Privacy Policy

Visneo, Inc. ("Visneo," "we," "us," "our") operates a software-as-a-service platform that deploys AI agents to perform operations for independent retail businesses (our "Customers"). We care about your Personal Information and are committed to protecting it in compliance with this Privacy Policy. This Privacy Policy explains how we collect, use, disclose, and process your Personal Information through our Services (defined below). This Privacy Policy does not apply to data or other content we process on behalf of our Customers. Our use of that data is governed by our Customer agreements.

WHO WE ARE AND WHAT THIS COVERS

1.1 Entity. Visneo, Inc. is a Delaware corporation with its principal place of business at 2901 W Armitage Ave, Chicago, IL 60647.

1.2 Scope. This Privacy Policy applies to the Personal Information we collect through (a) the Visneo AI-assisted operating platform (the “Platform”), the agents (“Agents”) running on the Platform, as applicable, APIs, and related services; (b) the Visneo website at visneo.ai (the "Site"); and (c) communications we send (email, SMS, product notifications). We refer to these collectively as our “Services.”

1.3 What this Privacy Policy does not cover. Third-party services a Customer connects to the platform (Section 6); our Customers' own privacy practices toward their employees, suppliers, and end users (each Customer is responsible for its own notices); and Visneo's employee/applicant data, which is covered by a separate internal notice. Where we are acting on behalf of our Customers, we process Customer data only on the Customer's instructions, only to provide the Services, and only as permitted by law and our agreement with that Customer.

1.4 Key terms.

As used in this Privacy Policy, “Personal Information” means information about an identified or identifiable natural person.

“Aggregated Data” means data derived from use of our Services that does not identify any individual and is safeguarded against re-identification.

PERSONAL INFORMATION WE COLLECT AND SOURCES OF INFORMATION

• A. Identifiers — Examples: Name, business email, phone, company, job title, IP address, account username, mailing address; Source: You (signup forms, sales calls); our payment processor
• B. Financial Information — Examples: Billing contact information, billing address, tokenized payment metadata (we do not store payment card numbers); Source: Our payment processor and other financial service providers
• C. Internet / network activity and usage information — Examples: Pages visited, referring page, device type, browser type, Platform activity, information collected through cookies; Source: Automatically
• D. Coarse geolocation — Examples: Approximate city/region from IP address; Source: Automatically
• E. Professional info — Examples: Job title, company, industry; Source: You (forms); B2B enrichment vendors
• F. Inferences — Examples: Product interest, buying stage; Source: Derived from the above

2.1 Sensitive Personal Information. We do not intentionally collect “Sensitive Personal Information” as defined under certain data privacy laws (government IDs, individuals' financial-account credentials, precise geolocation, biometric, health, or similar). If you submit it inadvertently, please contact us using the information below and we will take appropriate measures to delete it.

2.2 Children. The Services are not directed to, and we do not knowingly collect data from, anyone under 16. If you believe we have any Personal Information collected from a child under age 16, please contact us using the information below and we will take appropriate measures to delete that information.

2.3 Cookies and tracking

We use cookies and similar technologies that are strictly necessary (authentication, session, security; cannot be disabled) or functional (they help remember preferences and other Site functions). We do not use tracking for cross-context behavioral or targeted advertising. You may refuse to accept or disable cookies by activating the appropriate setting on your browser or device. However, if you select this setting, you may be unable to access certain features of the Services.

HOW WE USE PERSONAL INFORMATION WE COLLECT DIRECTLY

3.1 We use it to: (a) provide, operate, and secure the Services and Site; (b) authenticate and manage accounts; (c) bill, invoice, and report tax; (d) provide support and service communications (incident, renewal, and policy-change notices); (e) market to business prospects and Customers, with opt-out in every marketing email and compliant consent for SMS/text messaging (Section 8.2); (f) run product analytics and improvement; (g) prevent fraud and enforce our terms of service and terms of use, as well as any other contracts; (h) comply with law; and (i) evaluate and process corporate transactions (financing, mergers or acquisitions, reorganization, or restructuring).

We may use Aggregated Data to improve the Services, build features, generate industry benchmarks, and train and refine our AI models, subject to these safeguards: (a) the data does not identify any individual; and (b) we commit to maintaining any such information in de-identified form.

3.2 AI processing

The Platform uses third-party AI providers to power agent functionality. We use commercially reasonable efforts to engage providers under terms that prohibit them from using any Personal Information for any model training and to configure these integrations to disable training on Customer data.

WHO WE SHARE INFORMATION WITH

We disclose Personal Information as described below:

• To our subsidiaries and affiliates.
• To service providers and third parties (also called subprocessors) we use to support our organization and who are bound by contractual obligations to keep Personal Information confidential and use it only for the purposes for which we disclose it to them. Our subprocessors are identified in our subprocessor list here.
• To professional advisors (lawyers, auditors, accountants) under confidentiality provisions.
• To law enforcement or regulators, or to comply with a valid legal process or subpoena, or to enforce our terms or protect the rights, property, security, or safety of Visneo, our customers and users, or others.
• To an acquirer or successor in a merger, acquisition, restructuring, reorganization, dissolution, financing, or other sale or transfer of our assets.

We do not sell Personal Information as defined under applicable law, and we do not share it for cross-context behavioral advertising.

THIRD-PARTY INTEGRATIONS AND LINKS

The Platform connects to third-party systems (“Integrations”) at each Customer's direction. When a Customer connects one: (a) data flows in both directions as the Customer configures; (b) we process the data only to perform the actions the Customer authorizes; (c) the provider has its own privacy practices, which we do not control; (d) we connect only to business accounts, not personal accounts or personal payment methods; (e) we do not directly receive or process any payment card data; and (f) the Customer is responsible for complying with each provider's terms and obtaining any required end-user consents.

Before enabling an Integration, you should review that third party’s privacy policy. Our Services may also link to third-party websites (such as social media) for your convenience. By clicking on these links, you provide information directly to those third parties. We are not responsible for the practices of any such third parties and we do not endorse or speak for those third parties.

DATA RETENTION

We keep the categories of Personal Information described in this Privacy Policy for as long as reasonably necessary to fulfill the purposes described or for as otherwise legally permitted or required, such as maintaining the Services, operating our organization, complying with our legal obligations, resolving disputes, and for safety, security, and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm, and the nature of the information when deciding how long to retain Personal Information. At the end of the retention period, Personal Information will be deleted, destroyed, or deidentified.

Our retention periods for certain types of Personal Information covered by this Privacy Policy are below:

• Activity log — Retention: At least 7 years, to support audit and regulatory needs (longer if law or a legal hold requires).
• Security / access logs, fraud signals — Retention: Up to 2 years.
• Billing, invoice, tax records — Retention: 7 years after the applicable tax year, or longer if required by law.
• Account / authentication records — Retention: During the subscription + 2 years.
• Marketing data — Retention: Up to 3 years from last engagement, or until opt-out (with copies kept to process suppressions as needed).
• Aggregated Data — Retention: Indefinitely, subject to internal safeguards.
• Data subject to a legal hold — Retention: Until the hold is released. This may override above retention periods where applicable.

SECURITY

We maintain an information security program with commercially reasonable administrative, physical, and technical measures designed to protect Personal Information and other data entrusted to us. Such measures include:

• Encryption in transit (TLS 1.2+) and at rest, with application-layer encryption for sensitive fields such as integration credentials;
• Role-based access controls;
• Audit logging of privilege-relevant actions; and
• Personnel access on a need-to-know basis.

No security program is perfect, and no company can guarantee the security of information transmitted over the internet. Any transmission of Personal Information is at your own risk.

YOUR PRIVACY RIGHTS AND CHOICES

8.1 Privacy choices. This section describes mechanisms you can use to control certain uses and disclosures of your information and your choices about your information.

• Cookies and other tracking technologies: You can set your browser to refuse all or some browser cookies or other tracking technology files, or to alert you when these files are being sent. If you disable or refuse cookies or similar tracking files, some Services features may be inaccessible or not function properly.
• Promotions by Visneo: If you do not wish us to use your information to promote our own Services, you can opt out by clicking the “unsubscribe” link in any marketing email we send you or by opting out of SMS/text messages as described in Section 8.2 below. Please note that if you unsubscribe or opt out of promotional emails and SMS/text messages, we may still send you transactional or operational emails.

8.2 SMS/text messaging

If you provide a mobile number and opt in, we may send SMS/text messages about your account, your store's operations, and our products or services that may be of interest to you.

• Consent is by your affirmative opt-in. We obtain your prior express written consent to receive marketing or promotional texts (for example, by having you provide your mobile number and separately agree to receive marketing messages). For transactional or operational messages, you consent to receipt of such messages by providing your mobile number and agreeing to receive messages from us. SMS/text messaging consent is not a condition of purchase, and we do not share mobile opt-in or SMS/text messaging consent data with third parties for their marketing.
• Content is transactional/operational or promotional. Transactional/operational content includes compliance reminders, inventory and ordering alerts, financial and security notices, and approval requests. Promotional or marketing messages may include information about our products or services you may be interested in.
• Frequency varies based on your account activity.
• Opt-out: reply STOP to opt out (we send one confirmation, then stop). Reply HELP or email support@visneo.ai for help.
• Cost: message and data rates may apply; carriers are not liable for delayed or undelivered messages.

If you are a Customer with us, you may also access, correct, or delete certain Personal Information we may hold about you in your account. You can do so by logging into your account and adjusting your settings. Please note that if you opt out of SMS/text messaging from us, we may still send you transactional or operational emails.

8.3 How to exercise your options

• Email: privacy@visneo.ai
• Mail: Visneo, Inc., Attn: Privacy, 2901 W Armitage Ave, Chicago, IL 60647

We verify your identity before responding and respond within the timeframe provided by law. Authorized agents may submit requests with verifiable written permission. You may also be able to make changes to your account settings if you have a Customer account with us.

8.4 If you are a Customer's end user

If you are a customer, supplier, or employee of a business that uses our Platform and want to exercise rights over information held by that business, please contact the business directly.

8.5 California-specific notices

Under California's "Shine the Light" law (Civ. Code §1798.83), we do not disclose Personal Information to third parties for their direct marketing. We do not currently respond to browser “Do Not Track” signals.

AI DISCLOSURES

Our Agents are designed for retail operations (inventory, pricing, supplier communication, ordering, reconciliation, labor scheduling), supported by humans. Agents are not designed or intended to make any decisions about an individual person.

We do not use your Personal Information to make automated decisions about you that produce legal or similarly significant effects. If you have any questions about a Customer’s use of our Agents or Services, please contact that Customer. If you have any questions about our AI practices, please contact privacy@visneo.ai.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy and will post the new version with an updated "Last Updated" date. We will provide notice of any such changes to this Privacy Policy as required by law. Continued use after the effective date constitutes acceptance of the revised Privacy Policy.

CONTACT US

Visneo, Inc., Attn: Privacy, 2901 W Armitage Ave, Chicago, IL 60647, USA

• Privacy and data-subject requests: privacy@visneo.ai
• Legal / notices: legal@visneo.ai