Security and privacy at Vizzit
How Vizzit protects your business, your team's sign-ins and your customers' details, written plainly.
Sign-in and access
The right people in, with only the access they need.
Two-step sign-in
Owners and administrators confirm every sign-in with an authenticator app, with recovery codes for a lost phone.
Choice of sign-in
Email and password, Google, Apple or Facebook. Accounts are never joined just because an email matches.
Six roles
Owner, administrator, store manager, receptionist, professional and viewer, each limited to its part of the work.
Sessions you control
See where you are signed in and sign out any device. Sessions end on their own after a period of inactivity.
Your data
Your business owns it. We look after it.
Kept apart
Every business's customers, bookings and invoices are kept separate from every other business.
Encrypted
Encrypted on the way to us and where it is stored.
Backed up
Stored in India (Mumbai), with point-in-time recovery, copies in Delhi and restore drills every quarter.
Yours to take
Owners can export customers, bookings and invoices at any time. We never sell your data.
Privacy and consent
Built for India's Digital Personal Data Protection Act, 2023.
Consent recorded
Offers and reminders reach only customers who agreed, and we keep a record of when they agreed.
Privacy requests
A customer asks to see or delete their details; the business handles it in a few clicks.
Only what is needed
We ask for the details a booking needs and nothing more.
A named grievance officer
Write to the Grievance Officer, HACTECH Private Limited, at grievance@vizzit.co.in. We reply within the time the law requires.
Platform protection
Keeping fake businesses and bad actors out.
Verified businesses
HACTECH checks each business's documents before online booking and listing are switched on.
Bot and abuse checks
Sign-ups are screened for bots, throwaway emails and repeated trials.
Activity log
Important changes are recorded with who made them and when.
Watched around the clock
Monitoring and alerts around the clock. A public status page goes live with the service.
Found a security problem?
Tell us privately and we will work with you to fix it. Please do not test against real businesses' data.