Privacy Policy

1. Who we are

Gazi Vision is a product of GAZIOFG LTD, a private limited company registered in England & Wales under company number 17069423, with its registered office at 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE ("we", "us", "our").

For personal data collected through our website and waitlist, and for account data about our business customers, we act as the controller. Where a customer connects their ad accounts or storefront and that data contains personal data, we process it as a processor on the customer's behalf under our Terms of Service and any data processing agreement in place.

2. Data we collect

Information you give us

• Waitlist and demo requests: name, work email, store URL, approximate monthly ad spend, and anything you write to us.
• Account information: name, email, company name, role, and login details for your Gazi Vision workspace.
• Support and correspondence: the content of emails and messages you send us.

Information from connected platforms

• Ad platform data (Meta Ads, TikTok Ads) that you authorize: campaign, ad set and ad metadata, creative assets and copy, and aggregated performance metrics such as spend, impressions, clicks, CTR, conversions and ROAS.
• Storefront and analytics data you authorize: product catalogue information, landing page content and aggregated on-site behavior metrics.

We design our integrations to request aggregated, campaign-level data. Where any customer-level personal data is received, it is removed or pseudonymized before analysis.

Information collected automatically

• Technical data such as IP address, browser type, device information and pages visited, collected by our hosting provider's server logs and, within the app, essential session cookies.

3. How and why we use your data

We do not sell personal data, and we do not use your connected account data to build advertising profiles or to serve other customers.

4. AI processing

Gazi Vision uses large language models provided by Anthropic, PBC through its commercial API to analyze account data and generate recommendations and copy variants. Before data is sent for analysis, we remove customer-level personal data and send only the context needed for the requested task.

Use of the Anthropic API is governed by Anthropic's commercial terms and data policies, which you can review on Anthropic's website. We do not use your data to train our own AI models without your explicit permission.

AI outputs are recommendations only. No decision with legal or similarly significant effects on individuals is made solely by automated means, and every change to your ad accounts requires human approval.

5. Sharing and processors

We share personal data only with service providers that help us run Gazi Vision, under contracts that require them to protect it, and only as needed for the purposes above. These include:

• AI model provider: Anthropic, PBC.
• Cloud hosting and infrastructure: Netlify, Inc.
• Form handling: Formspree, for waitlist submissions.
• Email and communication tools: Zoho Corporation Pvt. Ltd.
• Payments: during the private beta we do not collect or process payment card or other payment data. If paid plans launch, payments will be handled by a PCI-DSS compliant provider, and we will update this policy before any payment data is collected.

Ad platforms such as Meta and TikTok are independent controllers of the data they hold; our access is limited to what you authorize through their official APIs. We may also disclose data if required by law, to protect our rights, or as part of a merger, acquisition or sale of assets, in which case we will notify you.

6. International transfers

Some of our providers, including Anthropic, are located in or process data in the United States or other countries outside the UK. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework where applicable), the ICO's International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

7. Retention

• Waitlist data: kept until the beta ends or for up to 24 months, unless you ask us to delete it sooner.
• Account data: kept for as long as your account is active and up to 90 days after closure, then deleted or anonymized.
• Connected platform data: deleted within 30 days of disconnecting an integration or closing your workspace.
• Billing records (once paid plans launch): kept for up to 6 years to meet UK tax and accounting requirements.

8. Security

We use technical and organizational measures appropriate to the risk, including encryption in transit and at rest, least-privilege access controls, read-only API scopes where possible, and access logging. No system is completely secure; if a personal data breach occurs that is likely to affect your rights, we will notify you and the ICO as required by law.

9. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to certain processing, including direct marketing;
• receive your data in a portable format;
• withdraw consent at any time where processing relies on consent.

To exercise these rights, email hello@gazivision.com. We will respond within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we'd appreciate the chance to resolve it first.

10. Cookies and third-party resources

Our marketing website does not use advertising or analytics cookies. The Gazi Vision app uses strictly necessary cookies to keep you signed in. Our pages load fonts and scripts from third-party content delivery networks (such as Google Fonts and public CDNs), which may receive your IP address when delivering those files. If we introduce non-essential cookies, we will ask for your consent first.

11. Children

Gazi Vision is a business service and is not directed at anyone under 18. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a revised "Last updated" date and, for material changes, notify account holders by email.

13. Contact