Privacy Policy

About this policy

This policy explains how SALTVISION BV collects and uses personal data when you visit vysora.eu, create a Vysora account, use Vysora Kitchen, Vysora Studio, Vysora Showroom or Vysora Atelier, or work with us on a Vysora Enterprise project.

It is written to meet Articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679. It should be read together with our Terms of Service.

1. Who is responsible for your data

1.1 The controller is SALTVISION BV, a company incorporated in Belgium, with registered office at Waregemsesteenweg 157a, 9770 Kruisem, Belgium, registered under enterprise and VAT number BE 0786.771.552.

1.2 For any question about this policy or about your personal data, contact mohsen@saltvision.com, or write to us at the address above.

1.3 We have not appointed a data protection officer, as we are not required to do so. The contact above handles all privacy matters.

2. When we are not the controller

2.1 Our customers use Vysora to build and publish their own configurators and designs. When a visitor interacts with a configurator published by one of our customers — for example by requesting a quote — that customer decides why and how the data is used. The customer is the controller, and we act only as a processor on their instructions under a data processing agreement.

2.2 If you have used a configurator on another company’s website and want to exercise your rights over that data, contact that company. If you contact us instead, we will pass your request on to them and tell you that we have done so.

2.3 The same applies to personal data contained in files that a customer uploads to Vysora, such as project documents or client details inside a design.

3. What data we collect

3.1 Account and profile data. Your name, email address, password in hashed form, company name, company address, enterprise or VAT number, job role if you give it, language preference, and the plan you are on.

3.2 Billing data. Plan, price, currency, billing period, invoices, payment status and transaction references. Card and bank details are entered directly with our payment provider and are processed by them, not stored by us.

3.3 Content data. The 3D models, CAD files, textures, images, product data, room plans, configuration rules, designs and project files you upload or create. This is mostly not personal data, but it can contain personal data if you put it there — a client’s name on a kitchen plan, for example.

3.4 Usage and technical data. IP address, browser and device type, operating system, referring page, pages and features used, dates and times, session identifiers, storage consumed, number of configurator views, and error and diagnostic logs.

3.5 Communication data. Messages you send us by email, through the contact form or the demo booking form, support requests, and our replies. This includes your name, email address, phone number if you give it, and anything else you choose to tell us.

3.6 Marketing data. If you subscribe to updates, your email address and whether you opened or clicked a message. You can unsubscribe at any time from any message we send.

3.7 We do not collect special categories of personal data, and we ask you not to upload them.

4. Why we use it, and on what legal basis

4.1 To create and run your account, provide the services, store and process your content, and publish your configurators. Legal basis: performance of the contract with you (Article 6(1)(b)).

4.2 To take payment, issue invoices and keep accounting records. Legal basis: performance of the contract, and compliance with a legal obligation for the accounting records we must keep under Belgian law (Article 6(1)(b) and (c)).

4.3 To answer your questions, provide support, and handle complaints. Legal basis: performance of the contract, or our legitimate interest in responding to people who contact us (Article 6(1)(b) and (f)).

4.4 To keep the platform secure, prevent abuse, enforce plan quotas, count configurator views, investigate incidents and back up data. Legal basis: our legitimate interest in a secure and correctly billed service (Article 6(1)(f)).

4.5 To understand how the services are used and to improve them, using aggregated and where possible anonymised information. Legal basis: our legitimate interest in improving what we offer (Article 6(1)(f)).

4.6 To send you service messages about your account, billing, security or material changes to the services. Legal basis: performance of the contract and our legitimate interest in keeping you informed (Article 6(1)(b) and (f)). You cannot unsubscribe from these while you hold an account, because you need them.

4.7 To send marketing emails about Vysora. Legal basis: your consent, or our legitimate interest in contacting existing customers about similar services, in each case with an unsubscribe link in every message (Article 6(1)(a) and (f)).

4.8 To comply with legal obligations and to establish, exercise or defend legal claims. Legal basis: compliance with a legal obligation, and our legitimate interest in defending our rights (Article 6(1)(c) and (f)).

4.9 Where we rely on legitimate interest, we have weighed that interest against your rights and freedoms. You can object at any time — see clause 8.

5. Who we share it with

5.1 We do not sell personal data, and we do not share it for advertising profiling.

5.2 We share personal data with the following categories of recipients, each only to the extent needed:

• Hosting and infrastructure for our web applications — Netlify, Inc.
• Database, authentication, file storage and related cloud services — Google Firebase and Google Cloud Platform, provided by Google.
• Website hosting and membership management for vysora.eu, including the WordPress environment and the membership plugin that manages accounts and subscriptions.
• Our payment service provider, who processes card and bank payments and holds the payment data associated with your subscription.
• Email and communication providers used to send service and support messages.
• Professional advisers such as our accountant and lawyers, where they need the data to advise us.
• Public authorities, courts or regulators, where we are legally required to disclose.
• A buyer or successor, if we sell or reorganise all or part of our business, subject to the same protections.

5.3 The providers listed above act as our processors. They are bound by a written agreement that limits them to processing on our instructions and requires appropriate security. We keep a current list of these providers and give it to customers on request.

5.4 Where you connect Vysora to a third-party system yourself, or embed a configurator in your own website, that system and that website are governed by their own privacy notices, not this one.

6. Where your data is stored, and international transfers

6.1 We aim to store and process personal data within the European Economic Area, and to select European regions with our cloud providers where they are available.

6.2 Some of our providers are established in the United States or operate global infrastructure, so personal data may be transferred outside the EEA. Where that happens, the transfer is protected by an adequacy decision of the European Commission, by the European Commission’s standard contractual clauses together with the additional safeguards agreed with the provider, or by another lawful transfer mechanism.

6.3 You can ask us for information about the safeguards that apply to a specific transfer by writing to mohsen@saltvision.com.

7. How long we keep it

7.1 Account and profile data: for as long as your account exists, and then for up to 12 months, so that the account can be restored if you come back or if a dispute arises.

7.2 Project files and uploaded content: available for export for 30 days after your subscription ends, and then scheduled for deletion, as described in our Terms of Service. Copies in routine encrypted backups disappear in the ordinary backup rotation.

7.3 Invoices, payment records and accounting data: for the period required by Belgian accounting and tax law, which is currently seven years.

7.4 Security and server logs: normally up to 12 months, and longer only where an incident is being investigated.

7.5 Support and other correspondence: normally up to three years after the last exchange.

7.6 Marketing data: until you unsubscribe or withdraw your consent, and a minimal record afterwards so that we do not contact you again.

7.7 Where a legal claim, obligation or investigation requires it, we keep the relevant data until the matter is closed.

8. Your rights

8.1 You have the right to ask us for a copy of the personal data we hold about you, to have inaccurate data corrected, to have data erased, to have processing restricted, and to receive data you gave us in a structured, commonly used and machine-readable format so you can move it elsewhere.

8.2 You have the right to object to processing based on our legitimate interest, on grounds relating to your particular situation. You can object to direct marketing at any time, with no reason needed, and we will stop.

8.3 Where we process on the basis of consent, you can withdraw that consent at any time. Withdrawal does not affect processing that took place before you withdrew.

8.4 To exercise any of these rights, email mohsen@saltvision.com. We answer within one month, and tell you if we need longer because the request is complex. We may ask you to confirm your identity before we act.

8.5 If you are not satisfied, you can complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be, www.dataprotectionauthority.be. You can also complain to the supervisory authority of the EU country where you live or work.

9. Cookies and similar technologies

9.1 vysora.eu uses cookies that are strictly necessary to make the site work: keeping you logged in, remembering your session, securing forms, and managing your membership and checkout. These do not require your consent.

9.2 We do not currently use analytics, advertising or social media tracking cookies on vysora.eu.

9.3 If we introduce analytics or marketing cookies, we will ask for your consent through a banner before they are placed, and this policy will be updated to describe them. You will be able to change or withdraw your choice at any time.

9.4 You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop parts of the site, including login and checkout, from working.

10. Security

10.1 We apply technical and organisational measures appropriate to the risk, including encryption of data in transit, access control on a need-to-know basis, hashed passwords, multi-factor authentication for administrator accounts, logging, and regular backups.

10.2 No system is completely secure. If a personal data breach is likely to result in a high risk to your rights and freedoms, we will inform you without undue delay, and we will notify the competent supervisory authority as required by law.

10.3 Keep your own credentials confidential, and tell us at info@vysora.eu if you think your account has been accessed by someone else.

11. Automated decision-making

11.1 We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you, and we do not carry out profiling of that kind.

12. Children

12.1 Vysora is intended for businesses and for adults. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

13. Changes to this policy

13.1 We may update this policy when our services, providers or legal obligations change. The version and date at the top show when it was last revised.

13.2 If a change materially affects how we use your personal data, we will tell you by email or through your account before it takes effect.

14. Contact

14.1 Privacy questions and requests: mohsen@saltvision.com.

14.2 General enquiries: info@vysora.eu or +32 56 62 51 95.

SALTVISION BV — Waregemsesteenweg 157a, 9770 Kruisem, Belgium — Enterprise and VAT number BE 0786.771.552 — info@vysora.eu — privacy: mohsen@saltvision.com