Privacy Policy
Visora ("we", "us", "our") is committed to protecting the personal data you share with us. This Privacy Policy explains what data we collect, how we use it, and your rights under the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") of Hong Kong.
1. Data We Collect
We collect and process the following categories of personal data:
- Google Account & Google Business Profile (GBP) data — when you connect your Google account, we receive OAuth tokens, your GBP listing details (name, address, hours, photos, reviews), and your Google account email address.
- Business information — business name, address, opening hours, photos, and other details you enter directly into Visora.
- Payment data — payments are processed by Stripe, Inc. Visora does not store your card number or full payment details. We retain only your subscription plan status, billing cycle, and Stripe customer ID.
- Usage and analytics data — audit history, AI visibility scores, fix-list progress, and session behaviour (page views, feature interactions). We do not use third-party advertising trackers.
- Account data — email address, display name, and Firebase authentication identifiers.
- Two-Door Calculator submission data (no account required) — when you use the free SoM calculator (
/checkupor/calculator) without signing in, we collect your email address, name, business name, business type, the discovery question(s) you enter, and optional competitor names and revenue figures. This is stored to generate your report and is not linked to an account unless you later sign in.
2. How We Use Your Data
- To deliver and improve the Visora service (audits, fix plans, automated posting, review management).
- To maintain and restore your Google Business Profile settings as authorised by you.
- To process payments and manage your subscription.
- To send transactional emails related to your account (review request emails, security alerts).
- To diagnose errors and improve product quality.
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
3. Third-Party Services
- Google LLC — OAuth authentication and Google Business Profile API. Subject to Google's Privacy Policy.
- Stripe, Inc. — payment processing. Subject to Stripe's Privacy Policy.
- Google Firebase — user authentication and data storage. Subject to Google's Privacy Policy.
- OpenAI / Google Gemini — AI-generated audit insights and reply drafts. No personally identifiable information beyond business name and review text is shared.
- AI answer engines (OpenAI/ChatGPT, Google Gemini, Perplexity) — when you use the Two-Door Calculator, the discovery question(s) and business/competitor names you enter are sent to these services to test whether they mention your business. Your email address and name are not sent to these engines; only the query text is. Results are returned to Visora and stored in your report.
4. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the service. If you close your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law or legitimate business purposes (e.g., financial records).
5. Your Rights Under PDPO
Under the PDPO, you have the right to:
- Access the personal data we hold about you.
- Correct any inaccurate personal data.
- Request deletion of your personal data (subject to legal retention requirements).
- Withdraw consent for optional data uses at any time.
To exercise any of these rights, please contact us at info@visoraco.com. We will respond within 40 days as required under the PDPO.
6. Security
We implement industry-standard security measures including encrypted data transmission (TLS), token-based authentication, and access controls. No system is 100% secure; we will notify you promptly if a data breach affects your personal data.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice at least 14 days before taking effect.
8. Contact Us
For any privacy-related enquiries or to exercise your rights, contact our Data Protection Officer:
Visora
Email: info@visoraco.com
Website: visoraco.com
私隱政策
Visora（「我們」）致力保護您與我們共享的個人資料。本私隱政策說明我們收集哪些資料、如何使用，以及您在香港《個人資料（私隱）條例》（第486章）（「條例」）下的權利。
1. 我們收集的資料
我們收集及處理以下類別的個人資料：
- Google 帳戶及 Google 商家檔案（GBP）資料 — 當您連接 Google 帳戶時，我們將獲取 OAuth 令牌、您的 GBP 商家資料（名稱、地址、營業時間、相片、評論）及 Google 帳戶電郵地址。
- 商業資料 — 您直接在 Visora 輸入的商業名稱、地址、營業時間、相片及其他詳情。
- 付款資料 — 付款由 Stripe, Inc. 處理，Visora 不儲存您的信用卡號碼或完整付款詳情，我們僅保留您的訂閱計劃狀態、計費週期及 Stripe 客戶 ID。
- 使用及分析資料 — 審計記錄、AI 能見度評分、修復清單進度及會話行為（頁面瀏覽、功能互動）。我們不使用第三方廣告追蹤器。
- 帳戶資料 — 電郵地址、顯示名稱及 Firebase 驗證識別符。
- 兩道門計算機提交資料（毋須帳戶） — 當您在未登入情況下使用免費 SoM 計算機（
/checkup或/calculator）時，我們會收集您的電郵地址、姓名、商業名稱、業務類型、您輸入的查詢問題，以及可選的競爭對手名稱及收入數據。此資料用於生成您的報告，除非您其後登入，否則不會連結至任何帳戶。
2. 我們如何使用您的資料
- 提供及改善 Visora 服務（審計、修復計劃、自動發帖、評論管理）。
- 在您授權下維護及還原您的 Google 商家檔案設定。
- 處理付款及管理您的訂閱。
- 發送與您帳戶相關的交易電郵（評論請求電郵、安全警示）。
- 診斷錯誤及提升產品質量。
我們不會為市場推廣目的向第三方出售、出租或交易您的個人資料。
3. 第三方服務
- Google LLC — OAuth 驗證及 Google 商家檔案 API，受 Google 私隱政策約束。
- Stripe, Inc. — 付款處理，受 Stripe 私隱政策約束。
- Google Firebase — 用戶驗證及資料儲存，受 Google 私隱政策約束。
- OpenAI / Google Gemini — AI 生成審計見解及回覆草稿。除商業名稱及評論文本外，不共享可識別個人身份的資料。
- AI 答案引擎（OpenAI/ChatGPT、Google Gemini、Perplexity） — 當您使用兩道門計算機時，您輸入的查詢問題及商業／競爭對手名稱會傳送至這些服務，以測試它們是否提及您的企業。您的電郵地址及姓名不會傳送至這些引擎，僅傳送查詢文本。結果會傳回 Visora 並儲存於您的報告中。
4. 資料保留
我們在您帳戶有效期間或提供服務所需的期間內保留您的個人資料。若您關閉帳戶，我們將於 30 天內刪除或匿名化您的個人資料，但法律或合法業務需要保留的資料（如財務記錄）除外。
5. 您在條例下的權利
根據《條例》，您有權：
- 查閱我們持有的有關您的個人資料。
- 更正任何不準確的個人資料。
- 要求刪除您的個人資料（受法律保留規定約束）。
- 隨時撤回對可選資料用途的同意。
如欲行使上述任何權利，請聯絡我們：info@visoraco.com。我們將按《條例》規定於 40 天內回覆。
6. 安全措施
我們採用業界標準安全措施，包括加密數據傳輸（TLS）、基於令牌的驗證及存取控制。若數據洩露影響您的個人資料，我們將及時通知您。
7. 政策變更
我們可能不時更新本私隱政策。重大變更將於生效前至少 14 天透過電郵或應用程式內通知告知您。
8. 聯絡我們
如有任何私隱相關查詢或欲行使您的權利，請聯絡我們的個人資料保護主任：
Visora
電郵：info@visoraco.com
網站：visoraco.com