Privacy policy

1. Controller

Vistaro (the operator identified in the legal notice and admin settings) is the data controller for personal data processed through vistaro.art. Contact us at the privacy email listed on this site.

2. Data we collect

Account data: email address, name, preferred language and country.

Content: room photos you upload, AI-generated images, and your conversations with the AI designer.

Payment data: PayPal transaction and subscription identifiers, amounts and statuses. We never receive your card details.

Quote requests: contact details and project information you provide, together with a record of your consent.

Technical data: security logs and, only with your consent, anonymous first-party usage statistics.

3. Purposes and legal bases

Providing the service and your account (performance of contract).

Processing payments and keeping accounting records (contract and legal obligation).

Sharing your project with renovation professionals (your explicit consent, which you can withdraw at any time).

Security, fraud and abuse prevention, rate limiting (legitimate interests).

Product analytics (consent).

4. Recipients

Service providers acting on our behalf: Google Cloud / Firebase (hosting, database, storage, authentication), OpenAI (AI processing of prompts and images), PayPal (payments) and our transactional email provider.

Renovation professionals: only when you explicitly consent to receive quotes, limited to the categories described at the time of consent.

5. International transfers

Some providers may process data outside the European Economic Area. Where this happens, transfers rely on adequacy decisions or the European Commission's Standard Contractual Clauses.

6. Retention

Account content is kept while your account is active and deleted when you delete your account.

Payment records are kept for the period required by accounting and tax law.

Quote requests are kept for up to 24 months or until you withdraw consent, whichever comes first, unless a longer period is required by law.

7. Your rights

You can access, rectify, export (portability) and delete your data, restrict or object to processing, and withdraw consent at any time. Export and deletion are available directly in your account. You can also lodge a complaint with your data protection authority.

8. AI processing

Your photos and messages are processed by AI models to generate renovation concepts. AI outputs are concepts for inspiration and may contain inaccuracies. We do not use your content to make decisions with legal effects about you.