Privacy Policy
Last updated: May 12, 2026
Vistalia ("we," "us") respects your privacy. This Policy explains what personal data we collect, why we collect it, how we use and share it, and the controls you have. By using the Service you agree to this Policy.
1. What we collect
| Category | Examples | Source |
|---|---|---|
| Account | Email, password (hashed), sign-in events | You, at signup |
| Brand kit | Full name, brokerage, phone, email, license #, headshot, brokerage logo, voice clone ID | You, in Settings → Branding |
| Listing content | Property photos, address, price, beds/baths, marketing hook | You, when creating a project |
| Render output | Generated MP4 files, thumbnails, per-scene clips, edit-plan metadata | Generated by us from your inputs |
| Billing | Stripe customer ID, subscription status, payment method (last 4 only) | Stripe, when you subscribe |
| Diagnostic | Browser type, IP address, error logs, render duration | Auto, on use |
2. Why we collect it
- To run the Service: generate your videos, store them in your library, sync your brand kit across devices.
- To bill you: manage your subscription, send invoices, prevent abuse of the trial.
- To support you: respond to questions and troubleshoot failed renders.
- To improve the product: aggregate, anonymized error and usage data informs reliability work. We never train AI models on Your Content.
- To meet legal obligations: respond to lawful requests, prevent fraud.
3. Who we share data with
We use a small number of trusted infrastructure providers to operate the Service. We do not sell or rent your personal data to anyone.
| Subprocessor | Purpose | Data shared |
|---|---|---|
| Supabase | Auth, database, file storage | All account, brand kit, listing, and render data |
| Vercel | Web hosting + serverless functions | Request metadata; data passes through but is not stored |
| Render.com | Render-worker hosting | Listing photos, brand kit, render output during processing |
| Runway ML | AI image-to-video generation | Listing photos + per-scene prompts (no agent identity) |
| OpenAI | Photo classification + AI Motion Director | Listing photos + listing details (no agent identity) |
| ElevenLabs | Voice synthesis (when narration enabled) | Narration script + voice clone ID (when configured) |
| Stripe | Payment processing | Email, name, payment method |
| Resend | Transactional email delivery | Email address, message contents |
Each subprocessor is contractually required to handle your data in accordance with its own published privacy practices. We review this list and update it when we add a provider.
4. AI processing
Vistalia sends your listing photos and our generated prompts to Runway ML and OpenAI to produce video output. Per their published policies, neither Runway nor OpenAI uses API content to train their foundation models (this is the contractual default for both). We do not attach your name, brokerage, or contact information to the API requests themselves; only the photos, scene prompts, and listing facts that drive the generation.
5. Cookies and similar tech
We use a small set of cookies and local-storage entries to operate the Service:
- Strictly necessary: Supabase auth session cookie, brand-kit cache (localStorage). Required to keep you signed in and remember your branding offline.
- Analytics: Plausible Analytics (when enabled) measures aggregate page views and conversion events. It does not use cookies or collect personal identifiers.
We do not use advertising or cross-site tracking cookies.
6. Your rights
You have the following rights with respect to your personal data:
- Access: view your account, brand kit, and library at any time.
- Export: download a copy of your data from Settings → Download my data.
- Correction: update your email, brand kit, and listing details directly in the app.
- Deletion: delete your account from Settings → Delete my account. This removes your profile, brand kit, render audit log, library entries, and uploaded photos within 30 days. Stripe billing records are retained as required by tax and accounting law.
- Object / restrict: contact us at privacy@estatemotion.ai to object to or restrict specific processing.
- Complaint: EU/UK residents may complain to their local data-protection authority.
7. Data retention
We keep your account data for as long as your account is active. After account deletion, we remove personal data within 30 days, except for:
- Stripe billing records (retained as required by tax law, typically 7 years).
- Aggregated, anonymized diagnostic logs that no longer identify you.
- Backups, which are purged on the rolling Supabase backup schedule (currently 30 days).
8. International transfers
Vistalia is operated from the United States. By using the Service, you understand that your data is processed in the US and other jurisdictions where our subprocessors operate. Where required, we rely on Standard Contractual Clauses for transfers from the EU/UK.
9. Children
Vistalia is not directed to children under 18 and we do not knowingly collect personal data from anyone under 18. If you believe a child has signed up, contact us and we will remove the account.
10. Security
We use HTTPS in transit, encryption at rest (Supabase + Render storage), hashed passwords (Supabase Auth), Row-Level Security on every database table, and least-privilege service keys. No system is perfectly secure; if you suspect a breach affecting your account, contact security@estatemotion.ai.
11. Changes to this Policy
We may update this Policy as the product evolves. Material changes will be announced by email at least 14 days in advance. The "Last updated" date at the top of this page reflects the most recent revision.
12. Contact
Privacy questions: privacy@estatemotion.ai
Security incidents: security@estatemotion.ai
Everything else: support@estatemotion.ai