Privacy Policy
Last updated 2 August 2026 · aggviz
aggviz holds an account email, a subscription record, and the workspace, conversations and findings you build in the tool. The financial data it aggregates is about companies, not about you. It does not sell personal data.
1. Who this covers
This policy covers aggviz.com and the aggviz application behind sign-in. It applies to anyone who visits the site, creates an account, or is added to a team workspace. aggviz is the controller of the personal data described here.
2. What is collected
Account data. Your email address and the sessions created when you sign in. Your password is never stored; aggviz keeps only a salted one-way hash of it.
Billing data. If you or your team subscribe, the payment processor handles the payment and returns a subscription identifier and status. Card numbers are never sent to or stored by aggviz.
Content you create. Your team's workspace, conversations with the agent, findings, benchmark runs and team settings — held against your account or workspace so the product can act on them. Model API keys you save are kept encrypted and are used only by your team's workspace.
Company data. The filings aggviz aggregates are published records about companies. Names of directors and officers appear in filings because the filer published them; aggviz reproduces filings as filed and does not enrich them with other personal data.
3. What is not collected
aggviz does not sell personal data, does not share it with advertisers, and does not use your workspace or its content to train machine learning models or to inform other customers' results.
4. Why it is held, and for how long
Account and billing data are held to provide the service and to meet accounting obligations. Content you create is held until you delete it or close your account; content in a team workspace belongs to the workspace and is governed by its administrator.
Deleting your account removes your account record and your personal content. Billing records are retained where tax and accounting law requires it.
5. Processors
A payment processor handles subscriptions, and a transactional email provider delivers account email. Infrastructure providers host the application, its database and the site. Each processes data only on instruction.
6. Your rights
Under the UK GDPR and the EU GDPR you can ask for a copy of the personal data held about you, for correction, for erasure, for restriction, for a portable copy, and you can object to processing based on legitimate interests. Requests are answered within one month.
Where processing relies on consent, you can withdraw it at any time. You can also complain to a supervisory authority.
7. Contact
Privacy questions and data requests go via the support page at /support.