Privacy Policy
Last updated: July 2026
VisibleState is operated by PWR INNOVATIONS (PTY) LTD. References to "we", "us", or "our" mean PWR INNOVATIONS (PTY) LTD.
VisibleState processes Microsoft 365 metadata on your behalf to deliver security assessments, intelligence, and operational twin services. We do not sell customer data.
1. Data we collect
- Organisation and user account details you provide at registration
- Microsoft Graph inventory metadata authorised via admin consent
- Authentication and security events (logins, MFA, session metadata)
- Billing and subscription records via payment providers (PayFast, Yoco, Lemon Squeezy, Paddle as configured)
- Support communications and cookie consent preferences
2. Lawful basis / purpose
We process data to perform the contract (deliver the service), for security and fraud prevention, to meet legal obligations, and — where required — with consent (e.g. optional analytics cookies).
3. Data residency
You may select a preferred region (US, EU, UK, AU, ZA) during onboarding. Tenant data is stored in pools assigned to that region. Subprocessors are listed in our subprocessors notice.
4. Retention
- Account and tenant operational data: for the life of the subscription plus deletion windows
- Admin audit / security logs: minimum 365 days (longer when WORM export is enabled)
- Backups: 30-day local encrypted dumps; provider snapshots per plan (target 90 days)
5. Cookies
See our Cookie Policy. Essential cookies are required for authentication and security. Analytics cookies are optional.
6. Your rights
Depending on applicable law (including GDPR and POPIA), you may request access, correction, export, or deletion of personal data. In-product DSAR flows and account deletion are available to authenticated customers. Contact [email protected] for operator-assisted requests.
7. Security
Technical and organisational measures are summarised on our Security page and in customer evidence packs. Formal SOC 2 / ISO 27001 certification status is disclosed honestly in those materials.
8. Contact
Privacy enquiries: [email protected]