Privacy Policy
VIZLAI LTD. ("Vizipedia", "we", "us", or "our") is committed to protecting the privacy, security, and integrity of personal data processed through the Vizipedia platform (the "Service"). This Privacy Policy explains how we collect, use, store, share, and protect personal data when users access or use Vizipedia.
This Privacy Policy is designed in alignment with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), and reflects industry best practices consistent with ISO/IEC 27001 (Information Security Management) and ISO 9001 (Quality Management).
1. Introduction & Definitions
This Privacy Policy applies to personal data processed by Vizipedia through:
- use of the Vizipedia platform and related services
- creation and interaction with educational games, projects, and AI-generated content
- institutional, educational, and enterprise deployments
Personal data means any information relating to an identified or identifiable individual.
You or Your refers to the individual user, or the organisation or institution on whose behalf the Service is used.
Vizipedia does **not** process employee or job applicant data under this Policy.
2. Company Information
Legal entity: VIZLAI LTD.
Registered address: Sofia, Strahil Voyvoda 2, Bulgaria
Email: [info@vizipedia.ai](mailto:info@vizipedia.ai)
3. Scope & Applicability
This Policy applies globally to:
- students (including minors)
- educators and instructors
- institutional administrators
- business and enterprise users
Additional provisions apply when Vizipedia is used by universities or schools (see Section 17).
4. Lawful Basis for Processing
Vizipedia processes personal data based on one or more of the following legal grounds:
- performance of a contract
- legitimate interests in operating and improving the Service
- compliance with legal obligations
- consent, where required (including parental consent for minors)
5. Personal Data We Collect
Vizipedia collects only data necessary to deliver educational and platform functionality.
5.1 Account & Identity Data
- name or pseudonym
- email address (for educators, administrators, and enterprise users)
- username
- role (student, educator, administrator)
- institutional or organisational affiliation
5.2 Platform Usage & Learning Data
- learning progress and activity
- participation in games, projects, and challenges
- engagement metrics and learning analytics
5.3 User-Generated Content
- games and projects created by users
- text, prompts, educational materials, and uploaded media
- collaborative content based on visibility settings
Vizipedia does not collect payment data and does not use third-party advertising or behavioral analytics services.
6. Children and Minors
Vizipedia supports educational use by minors.
- Accounts for minors are created and managed by institutions or guardians
- Data is processed solely for educational purposes
- Vizipedia does not directly market to minors
- Institutions are responsible for obtaining legally required parental consent
7. How We Use Personal Data
We use personal data to:
- provide, operate, and maintain the Service
- enable game-based and project-based learning
- support collaboration and learning analytics
- administer accounts and institutional access
- improve platform quality, security, and reliability
- comply with legal obligations
8. AI & Content Processing
Vizipedia uses AI technologies to support learning and content creation.
- User content is processed only to provide requested functionality
- Content is not used to train public or external AI models
- Public sharing or reuse occurs only when explicitly enabled by the user or institution
8.1 External AI Providers
Vizipedia may use:
- OpenAI services
- open-source AI models, e.g. Stable Diffusion and Hunyuan3D-2
All AI processing is governed by contractual and technical safeguards.
9. Learning Management & Analytics
Vizipedia provides dashboards and analytics tools for educators and administrators to:
- monitor progress
- identify learning gaps
- support assessment and instruction
Analytics are visible only to authorised users. Vizipedia does not use third-party analytics platforms.
10. Data Sharing
Vizipedia does not sell personal data.
Data may be shared only:
- with institutional administrators within the same organisation upon request
- with trusted infrastructure or AI providers strictly necessary to deliver the Service
- when required by law or valid legal requests
All sharing is subject to confidentiality and data protection obligations.
11. Data Retention
- Retention is controlled by institutional administrators
- Data is retained only as long as necessary for educational or operational purposes
- Upon account deletion or institutional request, data is deleted or anonymised unless legally required otherwise
12. Data Security
Vizipedia applies safeguards aligned with ISO/IEC 27001 best practices, including:
- role-based access controls
- secure authentication
- encrypted storage and transmission where applicable
- security monitoring and incident response procedures
All sharing is subject to confidentiality and data protection obligations.
13. Infrastructure & Hosting
- Hosted in Germany (Hetzner Ltd.)
- European data infrastructure
- High-availability and redundancy measures
14. International Data Transfers
Where data is processed across jurisdictions, Vizipedia applies appropriate safeguards consistent with GDPR requirements.
15. Infrastructure & Hosting
Depending on applicable law, users may have the right to:
- access personal data
- correct inaccurate data
- request deletion or restriction
- object to processing
- request data portability
Requests: info@vizipedia.ai
16. Changes to This Policy
We may update this Privacy Policy to reflect legal, technical, or operational changes. Updates will be published with a revised date.
17. University & Educational Institution-Specific Provisions
17.1 Controller–Processor Roles
- Institutions act as Data Controllers
- Vizipedia acts solely as a Data Processor, processing data only on documented instructions
17.2 Student Data Use Limitations
Vizipedia:
- does not use student data for advertising or marketing
- does not sell or monetise student data
- does not conduct profiling beyond learning analytics
- does not use data for research or publication without institutional approval
17.3 Learning Analytics
Used exclusively for educational purposes and visible only to authorised staff.
17.4 Minors & Consent
- Accounts managed by institutions or guardians
- Institutions ensure parental consent
- No direct marketing to minors
17.5 Intellectual Property & Academic Freedom
Vizipedia does not claim ownership of teaching materials, course content, or student-created work. All rights remain with the creator or institution.
17.6 Data Retention & Exit
Institutions may request deletion, anonymisation, or export of data upon course completion, graduation, or user exit.
Last updated: December 4, 2025
