Privacy Policy

1. Scope

This Privacy Policy applies to personal information processed by us in connection with our website, applications, and the Services. It does not apply to data that our customers upload or collect (Customer Data) and for which our customers themselves are responsible and may have separate privacy notices.

2. Personal Information We Collect

We collect different types of personal information depending on how you interact with us:

A. Information you provide directly:

• Account registration data (e.g., name, email address, company, password)
  
  
• Purchases, billing and payment information
  
  
• Communications (e.g., support requests, inquiries, job applications)
  
  
• Information you input into our Services (as permitted under our service agreements)
  
  

B. Information collected automatically:

• Internet or other network activity (IP address, device type, browser, pages viewed, links clicked, time spent)
  
  
• Cookies, pixel tags, web beacons, local storage and other tracking technologies
  
  
• Geolocation data (if applicable)
  
  
• Analytics data about how you use our Services
  
  

C. Information obtained from other sources:

• Third-party public or business sources, marketing/lead databases, strategic partnerships
  
  

3. How We Use Your Personal Information

We use your personal information for the following purposes:

• To provide and maintain our Services (e.g., account management, support, access to features)
  
  
• Administrative purposes: network and information security, fraud detection, development and improvement of our Services, auditing and enforcing our agreements
  
  
• Marketing and advertising: analyzing trends, delivering tailored content and communications, interest-based advertising (subject to applicable consent)
  
  
• Other purposes you expressly request or to which you consent
• Google user data - Visto's use and transfer to any other app of information received from
  Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy),
  including the Limited Use requirements. We do not use data obtained through
  Google Workspace APIs, including Gmail, to develop, improve or train
  generalized or non-personalized AI or machine learning models, and we do
  not transfer it to third parties for that purpose. When you connect Gmail,
  Visto can send email from your address once you turn that feature on. It
  cannot read your mailbox.

We do not use your personal information to train general-purpose AI models.

4. How We Disclose Your Information

We do not sell your personal information. We disclose personal information as follows:

• Service Providers: to vendors who perform services for us (hosting, analytics, payments, email delivery, customer support)
  
  
• Business Partners / Affiliates: when jointly offering products or services or integrating functionalities
  
  
• Legal / Safety / Compliance: when required to comply with law, protect rights/persons, or in the event of merger/acquisition/asset-sale

‍

• AI and infrastructure service providers: We use providers such as Anthropic,
  OpenAI and Perplexity to generate analysis and drafts, and Langfuse to
  monitor those requests. They process data on our behalf under terms that
  do not allow them to use it to train their models.
  
  

5. Your Privacy Choices & Rights

Depending on your location, you may have the right to:

• Opt out of marketing communications (via unsubscribe links or contacting us)
  
  
• Access, correct, update or request deletion of your personal information
  
  
• Restrict or object to our processing of your personal information
  
  
• Withdraw consent where applicable
  
  
• For California residents: additional rights under the California Consumer Privacy Act (CCPA)
  
  

We do not honor “Do Not Track” signals or similar browser mechanisms.

6. Security of Your Information

We implement commercially reasonable security measures (encryption, access controls, secure storage) to protect your personal information. No system is 100% secure and we do not guarantee absolute security.

7. International Data Transfers

Your personal information may be transferred to, stored and processed in the United States or other jurisdictions whose data protection laws may differ from your country. We aim to apply safeguards consistent with applicable law.

8. Retention of Personal Information

We retain personal information for as long as necessary to:

• Provide our Services
  
  
• Fulfil the purposes for which it was collected
  
  
• Comply with legal obligations
  
  
• Resolve disputes, enforce our policies and agreements
  
  

9. Supplemental Notice for California Residents

If you are a California resident, you may have the right to:

• Know the categories of personal information collected and disclosed in the past 12 months
  
  
• Request deletion of personal information collected
  
  
• Opt out of the “sale” of personal information (we do not sell personal information)
  
  
• Not receive discriminatory treatment for exercising your rights
  
  

10. Children’s Information

Our Services are not directed to children under [Insert Age – e.g., 16] and we do not knowingly collect personal information from children. If you believe your child has provided us personal information, please contact us and we will delete it, unless we are required to retain it.

11. Other Provisions

Third-Party Websites/Applications: Our Services may contain links to other websites, or be embedded in third-party applications. We are not responsible for their privacy practices, and you should review their privacy policies.
Supervisory Authority Rights: If you live in the EU/EEA/UK/Brazil, you have the right to lodge a complaint with the relevant data protection authority.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified (e.g., by posting on our site) and you are deemed to accept the updated policy by continuing to use the Services.

13. Contact Us

If you have questions, requests or complaints regarding this Privacy Policy or your personal information:
Visto, Inc.
1226 Redwood Way
Millbrae, CA 94030
Email: tom.lee@getvisto.com

‍