Skip to content
Trust centre

Security and privacy at Vizzit

How Vizzit protects your business, your team's sign-ins and your customers' details, written plainly.

Sign-in and access

The right people in, with only the access they need.

Two-step sign-in

Owners and administrators confirm every sign-in with an authenticator app, with recovery codes for a lost phone.

Choice of sign-in

Email and password, Google, Apple or Facebook. Accounts are never joined just because an email matches.

Six roles

Owner, administrator, store manager, receptionist, professional and viewer, each limited to its part of the work.

Sessions you control

See where you are signed in and sign out any device. Sessions end on their own after a period of inactivity.

Your data

Your business owns it. We look after it.

Kept apart

Every business's customers, bookings and invoices are kept separate from every other business.

Encrypted

Encrypted on the way to us and where it is stored.

Backed up

Stored in India (Mumbai), with point-in-time recovery, copies in Delhi and restore drills every quarter.

Yours to take

Owners can export customers, bookings and invoices at any time. We never sell your data.

Privacy and consent

Built for India's Digital Personal Data Protection Act, 2023.

Consent recorded

Offers and reminders reach only customers who agreed, and we keep a record of when they agreed.

Privacy requests

A customer asks to see or delete their details; the business handles it in a few clicks.

Only what is needed

We ask for the details a booking needs and nothing more.

A named grievance officer

Write to the Grievance Officer, HACTECH Private Limited, at grievance@vizzit.co.in. We reply within the time the law requires.

Platform protection

Keeping fake businesses and bad actors out.

Verified businesses

HACTECH checks each business's documents before online booking and listing are switched on.

Bot and abuse checks

Sign-ups are screened for bots, throwaway emails and repeated trials.

Activity log

Important changes are recorded with who made them and when.

Watched around the clock

Monitoring and alerts around the clock. A public status page goes live with the service.

Found a security problem?

Tell us privately and we will work with you to fix it. Please do not test against real businesses' data.