Vizier AI Privacy Policy

1. Who this applies to

Vizier AI is provided to organisations ("customers"). Each customer has its own workspace. Users are invited to a workspace by their organisation. For content inside a workspace, we act on behalf of the customer, and the customer's agreement with us also applies. Workspace administrators can see usage, the audit trail and user activity on the Dashboard.

2. Information we collect

• Account information: your name, email address, organisation, workspace role, and sign-in details.
• Content you add: files you upload, questions and messages you send, outputs Vizier AI generates for you (such as answers, documents and slide decks), and preferences Vizier AI remembers for you.
• Data from services you connect: when you or your workspace connect a service such as Google Drive, Gmail, Microsoft SharePoint, Outlook or a database such as PostgreSQL, and, when available, Microsoft Teams or Slack, we access that service with the permissions you approve. Section 3 describes Google data in detail.
• Connection credentials: the access tokens the connected service issues to Vizier AI, so we can keep your content in sync. We never see or store your Google or Microsoft password.
• Usage and technical data: log data such as IP address, browser type, pages used, timestamps and error reports, which we use to run, secure and improve the service.
• Cookies: we use cookies that are needed to keep you signed in. We do not use advertising or tracking cookies.

3. How Vizier AI uses Google user data

This section applies when you connect a Google account to Vizier AI.

What we access. Vizier AI requests only read-only access:

• Gmail: https://www.googleapis.com/auth/gmail.readonly, to read your email messages and attachments.
• Google Drive: https://www.googleapis.com/auth/drive.readonly, to read your Drive files and their metadata (such as file name, owner and sharing settings).

Vizier AI cannot send email, and cannot change, move or delete your messages or files.

How we use it. We use Google user data only to provide and improve the features you see in your Vizier AI workspace:

• We extract the text of your messages and files and index it, so Vizier AI can find the passages relevant to your questions.
• When you ask a question, Vizier AI uses those passages to write an answer and shows which emails or files it used.
• We sync periodically so answers reflect your latest content.
• Where Google provides sharing information, we use it to limit answers to people who are allowed to see the underlying content.

How we share it. We do not sell Google user data. We do not use it for advertising, and we do not give it to data brokers or information resellers. We transfer Google user data only:

• to the service providers that run Vizier AI for us (hosting, storage, and the Sky47 servers that run the AI models that generate answers), only as needed to provide the features you use, and under contracts that prevent them from using it for their own purposes;
• when you direct us to, for example by sharing an answer with a colleague;
• when required by law, or to protect against security incidents, fraud or abuse.

No AI model training. We do not use Google user data, including data from Google Workspace APIs, to develop, improve or train generalised AI or machine learning models. Our language and embedding models run on Sky47 servers, and your content is not sent to third-party AI companies.

Human access. No Stixor employee reads your Google user data unless (a) you give us explicit permission for specific messages or files, for example in a support request; (b) it is necessary for security purposes, such as investigating abuse; (c) it is required to comply with applicable law; or (d) it has been aggregated and anonymised for internal operations.

Limited Use. Vizier AI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Removing access. You can disconnect your Google account at any time from the Connectors page in Vizier AI, or revoke access at https://myaccount.google.com/permissions. After you disconnect, we stop syncing and delete the content we indexed from that account within 30 days.

4. Microsoft and other connected services

When you connect Microsoft SharePoint, Outlook, a database such as PostgreSQL or another service, and, when available, Microsoft Teams or Slack, we request read-only access wherever the service offers it. We use and protect that data the same way as described for Google data in Section 3: only to provide features in your workspace, never sold, never used for advertising, and never used to train AI models.

5. How we use information

We use the information described above to:

• provide Vizier AI, including search, answers, document and slide generation, and scheduled tasks;
• keep your account and workspace secure, and prevent abuse;
• provide support when you ask for it;
• operate, maintain and fix the service;
• communicate with you about your account and important changes.

6. AI processing

To answer a question, Vizier AI sends your question and the relevant passages from your content to a language model, which returns a response. Our language and embedding models run on Sky47 servers in Pakistan, and no content goes to third-party AI companies.

7. Service providers

We use Sky47 to run Vizier AI, including cloud hosting, data centres and the servers for our AI models. Sky47 processes data only on our instructions.

8. Where your data is stored and how we protect it

• All data is stored and processed in Pakistan on Sky47's cloud and data centres.
• Data is encrypted in transit with TLS.
• Each customer's data is kept in its own workspace and is not visible to other customers.
• Access to production systems is limited to authorised staff who need it.

9. How long we keep information

We keep workspace content for as long as the customer's account is active. When content is deleted, a connected account is disconnected, or a workspace is closed, we delete the related data within 30 days, except where the law requires us to keep it longer. Backups are overwritten within a further 30 days.

10. Your rights and choices

You can ask us to access, correct, export or delete your personal information by emailing contact@stixor.com. If your account is managed by your organisation, we may refer your request to your workspace administrator. You can disconnect any connected service at any time.

11. Children

Vizier AI is a business product and is not intended for anyone under 16. We do not knowingly collect information from children.

12. Changes to this policy

If we make material changes, we will update the date at the top and notify workspace administrators before the changes take effect.

13. Contact us

Stixor Technologies

Email: contact@stixor.com

Phone: +92 51 8740326