How Visualify handles your data
RiskAI is a product of Visualify. This Privacy Policy describes how Visualify collects, uses, stores, and shares information when you use Visualify websites, RiskAI, support interactions, and other services that link to this policy.
1. Information we collect
We collect information in three main categories.
We collect information directly from you or your organisation when you create or use an account, enter information into RiskAI, contact us for support, or otherwise interact with our services. We also collect certain product and technical information automatically when RiskAI is used.
Account information
Details needed to create and manage a RiskAI account, which may include:
- Name
- Email address
- Company or organisation
- Profile and authentication information
Product and technical information
Information generated when people use RiskAI, which may include:
- Features and pages used
- Product events and session activity
- Timestamps
- Device and browser information
- Diagnostics and performance information
- Authentication and security events
Customer Workspace Data
Customer organisations control what project information is entered into their RiskAI workspace and which authorised users can access it. Depending on how a workspace is used, that content may include:
- Projects and project settings
- Risk registers and risk descriptions
- Risk owners or other people identified in project records
- Mitigation actions and responsibilities
- Notes and commentary
- Cost and schedule inputs
- Monte Carlo simulation inputs, results, and distributions
- Locked reporting-month snapshots and historical project results
- Coverage and data-quality information
- Generated reports
- Uploaded files or documents where applicable
Billing and transaction information
When you start a paid subscription, add payment details, or otherwise make a payment, we may collect or receive billing and transaction information. That may include:
- Billing name and contact details
- Organisation or company billing details
- Subscription plan, trial status, and renewal information
- Payment status, invoices, receipts, and related transaction records
- Limited payment-method metadata returned by the payment provider (for example, card brand and last four digits)
Payments are processed by Stripe or another payment provider appointed by Visualify. Where the payment provider handles card entry and processing, Visualify does not need to directly store full payment-card details.
2. How we use information
Visualify uses information to:
- Provide and operate RiskAI
- Authenticate users
- Maintain customer workspaces
- Perform simulations, analytics, and reporting requested by users
- Provide support
- Monitor reliability, performance, and security
- Prevent misuse and abuse
- Manage subscriptions and process payments
- Issue invoices and receipts
- Prevent fraud and provide billing support
- Comply with legal and accounting obligations
Visualify does not sell personal information.
Customer Workspace Data is primarily used to provide, support, and secure the service. Visualify may use aggregated or de-identified information to understand product performance and improve RiskAI where that information does not identify a customer, user, or project.
3. AI and quantitative simulation
RiskAI's core quantitative risk calculations and Monte Carlo simulations do not require generative AI. Those calculations are performed by RiskAI's simulation engine based on the inputs authorised users provide.
Certain optional RiskAI features may use AI to analyse, organise, summarise, or explain information. When a user intentionally uses an AI-enabled feature, only information reasonably required to perform that request may be processed by the relevant AI provider.
Customer Workspace Data is not used to train generative or foundation AI models operated by Visualify or third-party providers unless the customer expressly agrees otherwise.
AI-generated information may be incomplete or inaccurate and should be reviewed before being relied upon.
4. Customer data ownership and control
The customer organisation controls the project information submitted to its RiskAI workspace. Visualify processes that information to provide and secure RiskAI. This policy does not transfer ownership of customer project information to Visualify.
5. Service providers and international processing
Visualify uses service providers to help operate RiskAI, including for functions such as:
- Hosting
- Databases
- Authentication
- Analytics and performance monitoring
- Payment processing
- AI services where an AI feature is used
These providers process information on Visualify's behalf only as needed to deliver the relevant service. Some service providers may process or store information outside Australia. Payment providers such as Stripe may also process billing and payment information under their own privacy terms.
6. Security
Visualify applies administrative, technical, and organisational measures intended to protect information, including:
- Authentication controls
- Workspace-level access controls
- Least-privilege practices
- Encryption in transit
- Separation of customer workspace access
- Monitoring and logging
- Secure infrastructure and ongoing security maintenance
No online service is perfectly secure. If we learn of an incident that affects you, we will notify you when required by law and handle it according to our security practices.
7. Data retention
Visualify retains information only for as long as reasonably required to:
- Provide RiskAI
- Maintain security and backups
- Satisfy contractual requirements
- Meet legal and accounting obligations
Information may subsequently be deleted or de-identified where appropriate.
8. Your rights and choices
Subject to applicable law, you may:
- Access personal information held about you
- Request correction of inaccurate or outdated personal information
- Update your account information
- Request account deletion, subject to legitimate legal or operational retention requirements
- Raise privacy questions or complaints
There is an important distinction between your own RiskAI account and information contained within a customer organisation's project records.
If someone's information appears within customer-controlled project records—including historical or locked reporting snapshots—Visualify may need to coordinate the request with the relevant customer organisation. Deleting a user account does not automatically delete customer project history.
9. Privacy complaints
If you have a privacy complaint, contact us at [email protected]. Visualify will investigate privacy complaints and aim to respond within 30 days.
If you are not satisfied with our response, you may also contact the Office of the Australian Information Commissioner where appropriate.
10. Contact
Privacy questions or requests:
Email: [email protected]Website: visualify.com.au