Tessera Viz
PX-02
Legal · draft for legal review
Tessera Viz privacy policy.
What viz.par2labs.com collects, why, how long we keep it, and your rights. This is a draft for legal review.
01
01
Draft — for legal review
Last updated 30 September 2026
1. Who we are
This policy covers viz.par2labs.com: the Tessera Viz website, its hosted demo, the developer-kit and trial request form, and the developer portal at viz.par2labs.com/developers.
The company responsible for your personal data is PAR2LABS PVT LTD, India ("we", "us").
For privacy questions and grievances, write to contact@par2labs.com.
2. What we collect, why, and how long we keep it
We collect only what the forms and the portal need, and what our server records when it delivers the site.
| Data | Why | How long |
|---|---|---|
| Developer-kit and trial request: your name, work email, company name, company website, job title or role, country, the answer to "Will you use Tessera Viz for a business?", what you want to build, the parts that interest you, your front-end stack, expected data size and when you plan to decide; if you give them, your phone number, LinkedIn profile and how you heard about us. With it: the time you ticked the privacy-policy box and agreed to be contacted, the IP address the request came from, and the results of our checks on it (whether you confirmed your email, whether the email is from a free or disposable provider, whether its domain matches the company website, whether the domain has mail records and the website responds). | To review the request, send the kit or trial, and contact you about it. | 30 days. Requests that are rejected, refused or never confirmed are deleted 30 days after they are decided or made; approved requests are deleted 30 days after the trial ends or access is revoked. Their emails, links and download records go with them. |
| Agreement acceptance: the version of the Evaluation Agreement you accepted, the date and time, and your IP address. | To prove what you accepted. Section 11 of the agreement says we record this. | Kept with the request, and deleted with it: 30 days after the trial ends. |
| Trial record: the name, email address and company a trial was issued to, the email's domain, a normalised form of the email and company name, the trial key's id, and the trial's start and end dates. | To give one trial per person and per company. | Kept without a time limit, including after a request or account is deleted, because this record is what stops repeat trials. |
| Developer account (once a request is approved): a hash of the password you set (the password itself cannot be recovered from it), when you signed in, your trial key and its dates. | To let you sign in, and to show you your key, the kit and the documentation. | While your trial runs, and 30 days after it ends or access is revoked. |
| Download links and server logs: for each kit download, the time, your IP address and the file; our host's web server logs (IP address, time, the page or file requested); and, for two days, the IP address of each form submission, for the rate limit. | To deliver the kit, and to stop abuse. | Rate-limit records: 2 days. Download records: with the request, as above. Web server logs: kept by our host on its own schedule. |
| Paying customers: company, contacts, billing details, and the domains named in the licence key. | To issue and renew licences, and to invoice. | As long as Indian accounting and tax law requires. |
| Emails you send us, and the emails we send you about your request (the portal keeps a copy of each email it sends; a copy that carried a one-time link has its text removed once sent). | To answer you. | 30 days after the conversation ends. |
| Website analytics and cookies: see section 3. | Only what this site really uses. | Per tool, in section 3. |
4. The hosted demo
The demo at viz.par2labs.com/demo (the demo portal) uses made-up data.
The demo portal itself sets no cookies. The website pages around it use the analytics described in section 3.
It keeps display settings in your own browser only: the tier view you chose, in local storage; the pages you visited and the sandbox graph, in session storage. None of it is sent to us.
The AI analyst: an API key you enter stays only in that page's memory. It is not saved, and it is never sent to us. It is forgotten when you press "Disconnect" or reload the page.
With a key connected, your questions and the demo data go directly from your browser to the provider you chose: Anthropic, OpenAI, or an endpoint you typed in. That provider's terms and privacy policy apply.
Without a key, the demo contacts no one.
The demo terms of use cover the rest.
5. The free packages
The Tessera Viz free packages send no usage data, telemetry or personal data to us (Free Edition Licence, section 6.1).
If a developer uses the optional map-tiles package with its defaults, their end users' browsers load map tiles from OpenStreetMap and the Leaflet library from a public content delivery network (unpkg.com). The developer can change both.
7. Where the data is stored
The request, account, agreement and trial records are stored on our host's servers in Asia and the United States.
This means your data may be stored outside India. Google may also process analytics and font requests outside India.
8. Your rights
You can ask us to give you access to the personal data we hold about you, to correct or complete it, and to delete it. Where we rely on your consent, you can withdraw it at any time; this does not undo what was done before.
To use any of these rights, write to contact@par2labs.com. We will answer within 1 day.
To withdraw consent to analytics, decline in the cookie banner or clear the p2l-consent cookie and your browser storage. To withdraw a developer-kit request, or to have your account deleted, write to the contact above. The trial record in section 2 is kept even then, because it is what stops repeat trials.
You can complain to us first, at the contact above. You can also complain to the regulator: in India, the Data Protection Board of India under the Digital Personal Data Protection Act, 2023; in the European Economic Area or the United Kingdom, your data protection authority.
[[Lawyer to confirm the laws that apply: the Digital Personal Data Protection Act, 2023, and the GDPR and UK GDPR if the site accepts visitors from the EU or UK.]]
9. Children
This site is for professionals. It is not directed at anyone under 18.
10. Security
The site is served over HTTPS only.
Requests, accounts and trial keys are kept in a database in a private folder on our server, outside the public website. Passwords are stored only as hashes. The key that signs trial keys is kept on the server, outside the public website, and is never part of it. One-time links in emails are stored only as hashes, and download links are signed and last about 10 minutes. The portal's sign-in cookie cannot be read by page scripts and is sent only over HTTPS.
Only the people at PAR2LABS PVT LTD who hold an admin account for the developer portal can see the requests.
11. Changes to this policy
Last updated: 30 September 2026.
When we change this policy, we publish the new version on this page, change the date above, and email the people subscribed to our updates.