Compliance

GDPR Compliance

AIVizPilot is fully committed to the General Data Protection Regulation (GDPR). Here's how we protect your data and uphold your rights.

Our Commitment

Smarty Solution Mega Ltd (Company No. 16925741), trading as AIVizPilot, is a UK-registered company. As a data analytics platform, we understand the critical importance of data protection. We have designed our systems, processes, and policies from the ground up to comply with UK GDPR and EU GDPR requirements. We act as both a data controller (for account and billing data) and a data processor (for the data you connect to AIVizPilot).

Legal Basis for Processing

We process personal data under the following legal bases:

Contract Performance

Processing necessary to provide the Service you signed up for

Legitimate Interest

Improving our Service, preventing fraud, and ensuring security

Consent

Marketing communications and optional analytics (you can withdraw anytime)

Legal Obligation

Tax reporting, fraud prevention, and responding to legal requests

Your Rights

Data subject rights under GDPR

Right to Access

Request a copy of all personal data we hold about you. We will provide this within 30 days in a machine-readable format.

Right to Portability

Export your data in standard formats (JSON, CSV). Available from your dashboard settings.

Right to Erasure

Request deletion of your personal data. We will comply within 30 days, except where retention is legally required.

Right to Rectification

Correct any inaccurate or incomplete personal data. You can update most information directly in your account settings.

Right to Restrict Processing

Request that we limit how we process your data while a complaint or correction request is being resolved.

Right to Object

Object to processing of your data for certain purposes, including direct marketing. We will stop unless we have compelling grounds.

Data Protection Measures

  • Encryption: Encryption in transit and at rest where supported by our infrastructure providers
  • Access Controls: Role-aware account access and least-privilege operational access
  • Auditing: Operational records needed to investigate account, billing, and service events
  • DPA: Data Processing Agreements are available on request
  • Breach Notification: We will notify affected users and authorities within 72 hours

International Data Transfers

AIVizPilot uses managed hosting and infrastructure providers including Cloudflare and Vercel. Service providers may process data in the UK, EEA, US, and other locations. For transfers outside the UK and EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), EU Standard Contractual Clauses (SCCs), or equivalent transfer mechanisms.

Privacy Contact

We have not appointed a statutory Data Protection Officer. For data protection enquiries, contact us at privacy@aivizpilot.com.

Exercising Your Rights

To exercise any of your GDPR rights, you can:

We will respond to all requests within 30 days. If we need more time, we will inform you within the initial 30-day period with an explanation.

Supervisory Authority

If you believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local supervisory authority. You can find your relevant authority at the Information Commissioner's Office (ICO) at ico.org.uk for UK residents, or your local EU supervisory authority at edpb.europa.eu.