Privacy policy

Vision is a private, invitation-only workspace for a marketing agency and its clients: tasks, projects, scheduling, time, chat and client reporting. Only people the agency invites can sign in. This policy explains what information Vision handles and how.

• Account details: your name, email address and profile photo. When you sign in with Google, Vision receives these from Google to confirm who you are.
• Work you add: tasks, comments, messages, files, time entries, calendar events, reports and requests.
• Connected marketing accounts: when the agency connects a Google account, Vision reads performance numbers for the clients it manages (see below) to show them in reports.
• Security records: sign-ins, failed sign-in attempts and changes to access, kept to protect accounts.

When an agency administrator connects a Google account, Vision asks for only what reporting needs:

• Google Analytics (read-only): daily sessions, users and key events by channel for the properties linked to each client.
• Google Search Console (read-only): daily clicks, impressions and average position, with top pages and searches.
• Google Business Profile: listing names and daily calls, direction requests and views. Google offers no read-only option for this, but Vision only reads; it never changes a listing.
• Google Calendar, if a team member connects their own calendar: to show their events and add their work blocks.

Vision uses this data only to show reports and schedules to the agency and to the client the data belongs to. It isn't sold, used for advertising, or shared outside the services listed below. The permission is stored encrypted, and disconnecting the account in Vision revokes it with Google.

Vision's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Vision uses these providers to run, each only for its part:

• Vercel (hosting the app) and Supabase (database), in the United States
• Cloudflare (web address and file storage)
• Ably (delivering live updates such as chat messages)
• Resend (sending emails such as sign-in links and notifications)
• Google (sign-in and the connected services above)
• Anthropic (Claude), for optional drafting features such as request summaries and report write-ups: only the text needed for that draft is sent, and Anthropic doesn't use it to train its models

Access is invitation-only and checked on every request; clients only see their own information. Connections to Vision are encrypted (HTTPS), saved account permissions are encrypted, team sign-in requires the agency's Google Workspace with two-step verification, and backups are made daily.

Information is kept while the agency uses Vision. You can ask the agency to correct or delete your information, or to disconnect any service, by emailing jtveer6@gmail.com. Disconnecting a Google account stops all further access to it.

If this policy changes, the date above changes with it. Questions: jtveer6@gmail.com.