Privacy Policy

For visually.space — in accordance with the EU General Data Protection Regulation (GDPR)

1. Data Controller

Your Mother Solutions
Email: yourmothersolutions@gmail.com

Visually is operated as a private, non-commercial project. We process personal data only to the extent necessary for the technical or functional operation of the service.

2. Principles

Local-first by design.The vast majority of your data — presentations, documents, mind maps, media files — is stored exclusively in your browser's local storage (IndexedDB). Nothing is sent to our servers unless you explicitly use a feature that requires it (e.g. Google Drive sync).

No advertising. No tracking. We do not use analytics cookies, tracking pixels, or advertising networks.

No sale of data. We do not sell, trade, or rent your personal data to third parties.

3. Data We Process & Why

3.1 Hosting (Netlify)

Our site is hosted by Netlify, Inc. (USA). Netlify automatically processes server logs containing IP addresses, browser type, referring URLs, and timestamps for security and operational purposes. Data is processed on the basis of our legitimate interest in reliable service delivery (Art. 6 (1) f GDPR). Netlify is a sub-processor under standard data processing terms.

3.2 Authentication (Firebase / Google)

We use Google Firebase Authentication for optional user accounts. If you sign in with a Google account, Google shares your name, email address, and profile picture with us via OAuth 2.0. This data is stored in Firebase (Google Cloud, EU/US regions) and used solely to identify your session and personalise the interface. Legal basis: your consent given at sign-in (Art. 6 (1) a GDPR). You may revoke access at any time via your Google Account settings at myaccount.google.com/permissions.

3.3 Google Drive Sync (optional)

If you enable Google Drive sync, Visually requests access to a dedicated folder in your Google Drive ("Visually") to save and retrieve your presentations. We access only files within that folder. No other Drive content is read. The OAuth token is stored in your browser session only and never on our servers. Legal basis: your explicit consent (Art. 6 (1) a GDPR). You can disconnect Drive sync at any time in Settings.

3.4 Local Storage (IndexedDB)

Presentations, documents, mind maps, workspace data, and session history are stored in your browser's IndexedDB. This data never leaves your device unless you explicitly export it or enable Drive sync. Clearing your browser data will permanently delete this information.

3.5 AI Features (user-provided API keys)

Visually's AI features (AI Cockpit, image generation, presenter notes) require you to provide your own API keys (e.g. OpenAI, Anthropic). Your keys are stored exclusively in your browser's localStorage and are sent directly from your device to the respective AI provider — never to our servers. When you use an AI feature, your prompt content is transmitted to your chosen provider subject to their own privacy policy. Please do not input sensitive personal data into AI prompts.

3.6 Cloudinary (temporary media processing)

Some media conversion features temporarily upload files to Cloudinary. Uploaded files are automatically deleted after approximately 12 hours. Legal basis: legitimate interest in providing the conversion feature (Art. 6 (1) f GDPR).

3.7 Firebase Realtime Database / Firestore

Certain interactive features (live audience view, quiz responses, P2P session metadata, timestamps) temporarily write data to Firebase. This data is typically deleted automatically within 1–2 months or at the end of a presentation session.

4. Data Retention
  • Firebase account data: until you delete your account
  • Local IndexedDB data: until you clear your browser data
  • Cloudinary uploads: automatically deleted after ~12 hours
  • Firebase session/quiz data: automatically deleted within 1–2 months
  • Netlify server logs: per Netlify's standard retention policy
5. Your Rights (GDPR Art. 15–21)

You have the right to:

  • Access — know what personal data we hold about you
  • Rectification — have inaccurate data corrected
  • Erasure — request deletion of your data ("right to be forgotten")
  • Restriction — limit how we process your data
  • Portability — receive your data in a machine-readable format
  • Object — object to processing based on legitimate interest
  • Withdraw consent — at any time, without affecting prior processing

To exercise these rights, contact us at yourmothersolutions@gmail.com. You also have the right to lodge a complaint with a supervisory authority (in Germany: your state's Datenschutzbehörde).

6. Third-Party Services Summary
ServicePurposeLocation
NetlifyHostingUSA
Google FirebaseAuthentication, Realtime DBEU / USA
Google Drive APIOptional sync (user consent)EU / USA
CloudinaryTemporary media processingUSA
AI Providers (user-chosen)AI features (user key)Varies

All US-based processors operate under standard contractual clauses (SCCs) or the EU–US Data Privacy Framework.

Last updated: August 2026