Privacy Policy

Last updated August 16, 2026

Vi.S.In is built to keep your media private by default. This policy explains what we do and don’t collect.

How photos and video are processed

Pose detection runs in your browser. Photos stay on your device. Video files are sent over an encrypted connection to our server only to extract frames, are processed in a temporary location, and are not retained. Extracted frames and pose results may be cached in your browser's local storage so reopening the same video is faster. You can inspect and clear that cache from the Analyze page; clearing site data also removes it.

What we store

• Account: your email address and a securely hashed password.
• Saved analyses: derived keypoints, joint-angle data, labels, summary metrics, and a skeleton-only thumbnail tied to your account. Source photo and video pixels are not saved in your Library.
• Billing: if you subscribe, Stripe processes your payment and card details. We never receive your full card number — only a customer reference and subscription status.
• Optional measurement: if you choose “Allow measurement,” we send limited product events (for example, that an analysis or sign-up happened) and campaign labels to Google Analytics and privacy-restricted Google Ads measurement. We do not send your media, pose/keypoint data, email, account ID, filenames, free-form text, or advertising click identifiers. Advertising storage, ad user data, and ad personalization remain disabled.

Subprocessors

Running Vi.S.In means a handful of companies process data on our behalf. This is the complete list, what each one touches, and where it happens.

• Amazon Web Services (AWS) — the database (DynamoDB) that holds your account record, saved analyses, presets, and share links. Processed in the US West (Oregon), us-west-2 region.
• Heroku (Salesforce, Inc.) — application hosting. The web servers run here, which means an uploaded video passes through Heroku while it is decoded into frames, and is deleted straight after. United States.
• Stripe, Inc. — subscription payments. Your name, email, and card details are entered on Stripe’s own checkout page and handled by Stripe; we receive only a customer reference and subscription status. United States and Ireland.
• Resend — transactional email only: confirmation and password-reset messages. It receives your email address and the contents of those messages. No marketing mail. United States.
• Cloudflare, Inc. — authoritative DNS for visinai.com, and the network in front of Resend’s email API. DNS sees the address your device looks up, not page content, media, or form data. Global network.
• Google Analytics (Google LLC) — only if you choose “Allow measurement.” It receives the limited aggregate product events described above, never your media, pose data, email, or account ID. United States.
• Sentry (Functional Software, Inc.) — crash and error diagnostics, when enabled. Reports are stripped before they are sent: no email addresses, cookies, request bodies, media, or share links — only the error itself, the route it happened on, and an opaque account ID. United States.

We do not add a subprocessor without updating this list. If you want to be told when it changes, email us at the address below.

What we don’t do

We don’t sell your data, and we don’t use your saved analyses to train models or share them with third parties beyond the service providers needed to run Vi.S.In (hosting, Stripe, analytics).

Your choices

Optional measurement is off until you choose to allow it. You can decline it or change that choice later using “Measurement choices” in the footer; declining does not limit the product. Your choice is stored in your browser. You can also delete any saved analysis from your Library at any time, and you can request deletion of your account and its data by emailing us. Share links can be revoked by deleting the underlying analysis.

Contact

Privacy questions or deletion requests: hello@visinai.com.