Privacy Policy
Last updated: July 13, 2026
Vistalia, a service operated by EstateMotion LLC, an Arizona limited liability company doing business as Vistalia ("we," "us"), respects your privacy. EstateMotion LLC is the data controller for the personal data described in this Policy. This Policy explains what personal data we collect, why we collect it, how we use and share it, and the controls you have. By using the Service you agree to this Policy.
1. What we collect
| Category | Examples | Source |
|---|---|---|
| Account | Email, password (hashed), sign-in events | You, at signup |
| Brand kit | Full name, brokerage, phone, email, license #, headshot, brokerage logo, voice clone ID | You, in Settings → Branding |
| Listing content | Property photos, address, price, beds/baths, marketing hook | You, when creating a project |
| Render output | Generated MP4 files, thumbnails, per-scene clips, edit-plan metadata | Generated by us from your inputs |
| Voice data | A voice recording you provide to create your narration clone; the resulting synthetic voice model reference | You, in Settings → Voice (optional) |
| Billing | Stripe customer ID, subscription status, payment method (last 4 only) | Stripe, when you subscribe |
| Diagnostic | Browser type, IP address, error logs, render duration | Auto, on use |
2. Why we collect it
- To run the Service: generate your videos, store them in your library, sync your brand kit across devices.
- To bill you: manage your subscription, send invoices, prevent abuse of the trial.
- To support you: respond to questions and troubleshoot failed renders.
- To improve the product: aggregate, anonymized error and usage data informs reliability work. We never train AI models on Your Content.
- To meet legal obligations: respond to lawful requests, prevent fraud.
3. Who we share data with
We use a small number of trusted infrastructure providers to operate the Service. We do not sell or rent your personal data to anyone.
| Subprocessor | Purpose | Data shared |
|---|---|---|
| Supabase | Auth, database, file storage | All account, brand kit, listing, and render data |
| Vercel | Web hosting + serverless functions | Request metadata; data passes through but is not stored |
| Render.com | Render-worker hosting | Listing photos, brand kit, render output during processing |
| fal.ai | AI video rendering (cloud GPU provider) | Listing photos + per-scene prompts (no agent identity) |
| OpenAI | Photo classification + AI Motion Director | Listing photos + listing details (no agent identity) |
| Google (Gemini) | Per-scene render verification | Rendered video frames + your original photos for comparison (no agent identity) |
| ElevenLabs | Voice cloning + narration synthesis | Your voice recording (when you create a clone), the resulting voice model, narration scripts |
| Stripe | Payment processing | Email, name, payment method |
| Resend | Transactional email delivery | Email address, message contents |
| Sentry | Error monitoring (app only) | Error traces, browser metadata, IP address |
| Meta | Advertising measurement (marketing site only) | Page views and conversion events via the Meta Pixel; subject to Meta's cookie policy |
Each subprocessor is contractually required to handle your data in accordance with its own published privacy practices. We review this list and update it when we add a provider.
4. AI processing
Vistalia sends your listing photos and our generated prompts to fal.ai and OpenAI to produce video output, and sends rendered frames to Google (Gemini) to verify each scene against your original photo. Per their published policies, these providers do not use API content to train their foundation models (this is the contractual default). We do not attach your name, brokerage, or contact information to the API requests themselves; only the photos, scene prompts, and listing facts that drive the generation.
4.1 Voice recordings and cloning.
If you create a voice clone, the recording you provide is sent to ElevenLabs to build a synthetic voice model used solely to narrate your videos. We store a reference to that model, not the raw audio, in your brand kit. Deleting your voice in Settings — or deleting your account — deletes the voice model at ElevenLabs as well. The voice demo on our public site works differently: it creates a temporary clone, speaks one fixed sample line, and deletes the clone immediately; neither the recording nor the clone is stored.
5. Cookies and similar tech
We use a small set of cookies and local-storage entries to operate the Service:
- Strictly necessary: Supabase auth session cookie, brand-kit cache (localStorage). Required to keep you signed in and remember your branding offline.
- Analytics: Plausible Analytics (when enabled) measures aggregate page views and conversion events. It does not use cookies or collect personal identifiers.
- Advertising measurement (marketing site only): our public marketing pages at vistalia.ai use the Meta Pixel to measure how our ads perform (page views, signups, purchases). The pixel sets Meta cookies; see Meta's cookie policy for details and opt-out options, including Meta's ad preferences.
The application itself (the /app dashboard) does not run advertising or cross-site tracking cookies.
6. Your rights
You have the following rights with respect to your personal data:
- Access: view your account, brand kit, and library at any time.
- Export: download a copy of your data from Settings → Download my data.
- Correction: update your email, brand kit, and listing details directly in the app.
- Deletion: delete your account from Settings → Delete my account. This removes your profile, brand kit, voice clone (including the model at ElevenLabs), render audit log, library entries, and uploaded photos within 30 days. Stripe billing records are retained as required by tax and accounting law.
- Object / restrict: contact us at privacy@vistalia.ai to object to or restrict specific processing.
- Complaint: EU/UK residents may complain to their local data-protection authority.
7. Data retention
We keep your account data for as long as your account is active. After account deletion, we remove personal data within 30 days, except for:
- Stripe billing records (retained as required by tax law, typically 7 years).
- Aggregated, anonymized diagnostic logs that no longer identify you.
- Backups, which are purged on the rolling Supabase backup schedule (currently 30 days).
8. International transfers
Vistalia is operated from the United States. By using the Service, you understand that your data is processed in the US and other jurisdictions where our subprocessors operate. Where required, we rely on Standard Contractual Clauses for transfers from the EU/UK.
9. Children
Vistalia is not directed to children under 18 and we do not knowingly collect personal data from anyone under 18. If you believe a child has signed up, contact us and we will remove the account.
10. Security
We use HTTPS in transit, encryption at rest (Supabase + Render storage), hashed passwords (Supabase Auth), Row-Level Security on every database table, and least-privilege service keys. No system is perfectly secure; if you suspect a breach affecting your account, contact security@vistalia.ai.
11. Changes to this Policy
We may update this Policy as the product evolves. Material changes will be announced by email at least 14 days in advance. The "Last updated" date at the top of this page reflects the most recent revision.
12. Contact
Privacy questions: privacy@vistalia.ai
Security incidents: security@vistalia.ai
Everything else: support@vistalia.ai