Data controller
- Controller
- Modernova Studio LLC, 30 N Gould St, 82801-6317, Sheridan, United States
- Contact
- contact@modernova.studio
Data processed and purposes
| Context | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Visiting vizioa.com | Technical logs: IP address, browser, date, requested page | Website security and operation | Legitimate interest | 12 months |
| Audience measurement (Google Analytics, Contentsquare) | Pages viewed, traffic source, device and browser type, approximate country, interactions with pages, cookie identifier | Measuring traffic, understanding navigation and improving the website | Legitimate interest | 14 months |
| Request form | Name, email, company, website, message, proof of consent | Answering your request | Consent | 24 months |
| Vizioa account | Name, email, login credentials | Creating and managing your account | Performance of the contract | Account lifetime, then 30 days |
| Measurement settings | Website, brand, competitors, tracked prompts | Running the measurements | Performance of the contract | Account lifetime, then 30 days |
| Results | Engine answers, sources, calculated metrics | Displaying dashboards and history | Performance of the contract | Account lifetime, then 30 days |
| Subscription and billing | Billing details, payment history | Collecting payments, issuing invoices | Performance of the contract, legal obligation | 10 years |
| Service emails and alerts | Email address, alert preferences | Sending alerts and service information | Performance of the contract | Account lifetime |
Card details are entered and processed directly by Stripe. They never pass through Vizioa's servers.
Prompts are used to query the engines. Do not include personal or confidential data in them.
Processors and recipients
Your data is never sold or rented. It is only accessible to the providers needed to run the service:
| Provider | Role | Data location |
|---|---|---|
| Hostinger | vizioa.com website hosting and form processing | European Union |
| Supabase | Storage of form requests | Ireland (European Union) |
| OpenAI | Running prompts on ChatGPT | Servers may be located outside the European Union |
| Anthropic | Running prompts on Claude | Servers may be located outside the European Union |
| Perplexity | Running prompts on Perplexity | Servers may be located outside the European Union |
| Running prompts on Gemini, Google AI Overviews and Google AI Mode | Servers may be located outside the European Union | |
| Microsoft | Running prompts on Microsoft Copilot | Servers may be located outside the European Union |
| Google (Google Analytics) | Website audience measurement | Servers may be located outside the European Union |
| Contentsquare | Audience measurement and navigation analysis on the website | European Union |
| Stripe | Subscription payments | Ireland (European Union) and United States |
| Brevo | Sending emails | France (European Union) |
If the list of measured engines changes, this list of recipients will be updated.
Hosting and transfers outside the European Union
Application data is stored in the European Union: the database in Paris and the application in Amsterdam.
To be measured, your prompts are sent to the engine providers (OpenAI, Anthropic, Perplexity, Google, Microsoft), whose servers may be located outside the European Union. In addition, Modernova Studio LLC is established in the United States.
These transfers are governed by the European Commission standard contractual clauses signed with the providers concerned.
Your rights
Under the GDPR, you have the following rights over your data:
- access and copy;
- rectification;
- erasure;
- restriction of processing;
- objection to processing based on legitimate interest;
- portability;
- withdrawal of consent at any time, where processing is based on consent;
- setting instructions regarding your data after your death.
To exercise them, write to contact@modernova.studio. You will receive an answer within one month. You can also lodge a complaint with the CNIL (cnil.fr) or with the data protection authority of your country.
Security
Technical and organisational measures protect your data against loss, unauthorised access and disclosure: HTTPS encryption in transit, access control, hosting in the European Union and regular backups. As no system can guarantee absolute security, any incident affecting your data will be notified to you as required by law.
Changes
This policy may change, in particular when new engines or providers are added. The last update date is shown at the top of the page. Application users will be informed of any significant change by email.