Privacy Policy

1. Overview & Service Scope

Vistaro AI (“Vistaro”, “we”, “us”, or “our”) operates the digital Software-as-a-Service (SaaS) platform hosted at https://vistaroai.online. Vistaro provides automated AI-assisted video creation tools that convert uploaded property photographs into vertical 9:16 marketing videos for real estate agents and brokerages.

This Privacy Policy explains what data we collect, how it is used to deliver our digital services, how it is stored securely, and your rights regarding your information.

2. Information We Collect

We collect only information required to provide, bill, and improve our digital SaaS services:

• Account & Identity Information: When you register an account, we collect your full name, email address, password hash, and studio organization details.
• Uploaded Property Media: Photographs, floor plans, and listing images you upload to create video projects, as well as brand kit assets (agency logos, primary/secondary brand colors, contact watermark details).
• Generated Media & Metadata: Storyboard choreographies, scene descriptions, motion parameters, audio selections, and rendered 9:16 vertical MP4 video files.
• Billing & Payment Information: Payment identifiers, Razorpay Order IDs, Payment IDs, chosen plan tiers, credit amounts, and immutable credit transaction records. Note: We do not store credit card numbers, debit card PINs, CVVs, or netbanking passwords on our servers. All financial transactions are securely processed directly by our PCI-DSS certified payment gateway partner, Razorpay.
• Technical & Usage Telemetry: Anonymized usage data, browser type, IP addresses (for rate limiting and fraud prevention), and rendering job execution metrics.

3. How We Use Your Information

Your information is used strictly to:

• Process listing images through automated vision analysis and scene categorization.
• Choreograph camera movements (zooms, pans, tilts) and render final 9:16 MP4 listing videos.
• Maintain your studio credit balance and provide billing invoices and transaction histories.
• Provide customer support, respond to service requests, and resolve technical issues.
• Protect against unauthorized multi-tenant access, automated scraping, and fraudulent activity.

We do not sell, rent, or lease user personal information or uploaded property media to third-party data brokers or advertisers.

4. Third-Party Service Providers

To deliver our digital SaaS platform, we integrate with established infrastructure partners who adhere to rigorous data protection standards:

• Razorpay Software Private Limited: Payment gateway partner for processing online credit purchases and subscription billing.
• Supabase: Managed PostgreSQL database, authentication, and encrypted object storage for asset management.
• Vercel Inc.: Cloud hosting and content delivery network (CDN) for website delivery.
• PostHog / Sentry: Diagnostic crash reporting and privacy-conscious product usage analytics.

5. Data Storage, Security & Retention

All data transmitted to and from Vistaro AI is encrypted in transit using 256-bit Transport Layer Security (TLS/HTTPS). Stored database records are protected by database-level Row Level Security (RLS) policies that isolate tenant data so that no user can access another studio's projects or assets.

Generated videos and uploaded assets remain stored in your studio account until you choose to delete them. You can delete individual photos, entire video projects, or request full account termination at any time.

6. Cookies & Local Storage

We use strictly necessary first-party cookies for secure user authentication and session persistence via Supabase Auth. We do not use intrusive third-party cross-site advertising trackers.

7. User Rights & Data Deletion

You have the right to access, update, export, or permanently delete your personal information and studio media. To request permanent deletion of your account and all associated project data, contact our support team.

8. Contact Information

If you have any questions, concerns, or data requests regarding this Privacy Policy, please reach out to us: