Privacy Policy

GOAD LLC, doing business as Visceral Vision is a Delaware limited liability company. We build CAD-based assembly inspection software. You can reach us about anything in this policy at contact@visceral.vision.

This policy covers two different things: this public website, and the Visceral Vision application that customers log into. They collect different data, so they are described separately below.

The public pages of visceral.vision have no contact forms, no account creation, and no newsletter signup. If you email the address above, we receive whatever you put in that email and keep it as business correspondence.

With your consent, we use PostHog for product analytics. Nothing analytics-related loads until you choose "Accept". If you decline, or if your browser sends a Global Privacy Control or Do Not Track signal, no analytics are loaded and no analytics identifier is created. When you do consent, PostHog records:

• Pages you view and interactions on them, such as which links and buttons you click.
• An approximate location (country or region) derived from your IP address.
• Your browser, device type, and the referring page.
• A randomly generated identifier stored in your browser so repeat visits can be recognized.

You can change your mind at any time by clearing this site's data in your browser, which removes the stored choice and the analytics identifier together.

When you have an account with us, we store:

• Your name and email address.
• Your password, stored only as a salted hash generated by our authentication library. We never store or transmit it in plaintext, and we cannot recover it for you.
• Your role and the organization you belong to.
• For each active session: the session token, its creation and expiry times, the IP address, and the browser user-agent string. We use these so you can see and end your own sessions, and to investigate suspicious sign-ins.
• Short-lived tokens for email verification and password resets.
• Counters used to rate-limit sign-in, sign-up, and password-reset attempts, which is what stops password guessing against your account.

We also store the content you put into the product: CAD models, images and video frames captured for inspection, and the inspection records derived from them. That content is yours. We process it to provide the service and do not use it to train models for other customers or sell it to anyone.

Signing in sets a session cookie. That cookie is strictly necessary — without it the application cannot tell who you are — so it is set whenever you log in and is not subject to a consent choice.

Analytics storage is set only after you accept, and only on the public website. We do not use advertising cookies and we do not share data with ad networks.

We use a small number of service providers. They act on our instructions and may not use your data for their own purposes. The current list, what each one does, and where it runs is on our Security and Subprocessors page.

Retention for customer content — CAD, captured images, and inspection records — is set in your agreement with us, and is configurable per deployment. We delete it on request or at the end of the contract.

Account records are kept while the account exists. Sessions expire on their own; the default lifetime is seven days, though an on-premise kiosk display running in a read-only role may be configured for a much longer session so it does not log itself out mid-shift. Verification and password-reset tokens are short-lived by design.

• Decline analytics, or withdraw consent later by clearing this site’s data.
• We honor Global Privacy Control and Do Not Track as an opt-out, without asking you again.
• Ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it — email us and we will act on it.
• End any active session from within the application.

If you are an employee of a customer, some of these requests may need to go through that customer, because they control the account and the inspection data. Tell us either way and we will route it correctly.

This is industrial software sold to businesses. It is not directed at children and we do not knowingly collect data from them.

If we change this policy we will update the date at the top. If a change materially affects customers, we will tell the affected customers directly rather than relying on you to re-read this page.

Questions, requests, or complaints: contact@visceral.vision.