Legal Document

Privacy Policy

Effective Date: November 17, 2025

This Privacy Policy describes how Vistr ("Vistr," "we," "us," or "our") collects, uses, and discloses information about you when you use our website, mobile applications, and services (collectively, the "Service").

1. Contact Information

Owner and Data Controller: Vistr
Contact Email:

2. Information We Collect

We collect information about you in a few ways: directly from you, automatically through your use of the Service, and from third-party sources.

A. Information You Provide to Us

When you register for an account, use the Service, or communicate with us, you may provide the following types of data:

Account Data

Your name, email address, and password (hashed).

Payment Data

Information required to process your subscription payments, which is securely collected and handled by our third-party payment processor, Stripe. We do not store full credit card numbers on our servers.

Automation Content/Workflow Data

The text, data, files, and instructions you submit to the platform to create and run automation workflows, which may include sensitive business or personal information necessary for the automation to function.

Communications

Any data you provide when you contact us for customer support or feedback.

B. Information Collected Automatically

When you access or use our Service, we automatically collect information, including:

  • Usage Data: Information about how you use the Service, such as the features you use, the pages you view, the time and duration of your activity, and system activity.
  • Technical/Device Data: Internet Protocol (IP) address, browser type and settings, operating system, device identifiers, and crash data.
  • Log Data: Server logs, which may include details of how and when you accessed the Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

Purpose of Use Type of Data Used
To Provide and Maintain the Service Account Data, Automation Content, Usage Data, Technical Data
To Process Transactions Payment Data, Account Data
To Improve and Personalize the Service Usage Data, Automation Content (anonymized/aggregated)
To Communicate with You Account Data (e.g., for customer support, service updates, and account recovery)
For Security and Fraud Prevention Account Data, Technical Data, Log Data
For Legal Compliance All data types as required by law
Note on Automation Content: The data you submit for automation is used strictly to execute your requested workflows and improve the functionality of the platform's AI models in an aggregated or anonymized manner. We do not use this data for marketing or to train external, general-purpose AI models.

4. How We Share Your Information

We do not sell your personal data.

We may share your information with third parties only in the following circumstances:

Third Party Purpose of Sharing Data Shared
Supabase For account authentication, user management, and database hosting. Account Data, Automation Content, Usage Data
Stripe To process subscription payments and manage billing information. Payment Data, Account Data (Name, Email)
Service Providers Other trusted third parties who perform functions on our behalf (e.g., hosting, analytics, bug tracking). Data necessary for them to perform their service
Legal Requirements If required by law, subpoena, or legal process. As legally required

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Important Notice: However, no internet transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Your Data Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right of Access

The right to request a copy of the personal data we hold about you.

Right to Rectification

The right to have inaccurate or incomplete data corrected.

Right to Erasure

The right to request that we delete your personal data, subject to certain legal exceptions.

Right to Restrict Processing

The right to request that we limit the way we use your personal data.

Right to Data Portability

The right to receive your personal data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact us at support@vistr.us.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Effective Date." You are advised to review this Privacy Policy periodically for any changes.