Data Processing & Subprocessors

Visaro may process personal data in different ways depending on the context.

When we handle enquiries, demo requests, customer administration, billing, marketing or our own website activity, Visaro will usually act as a controller.

When Visaro processes data inside a customer workspace, client website setup or managed service arrangement on behalf of an agency or website owner, Visaro will usually act as a processor. In that situation, the customer decides the purpose of the processing and Visaro processes the data according to the agreed instructions.

Visaro is currently offered as a managed service rather than a fully public self-serve SaaS platform.

This means data processing requirements, workspace setup, access needs and customer responsibilities can be discussed as part of onboarding or setup. Where a data processing agreement is needed, it can be handled as part of the customer relationship.

Depending on the parts of Visaro used, customer workspace data may include:

• website and domain information;
• visitor journey and engagement data;
• form or enquiry data where configured;
• company and lead intelligence records;
• user account and access records;
• technical audit and SEO workflow data;
• reporting, export and client portal data;
• publishing, verification and audit trail records.

The exact data depends on the customer setup and which parts of Visaro Suite are used.

A subprocessor is a supplier that helps a processor provide part of a service involving personal data.

Visaro may use trusted suppliers to help provide hosting, infrastructure, email, security, backups, support, communication, billing or other operational services.

Where subprocessors are used for customer workspace data, we aim to use suppliers that provide appropriate security and contractual safeguards.

Because Visaro is currently provided as a managed service, relevant subprocessor information can be provided during customer setup or contract discussion.

Some suppliers may process data outside the UK.

Where international transfers apply, Visaro will take steps designed to protect personal data in line with UK data protection law. This may include using appropriate contractual safeguards or providers covered by recognised transfer arrangements.

Visaro Suite does not use AI systems, AI agents or large language models to process customer workspace data inside the suite.

Customer data is not sent to AI platforms to track, audit, analyse, publish, verify, report or train AI models.

For managed service customers, data processing and supplier requirements can be discussed before setup.

Where a customer has specific requirements around suppliers, processing locations, access, reporting or data handling, those should be raised during the demo, onboarding or contract stage.

If you are considering Visaro and need to understand data processing, subprocessors, security or customer responsibilities, please raise this during your demo request.