Privacy Notice

1. Who we are

NOW Strategies LLC, trading as Vezlo, is the data controller for the personal data described in this notice. That means we decide how and why your personal data is processed when you use Vezlo. For any privacy question or request, email support@vezloapp.com.

2. What personal data we collect

• Account data — email address, name, password credentials (stored hashed by our authentication provider), language preference, and plan tier.
• Business and content data — the answers you give in the Business DNA interview, business plans, reel scripts, carousels, hooks, calendar entries, revenue and performance figures you log, and reels or links you upload or submit for scoring.
• Support data — messages and attachments you send us.
• Usage and technical data — feature usage counts, request logs and diagnostic traces, error reports, approximate location derived from IP address, IP address, browser and device identifiers.
• Subscription status — plan, environment, renewal state and status received from our Merchant of Record. We do not collect or store your card details.

3. Why we use it, and our legal basis

• Create and manage your account — account and login data. Basis: performance of our contract with you.
• Provide the Service — process your Business DNA, generate plans and content, score scripts and uploaded videos, run research features, enforce plan usage limits. Basis: performance of our contract.
• Security and fraud prevention — logs, IP address, device identifiers, abuse and rate-limit signals. Basis: legitimate interests in protecting the Service and its users.
• Product improvement and debugging — aggregated usage data and error reports. Basis: legitimate interests. We do not use your business or content data to train third-party foundation models.
• Customer support — support messages. Basis: performance of our contract.
• Marketing emails — email address, where you have opted in. Basis: consent, withdrawable at any time via the unsubscribe link.
• Legal and accounting obligations — records we must keep. Basis: legal obligation.

4. Who we share it with

We share personal data only with the following categories of recipients:

• Service providers / subprocessors — cloud hosting and application hosting, our managed database and authentication provider, AI model providers who process your prompts and uploads to generate outputs, email delivery, and web research providers used by our trend and radar features.
• Merchant of Record — Paddle.com, which handles the sale of our subscriptions, checkout, subscription management, payments, invoicing, and sales tax compliance, and provides related customer service.
• Professional advisers — legal, accounting, and audit advisers where needed.
• Authorities — where required by law, or to establish, exercise, or defend legal claims.

We do not sell your personal data and we do not share it for cross-context behavioural advertising.

5. International transfers

We are based in the United States and our providers may process data in the United States and other countries. Where personal data is transferred out of the UK or EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant) or an applicable adequacy decision.

6. How long we keep it

• Account, plan, business and content data — for as long as your account is active, and deleted or anonymised within 90 days of account deletion.
• Uploaded video files — retained only as long as needed to produce and display your scores and version history, and deleted when you delete the review or your account.
• Logs and diagnostic traces — typically up to 12 months.
• Billing and tax records — for the period required by law (generally 7 years), held primarily by our Merchant of Record.

7. Your rights

Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to processing, receive it in a portable format, withdraw consent, and — for UK/EEA residents — lodge a complaint with your supervisory authority (for example the UK ICO or your local EU data protection authority). Californian residents may also request information about disclosures and are protected against discrimination for exercising these rights.

Email support@vezloapp.com to exercise a right. We respond within one month, and will tell you if we need longer. Many actions — editing your profile, exporting a plan, deleting your account — are available directly in Settings.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), encryption at rest for our database and file storage, row-level access controls so users can only read their own records, hashed credentials, and least-privilege access for administrators. No system is perfectly secure; if we become aware of a breach affecting your personal data we will notify you and any regulator as required.

9. Cookies and similar technologies

We use strictly necessary cookies and local storage to keep you signed in, remember your language and theme preference, and secure the checkout flow. These are required for the Service to function. We do not use advertising cookies. If we later introduce analytics or marketing cookies, we will ask for your consent first and provide a preference control. You can clear or block cookies in your browser settings, but signing in will not work without the essential ones.

10. Children

Vezlo is not intended for anyone under 16. We do not knowingly collect personal data from children; if you believe we have, contact us and we will delete it.

11. Changes to this notice

We will post updates here with a new "last updated" date and notify account holders of material changes by email or in-app.