Vaizle

GDPR overview

Partial, and inconsistent. Vaizle publishes a Data Processing Agreement that references Regulation (EU) 2016/679 explicitly: technical and organisational measures under Article 32(1), assistance with data subject rights, breach notification without undue delay, help with impact assessments under Articles 35 and 36, audit and inspection rights, and standard contractual clauses for transfers outside the EEA. The difficulty is who signs it. The document names Code Path SRL, not Vaizle, as the processor, declares itself governed by Romanian law, and its Annex 1 describes a social media analytics dashboard rather than today's AI agent. The Terms and Conditions, meanwhile, are governed by Indian law. The privacy policy dates from 15 March 2018 and never uses the word GDPR at all. No Article 27 EU representative and no Data Protection Officer are named.

Who owns the data?

Under the Terms and Conditions, you keep ownership of what you put in. Section 11.1 states that you retain the copyright and any other intellectual property rights you already hold in the content you submit, and section 9.3 confirms that Vaizle obtains no right, title or interest in it. In return you grant Vaizle a worldwide, royalty-free, non-exclusive licence to use, reproduce, adapt, modify and publish that content on social networks on your behalf, for the sole purpose of displaying, distributing, improving and promoting the service. Vaizle and its licensors own the platform itself under section 9.1, while section 10.1 grants you a perpetual licence over the reports you generate through it.

Reuse rights

Yes, within limits. Section 10.1 gives you a worldwide, royalty-free, perpetual and non-exclusive licence to access, use, reproduce, display, distribute and create derivative works of the reports you generate, so the charts, tables and summaries you export can go straight into a client deck or an internal review without asking anyone's permission. The restriction is on scope rather than format: the service may be used only for your own internal business purposes, never for the benefit of third parties and never resold (section 5.5), and you may not use it to build a competing product (section 10.2). On its own side, Vaizle uses the data it collects to operate and maintain the service, provide support, monitor usage, analyse how the service is used in order to improve it, and detect technical problems. Nothing on the site states whether customer data is used to train AI models.

Data retention & training

Hosting summary

The privacy policy states that your information, including personal data, may be transferred to and maintained on computers located outside your own state, province or country, and that users located outside India should note that their data is transferred to India and processed there. India is therefore the only processing location the publisher names. No data centre, hosting provider or region is identified, and no EU data residency option is offered. The site itself is served through Cloudflare, whose anycast address resolves in the United States, but that is content delivery infrastructure rather than a storage location. The Data Processing Agreement adds that transfers of personal data out of the European Economic Area should rely on EU-approved standard contractual clauses, and that the processor may not transfer data outside the EU or EEA without the controller's prior written consent — a commitment that sits awkwardly beside a privacy policy routing data to India by default. No hosting or security certification such as SOC 2 or ISO 27001 is published.