Privacy Policy

Last Updated: November 13, 2025

This Privacy Policy explains how VestaList Inc. ("VestaList," "we," "us," or "our") collects, uses, stores, and protects your personal information when you access or use our website, platform, products, and related services (collectively, the "Services").

By using VestaList, you consent to the collection and use of your information in accordance with this Privacy Policy.

1. Who We Are

VestaList Inc. A Delaware corporation Email: info@vestalist.com

We provide AI-powered marketing tools for real estate professionals, including content generation, scheduling, tone extraction, and property data processing.

2. Information We Collect

VestaList collects information in three categories: (A) information you provide, (B) information collected automatically, and (C) information from third-party integrations.

A. Information You Provide Directly

1. Account Information

  • Name
  • Email
  • Password
  • Phone number (if provided)
  • Billing information (processed by Stripe; we do not store full payment details)

2. Content You Upload

  • Listing photos, videos, virtual tours
  • Property descriptions, details, and URLs (e.g., Zillow links)
  • Branding assets
  • Profile images
  • Social media captions or drafts
  • Any other materials you submit

3. Social Media Profiles (if connected)

If you connect your Instagram or Facebook:

  • Username and profile information
  • Profile content needed for tone extraction
  • Authorization tokens (encrypted)
  • Permissions granted

We do not access private DMs or data outside the scopes you authorize.

4. Communications

  • Emails you send us
  • Support requests
  • Feedback or survey answers

B. Information Automatically Collected

We collect:

1. Usage Data

  • Login timestamps
  • Features used
  • Templates viewed
  • Actions taken (e.g., scheduling posts)
  • Interaction patterns

2. Device and Technical Data

  • IP address
  • Browser type
  • Operating system
  • Device identifiers
  • Cookies and tracking technologies (see Section 10)

3. Log Data

  • Error logs
  • Performance monitoring
  • Security events

C. Information From Third Parties

We may receive information from:

  • Meta (Instagram/Facebook API)
  • Zillow or other sites when users provide URLs for scraping
  • Stripe (billing status, subscription events)
  • Authentication providers (e.g., Google login, if added later)

3. How We Use Your Information

We use your information for the following purposes:

A. To Provide and Improve the Services

  • Generate AI content
  • Extract tone and style
  • Create templates and designs
  • Schedule and publish posts
  • Scrape and format listing data
  • Operate account dashboards
  • Maintain system performance

B. To Train and Improve AI Models

You agree that VestaList may use User Content and other data to:

  • Train and fine-tune machine learning models
  • Improve output quality
  • Enhance product features
  • Develop new capabilities

Note: Data used for model training cannot be individually removed once training is complete, but you may request deletion of your account and raw content going forward.

C. To Communicate With You

  • Send service updates
  • Send account or billing notifications
  • Provide customer support
  • Send product or feature announcements (opt-out available)

D. For Security, Fraud Prevention & Compliance

  • Verify account authenticity
  • Prevent platform abuse
  • Maintain the security of integrations
  • Comply with U.S. law and enforce our Terms

E. For Analytics and Product Development

  • Understand how users interact with features
  • Improve onboarding and UX
  • Guide product decisions

4. How We Share Your Information

We do not sell your personal information.

We may share information with:

A. Service Providers (Processors)

  • Stripe – billing and payments
  • Cloud hosting providers (AWS, GCP, etc.)
  • Analytics tools
  • Error monitoring and logging tools
  • Email communication partners

These partners only access data as necessary to perform services for VestaList.

B. Social Media Platforms

When you schedule content, we share necessary data with:

  • Instagram
  • Facebook

We only transmit what is required to publish posts.

C. Legal or Regulatory Authorities

We may disclose information if required to:

  • Comply with applicable law
  • Respond to lawful requests
  • Protect our users
  • Protect VestaList's rights, property, or security

D. Business Transfers

If VestaList is acquired, merged, or undergoes a financing or asset transfer:

  • Your data may be transferred as part of the transaction
  • The new entity will continue to honor this Privacy Policy

5. Data Storage & Retention

A. Storage Duration

We store data indefinitely unless:

  • You request deletion
  • VestaList chooses to delete dormant accounts or content
  • Legal or operational requirements dictate otherwise

B. Backups

Deleted items may remain briefly in encrypted backups until overwritten.

C. Data Used in AI Model Training

Data already incorporated into model weights cannot be individually extracted.

6. Your Privacy Rights

Even though VestaList is a U.S.-based service, we provide core privacy rights:

A. Access

You may request a copy of your stored personal data.

B. Correction

You may request corrections to inaccurate information.

C. Deletion (Right to Be Forgotten)

You may request:

  • Deletion of your account
  • Deletion of your uploaded content
  • Cessation of future model training using your data

(Previously trained model artifacts cannot be erased.)

D. Opt-Out of Marketing Emails

You may unsubscribe at any time.

E. Data Portability (Upon Request)

We may provide a downloadable export of your data where feasible.

To exercise rights, contact us on our website contact form.

7. Children's Privacy

VestaList is not intended for individuals under 18.

We do not knowingly collect information from children.

8. Security

We implement industry-standard security practices, including:

  • Encrypted data transfer (HTTPS)
  • Encrypted storage of sensitive data
  • Access controls and audit logging
  • Regular vulnerability monitoring
  • Secure handling of API tokens

However, no system is perfectly secure.

You use VestaList at your own risk.

9. International Users

VestaList is operated in the United States.

If you access the Services from outside the U.S., you consent to:

  • Processing your data in the U.S.
  • U.S. privacy and data protection laws, which may differ from your jurisdiction

10. Cookies & Tracking Technologies

We use cookies and similar technologies for:

  • Authentication
  • Session management
  • Analytics
  • Feature tracking
  • Performance monitoring

You can manage cookies through your browser, but some features may not function properly if disabled.

11. Do Not Track

VestaList does not respond to Do Not Track (DNT) signals at this time.

12. Third-Party Links

Our platform may contain links to third-party websites.

We are not responsible for their content or privacy practices.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

If updates are material, we will notify you via email or in-app notification.

Continued use of the Services after changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

For privacy inquiries, requests, or concerns:

VestaList Inc. Email: info@vestalist.com