected in connection with the website and platform available at visionmade.ai and the conversational AI widget known as Vera.

The service is operated by VISIONMADE AI LTD, trading as visionmade.ai, a company incorporated in England and Wales under company number 17173691, with registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

Contact email for privacy matters: [email protected]

Unless a Data Protection Officer is formally appointed, references in this Policy to the privacy contact do not imply that visionmade.ai has appointed a statutory Data Protection Officer.

VISIONMADE AI LTD is registered with the UK Information Commissioner's Office (ICO) under registration number 00013874353.

2. Scope of this Privacy Policy

visionmade.ai is a two-sided AI SaaS service. It is used by business customers who deploy Vera on their own landing pages, and by members of the public who interact with Vera on those landing pages. This Policy covers the following groups:

Creators: coaches, consultants, course providers, business owners or other professional customers who create an account with visionmade.ai, subscribe to the service and deploy Vera on their landing pages.
Visitors: individuals who visit a Creator's landing page and interact with the Vera widget.
Website visitors: individuals who visit the visionmade.ai website, contact us, request information or otherwise interact directly with visionmade.ai.

This Policy should be read together with our Terms and Conditions, Cookie Policy and, where applicable, the Data Processing Agreement entered into with each Creator.

3. Our role under data protection law

Depending on the context, visionmade.ai may act either as a controller or as a processor.

Creators are responsible for ensuring that their own landing pages include appropriate privacy information, AI transparency notices and, where required, consent mechanisms for their visitors. The Vera widget includes a short transparency notice, but this does not replace the Creator's own legal obligations.

4. What personal data do we process?

4.1. Data relating to Creators

When a Creator signs up for or uses the service, we may process:

Identification and contact data, such as name, surname, email address, business name, role and contact details.
Account data, such as login credentials, subscription status, account settings and authentication information.
Business and onboarding data, including information about the Creator's offer, landing page URLs, audience, tone of voice, positioning, FAQs and other information submitted to configure Vera.
Billing and payment-related data. Card details are processed by our payment processor and are not stored by visionmade.ai.
Support and communications data, including emails, support tickets, call notes and feedback.
Usage and technical data, such as IP address, device information, browser type, log data, timestamps and security events.

4.2. Data relating to Visitors interacting with Vera

When a Visitor interacts with Vera on a Creator's landing page, the following data may be processed:

Conversation content — the messages entered by the Visitor and the responses generated by Vera.
Session identifier — a randomly generated identifier used to link the conversation to a specific session or visit. This is not intended to identify the Visitor by name.
Visit events, such as the fact that the Vera widget loaded during the session.
Engagement events, such as whether a conversation was started, continued or completed.
Conversion events, such as whether a Visitor clicked a purchase, booking or call-to-action button after interacting with Vera, linked to the relevant session identifier.
Any personal data voluntarily disclosed by the Visitor during the conversation.

visionmade.ai does not intentionally ask Visitors to provide names, email addresses, payment details or other directly identifying information inside Vera conversations.

4.3. Special category data

Vera is not designed to collect special category data, such as health data, biometric data, political opinions, religious beliefs, trade union membership, sexual orientation or similar sensitive information. Visitors should not include special category data or confidential information in conversations with Vera unless the Creator has expressly informed them that such processing is necessary, lawful and appropriately safeguarded.

4.4. Data relating to website visitors and leads

If you visit our website, contact us, book a call, request information or subscribe to updates, we may process identification, contact, communications, marketing preference, technical and usage data necessary to manage that interaction.

5. Purposes and legal bases

Where visionmade.ai acts as controller, we process personal data for the purposes and on the legal bases described in this Policy. Where visionmade.ai acts as processor for Visitor conversation data, the Creator is responsible for determining and documenting the applicable legal basis.

6. Processing of Visitor conversation data through Vera

Visitor conversation data is processed for the following purposes, subject to the Creator's instructions and lawful basis:

enabling Vera to respond to Visitor messages in real time;
maintaining conversation logs for the Creator's audience intelligence and service review;
generating analytics and insight reports for the Creator;
tracking engagement and conversion events linked to session identifiers;
monitoring abuse, misuse, security issues or attempts to circumvent safety behaviours.

7. Artificial intelligence transparency

Vera is an AI assistant. Visitors must be clearly informed that they are interacting with an AI system before or at the start of the interaction. Vera is designed to support engagement and information about a Creator's offer. It is not intended to provide legal, medical, financial, therapeutic or other regulated professional advice. AI-generated responses may be incomplete, inaccurate or inappropriate in some circumstances.

8. Cookies, session identifiers and similar technologies

The Vera widget uses a session identifier to link a conversation to a specific visit. Strictly necessary technologies may be used without consent where they are required to provide the service. Non-essential cookies or similar technologies will only be used where the required consent has been obtained. Please see our Cookie Policy for full details.

9. Who may access personal data?

We may share or make personal data available to the following categories of recipients where necessary:

Hosting and infrastructure providers, including Hetzner (EU data centres in Germany and Finland);
Database and backend service providers, including Supabase (EU region);
AI model providers, including OpenAI, where conversation messages are sent through the API to generate Vera's responses;
Security, CDN and network providers, including Cloudflare;
Payment, email, CRM, analytics, customer support and productivity providers;
Professional advisers, public authorities, courts or regulators where required by law.

We do not sell Visitor conversation data to third parties.

10. International transfers

Conversation logs and application data are hosted in the European Union through EU-based infrastructure providers, including Hetzner and Supabase. However, some service providers may be established outside the EEA or the United Kingdom. In particular, conversation messages may be processed by OpenAI through its API, and traffic may pass through Cloudflare's global network.

Where personal data is transferred outside the EEA or the United Kingdom, visionmade.ai will ensure that appropriate safeguards are in place, including Standard Contractual Clauses or other legally recognised transfer mechanisms.

Personal data submitted to OpenAI through the API is not intended to be used by OpenAI to train or improve its models, unless visionmade.ai expressly enables such data sharing under the applicable OpenAI account settings.

11. How long do we keep personal data?

We retain personal data only for as long as necessary for the purposes for which it was collected, including to provide the service, comply with legal obligations, resolve disputes and enforce agreements. Where data is anonymised so that individuals can no longer be identified, it may be retained for statistical, security or business intelligence purposes.

12. Your rights

Subject to applicable data protection law, you may have the following rights:

Right of access — to obtain confirmation and access personal data we hold about you.
Right to rectification — to request correction of inaccurate or incomplete data.
Right to erasure — to request deletion of personal data in certain circumstances.
Right to restriction — to request restriction of processing in certain circumstances.
Right to object — to object to processing based on legitimate interests or to direct marketing.
Right to data portability — to receive certain data in a structured, machine-readable format.
Right to withdraw consent — where processing is based on consent, to withdraw it at any time.

Requests can be sent to [email protected]. Because Visitor conversations are normally linked to a session identifier rather than a name or email address, we may ask you to provide the Creator's page, approximate date and time of interaction and any session reference displayed to you.

13. Complaints

If you believe that your personal data has not been processed in accordance with applicable data protection law, you may contact us first at [email protected].

As VISIONMADE AI LTD is incorporated in the United Kingdom and registered with the ICO, the ICO is our primary supervisory authority: ico.org.uk

Where the EU GDPR applies, individuals located in the European Union may also lodge a complaint with the supervisory authority in their EU Member State of residence.

14. Security

We implement technical and organisational measures designed to protect personal data, including hosting on EU-based infrastructure, encrypted connections, server-side storage of API keys and system prompts, access controls, rate limiting, abuse monitoring and CORS controls. No internet-based service can be guaranteed to be completely secure.

15. Children

The service is not intended for use by children under the age of 16. If we become aware that personal data relating to a child has been collected inappropriately, we will take reasonable steps to delete it.

16. Creator responsibilities

Creators who deploy Vera are responsible for providing clear privacy information to Visitors, informing Visitors that Vera is an AI assistant and that conversations may be logged, determining the lawful basis for processing Visitor data, obtaining consent where required, and ensuring their landing pages include compliant cookie and tracking notices.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify active Creators by email within a reasonable period before the changes take effect. The version published on the website at any time is the version in force.

18. Contact

VISIONMADE AI LTD, trading as visionmade.ai
Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Email: [email protected]