Privacy Policy

This Privacy Policy explains how Visory USA, Inc., a Delaware corporation (“Visory,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information. It covers our website at getvisory.com (the “Site”), the Visory platform our customers sign in to, and the bookkeeping, payroll, accounts payable, accounts receivable, and reporting services we provide to businesses in the United States (together, the “Services”).

The Visory group is headquartered in Melbourne, Australia, and its US leadership team is in New York. If you deal with Visory in Australia or New Zealand, the privacy policies published at visory.com.au apply instead.

Who this policy covers

Our customers are businesses, so most people we deal with are acting for a business. This policy covers:

• visitors to the Site;
• people who send us an inquiry, book a call, or sign up for our newsletter;
• the owners and staff of our customers, prospective customers, suppliers, and referral partners; and
• people whose information appears in the records we work on for our customers, such as our customers’ employees, contractors, suppliers, and customers.

Information we handle for our customers. When we provide the Services, we handle information in our customers’ accounting, payroll, banking, and other business records on their behalf. For that information we act as our customer’s service provider. We use it to provide the Services under our agreement with the customer, on the customer’s instructions, and as the law allows. If you work for, supply, or buy from a business we work for and you have a question or request about information in the records we keep for that business, please contact that business. We will help it respond.

Job applications. Applications made through our careers site at careers.visory.com.au are covered by the privacy notice published on that site.

Information we collect

What we collect depends on how you deal with us. It may include:

• Contact and business details: your name, email address, phone number, company, job title, and business address.
• What you tell us: the content of your inquiries, messages, and call requests, and the services you are interested in. If you ask about selling your business, the details you share about it.
• Account and billing details: sign-in details for the Visory platform, the people you authorize to use your account, billing contacts, and the payment details you use to pay our fees.
• Customer records: the accounting, payroll, and financial records we work on for customers. These may include bank and transaction details, invoices and receipts, details of suppliers and customers, and payroll information about our customers’ employees and contractors, such as names, addresses, dates of birth, Social Security or other taxpayer identification numbers, pay rates, hours worked, tax withholding elections, benefits and other deductions, and bank account details for direct deposit.
• Meetings and communications: emails, calls, and messages with our team. Meetings with your Visory team on the Visory platform are recorded and transcribed, and the notes, action items, and context from them are kept on the customer’s account. We may also record or transcribe other calls and video meetings, such as discovery calls, including with AI note-taking tools. When we record or transcribe a call, we tell the people on it at the start. If you would prefer that a call with us, other than a meeting on the Visory platform, is not recorded or transcribed, tell us before or at the start of the call.
• Device and usage information: your IP address, browser and device type, the pages you view and links you click, the page that referred you, the dates and times of your visits, and identifiers stored in cookies. We also use your IP address to estimate which country you are in, so the Site can suggest the right Visory region. When you use the Visory platform, we also record sign-ins and the actions you take in it, so every approval keeps a record of who made it and when.
• Advertising information: whether you reached the Site from one of our ads, and whether you then sent an inquiry or booked a call.

Some state laws treat certain information as sensitive, such as Social Security numbers, financial account details, and account sign-in credentials. We handle that kind of information in customer records, in the payment details used to pay our fees, and in sign-in details for the Visory platform. We use it only to provide, check, secure, and bill for the Services, and we do not use it for advertising.

Where we get information

• From you, when you use the Site, fill out a form, book a call, email or call us, or use the Services.
• From our customers, about their staff, contractors, suppliers, and customers, so that we can provide the Services.
• From the systems our customers connect to the Visory platform or give us access to, such as their accounting software, payroll platform, and bank accounts.
• Automatically, through cookies and similar technologies on the Site (see “Cookies, analytics, and advertising” below).
• From our service providers, such as our analytics, advertising, and customer relationship tools, and from publicly available sources.
• From referral partners who introduce you to us.

How we use information

• To reply to inquiries, arrange discovery calls, and prepare proposals.
• To provide the Services: keeping books, running payroll, preparing payments and filings, raising invoices, preparing reports, and meeting with customers.
• To set up and manage customer accounts, confirm identity and authority, and provide support.
• To bill for the Services and collect payment.
• To follow up on your inquiry and to send our newsletter and other marketing emails to people who have opted in to receive them, each with an unsubscribe link.
• To measure and improve the Site and our advertising.
• To maintain and secure the Services, and to improve them using information about how the Site and the Services are used and aggregated or de-identified information, but not to train Delphi AI.
• To detect and prevent fraud, security incidents, and misuse.
• To comply with the law, respond to lawful requests, and establish, exercise, or defend legal claims.

How we use AI. Your Visory team does the work. Delphi AI, our own AI, prepares and checks routine work in the background, such as coding transactions, drafting pay runs, and matching bills, and our team oversees it. Customers approve pay runs and payments before money moves. We use customer records to provide and check the Services for the customer they belong to, and we do not use them to train Delphi AI. We do not make decisions that have legal or similarly significant effects on a person by automated means alone.

Cookies, analytics, and advertising

The Site uses cookies and similar technologies, such as tags, pixels, and browser storage. They load when you visit getvisory.com.

• Essential: a cookie that remembers the Visory region you chose, and technologies our hosting provider, Cloudflare, may use to deliver the Site and protect it from attacks.
• Analytics: Google Analytics, loaded through Google Tag Manager, records how visitors use the Site. Google receives your IP address, device and browser details, the pages you view, and cookie identifiers. This information is not anonymous.
• Advertising: tags from the advertising networks we use. Today that is only Google Ads. The Google Ads tag measures whether a visit from one of our ads leads to an inquiry or a booking. Depending on our advertising settings, it also lets Google use information about your visit to show you Visory ads on other websites and apps and to build advertising audiences.
• HubSpot: HubSpot’s tracking code records the pages you visit. If you then fill out a form, your earlier visits are linked to your contact record, so our team can see which pages you looked at.
• Embedded content: our booking page uses HubSpot’s scheduling tool, some articles include YouTube videos served from youtube-nocookie.com, and our careers page loads its list of open roles from our careers site, which Teamtailor hosts. These providers receive your IP address and may set their own cookies when you use their features.

Google and HubSpot may collect information about your online activities over time and across different websites. They use the information they collect under their own privacy policies and may process it outside the United States. You can read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.

Your choices about cookies and advertising

• You can block or delete cookies in your browser settings at any time. Doing so does not stop you using the Site, although some features may not work as designed.
• You can turn off personalized ads from Google at myadcenter.google.com.
• You can stop Google Analytics from collecting information about your visits with Google’s opt-out browser add-on at tools.google.com/dlpage/gaoptout.
• You can block third-party cookies in your browser, which limits how advertising tags can recognize you across websites.
• You can ask us, by email, not to use the contact details you have given us for advertising, for example to build advertising audiences, and we will stop. We cannot switch the Google Ads or HubSpot tags off for one person from our side, so an email to us does not stop those tags from running in your browser. Use the browser and Google controls above for that. Where a state privacy law gives you a right to opt out of targeted advertising, or of the sale or sharing of your personal information, and requires it of us, we will also stop any other use or disclosure of your personal information for those purposes that is within our control.

The Site does not currently respond to Do Not Track signals or Global Privacy Control signals sent by browsers. If that changes, we will update this policy.

How we disclose information

We disclose personal information only as this policy describes:

• Service providers. Companies that help us run our business and provide the Services, such as providers of hosting, email, customer relationship management, scheduling, video meetings, transcription, AI and machine-learning services, analytics, advertising, payments, recruiting, and professional services. They may use the information only to provide their services to us, except where this policy says otherwise, such as Google’s own use described above.
• Our team and affiliates. People who work for Visory and its affiliated companies, including in the United States, Australia, the Philippines, and other countries, who need the information to do their work.
• Our customers. When we work for a customer, we share the work, and information about it, with that customer and the people it authorizes.
• Connected platforms and financial institutions. The accounting, payroll, banking, and payment platforms a customer uses, when we work in them for that customer.
• Government agencies. Tax and other government agencies, when a customer has authorized us to submit a filing, report, or payment for it, or when the law requires it.
• Advertising and analytics providers. Google, HubSpot, and any other advertising network we use, through the technologies described above.
• Professional advisers. Our lawyers, auditors, and other advisers, under duties of confidentiality.
• Business transfers. A buyer, successor, or investor, or a prospective one, in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, under duties of confidentiality.
• Legal and safety reasons. When we believe disclosure is required by law, legal process, or a lawful request from a public authority, or is needed to protect the rights, property, or safety of Visory, our customers, or others.
• With your consent or at your direction.

We treat inquiries about selling a business as confidential and use them only to respond about that possible sale.

We do not sell personal information for money, and we do not upload customer or lead lists to advertising platforms. We let Google collect information about visits to the Site through the Google Ads tag, so that we can measure our advertising and, depending on our settings, show Visory ads to people who have visited the Site. Some state privacy laws treat this as “sharing” personal information or as “targeted advertising.” The Site does not currently respond to Global Privacy Control signals, so you can limit this tracking only with the controls described under “Your choices about cookies and advertising.” We do not use or disclose customer records, or any other sensitive personal information, for advertising.

We may create aggregated or de-identified information that cannot reasonably be linked to a person. When we do, we take reasonable measures to keep it that way, we do not try to re-identify it, and we require anyone we share it with to do the same.

Tax return information

If our Services for a customer include preparing, or helping to prepare, a federal income tax return, federal law (section 7216 of the Internal Revenue Code and its regulations) limits how we may use and disclose that customer’s tax return information. We use and disclose tax return information only as that law permits. Where the law requires the customer’s consent, including before tax return information is disclosed to anyone outside the United States, even within Visory, we ask for that consent in writing first.

Health information

Some of our customers are healthcare providers. By default, the Services do not include handling protected health information under the Health Insurance Portability and Accountability Act (HIPAA). If a customer needs us to handle it, we will sign a business associate agreement on request, and that agreement then governs that information.

Where information is processed

The Visory group is headquartered in Australia, and our team works in the United States, Australia, the Philippines, and other countries. Personal information may be accessed, stored, and processed in those countries and in other countries where our service providers operate. Privacy laws in those countries may differ from the laws where you live. Wherever information is processed, we handle it as this policy describes.

How we protect information

We use administrative, technical, and physical safeguards designed to protect personal information. They include controlling access to our systems and to customer records according to each person’s role, requiring our team to complete information security training, and requiring our service providers to protect the information they handle for us. No method of storing or sending information is completely secure, so we cannot guarantee security.

If a security incident affects personal information, we will notify the people affected, our customers, and regulators as the law requires.

How long we keep information

We keep personal information only as long as we need it for the purposes in this policy. How long depends on the kind of information and why we hold it, for example whether we need it to provide the Services, to keep the payroll, tax, and financial records that our customers or the law require, to resolve disputes, or to enforce our agreements. We keep inquiry and marketing records while the business relationship is active and for a reasonable time afterward. Information collected by analytics and advertising tools is kept according to the retention settings of those tools. When we no longer need personal information, we delete it or de-identify it.

Your privacy rights

Depending on where you live, a state privacy law may give you rights over your personal information. Most of these laws apply only to businesses that meet set thresholds, and most do not cover information about people acting for a business or as employees. Whether or not a state law applies to us, you may ask us to:

• confirm whether we hold personal information about you, and give you access to it, including a copy in a portable format;
• correct personal information about you that is inaccurate;
• delete personal information about you;
• stop using the contact details you have given us for advertising; and
• stop sending you marketing emails.

We will act on your request as the law allows. We may keep information where the law permits or requires it, for example to provide Services a customer has engaged us for, to keep records the law requires, or to defend legal claims. If we hold your information only as a service provider for one of our customers, we will refer your request to that customer and help it respond.

To make a request, email us at [email protected]. We will check that the request is yours by matching the details you give us with the information we hold, and we may ask for more information to do so. You may use an authorized agent to make a request. We may ask the agent for proof of authority and ask you to confirm your identity. We aim to respond within 45 days. If we need more time, we will tell you why and how much longer we need.

If we decline your request, we will tell you why. You can appeal by replying to our decision, and we will respond to your appeal in writing within 45 days. If you are not satisfied with the outcome, you can contact your state attorney general.

We will not discriminate against you for exercising any of these rights.

California residents may also ask us, by email, about any disclosure of their personal information to third parties for those third parties’ own direct marketing purposes (California Civil Code section 1798.83). Nevada residents may send a request directing us not to sell their covered information to the same email address.

Marketing communications

We send marketing emails only to people who have opted in to receive them. Every marketing email we send identifies Visory and includes a working unsubscribe link. We act on unsubscribe requests within five business days. If you unsubscribe, we may still send you messages about Services you have engaged us for. We make autodialed or prerecorded calls, or send marketing text messages, only with the consent the law requires.

Children

The Site and the Services are for businesses. They are not directed to children, and we do not knowingly collect personal information through the Site from anyone under 16. Customer payroll records may include information about employees under 18, which we handle only for that customer. If you believe someone under 16 has given us personal information through the Site, contact us and we will delete it.

Links to other websites

The Site links to other websites, including government sources and our careers site. Their owners’ privacy practices apply to them, not this policy.

Changes to this policy

We may update this policy. We will post the updated version on this page and change the date at the top. If we make a material change, we will also tell customers by email or through the Visory platform before the change takes effect.

Contact us

If you have a question about this policy or want to make a request, contact us:

Visory USA, Inc.
3828 Kennett Pike, Suite 212, Greenville, DE 19807
Email: [email protected]
Website: getvisory.com