Who is responsible
The data controller is Visibee, based in Italy.
Contact for anything about privacy: hello@visibeeagency.com
Data we use for free previews
To build free website previews for businesses, we use public information about the business:
- business name, address, phone number and opening hours;
- public reviews and photos from Google;
- public Instagram and Facebook business profiles.
Reviews may include the public name of the reviewer as it appears on Google.
Previews are not indexed by search engines, expire after 14 days and are deleted earlier on request.
How we contact businesses
We contact businesses by direct message on Instagram or Facebook to show them their free preview.
If a business tells us it's not interested, we don't contact it again. To make sure of that, we keep only the minimum needed: the business name and the profile we contacted.
Data of our customers
When you become a customer, we process:
- your name, email address and phone number;
- the details needed to register your domain in your name (name, address, email, phone);
- the logo, photos and text you send us;
- your change requests and messages;
- payment and billing records. Card details are handled by Stripe. We never see or store your full card number.
This website
This website does not use analytics, advertising pixels or tracking cookies. Fonts are served from our own server. Our hosting provider keeps standard server logs (such as IP address and pages requested) for security. See our Cookie Policy.
If you write to us through the contact form or by email, we use what you send only to reply to you.
Why we use data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Building free previews from public business information | Legitimate interest: offering our services to businesses using information they made public. |
| Contacting businesses by direct message | Legitimate interest. You can object at any time and we stop. |
| Providing your website and support | Performance of our contract with you. |
| Payments, invoices and tax records | Contract and legal obligation. |
| Keeping a "do not contact" list | Legitimate interest: respecting your request not to be contacted again. |
| Security and server logs | Legitimate interest: keeping our services safe. |
Who helps us (processors)
We use these providers to run our service. They process data only on our instructions.
| Provider | What for |
|---|---|
| Stripe | Payments. We don't store card details. |
| Cloudflare | Hosting of customer websites and previews. |
| Supabase | Database. |
| Aruba | Email and hosting of this website. |
| Namecheap | Domain registration. |
| Anthropic | AI that writes website text and interprets change requests. |
| Public business information (Google Maps / Business Profile). | |
| Apify | Finding public social media business profiles. |
| Telegram | Internal notifications to our team. |
Transfers outside the EU
Some of these providers are based in, or process data in, the United States or other countries outside the EU. When that happens, we rely on appropriate safeguards: the EU-US Data Privacy Framework where the provider is certified, or the European Commission's Standard Contractual Clauses.
How long we keep data
- Customers: for as long as the contract lasts, then for as long as required by tax and accounting law (in Italy, generally 10 years for invoices and accounting records).
- Previews: 14 days, or less if you ask us to delete them.
- Businesses not interested: only the business name and contacted profile, so we don't contact them again.
- Server logs: for the period set by our hosting provider for security purposes.
Your rights (GDPR)
You can ask us to:
- access the data we have about you;
- correct it;
- delete it;
- restrict how we use it, or receive a copy in a portable format;
- stop using it (object), including for direct messages.
Write to hello@visibeeagency.com. We reply within 30 days. You can also complain to the Italian data protection authority (Garante per la protezione dei dati personali, garanteprivacy.it) or to the authority in your country.
To delete your data, see also our Data Deletion page.
California residents (CCPA/CPRA)
If you live in California, you have the right to:
- know what personal information we collect, why, and who we share it with (this page explains it);
- ask us to delete it;
- ask us to correct it;
- not be discriminated against for using these rights.
We do not sell or share your personal information for money or for cross-context behavioral advertising, and we have not done so in the last 12 months.
To use your rights, email hello@visibeeagency.com. We may ask for information to confirm the request comes from you. You can also use an authorized agent.
Children
Our services are for businesses. We don't knowingly collect data from children under 16.
Security
We use encrypted connections (HTTPS), access controls and reputable providers to protect data. No system is 100% secure, but we take reasonable steps to keep your data safe.
Changes to this policy
We may update this policy. We change the "Last updated" date at the top and, for important changes, we email our customers.