Privacy Policy

Vesta Global Inc. (“Vesta”, “we”, “us”) provides AI virtual staging and photo-editing tools for real-estate professionals at vestastudio.io. We are based in Dallas, Texas, USA.

This policy explains what we collect when you visit the site or use the Studio, why, who we share it with, and the choices you have. Questions go to info@vestastudio.io.

Account details.When you sign in with Google or Apple we receive your name, email address and profile picture — the “openid email profile” scope, nothing more. If you sign in with an email code, we receive the address you enter. We also store the two onboarding answers you give (your line of work and how you heard about us), your plan, and your credit balance.

Photographs and listing details. The photographs you upload, the images the Studio produces from them, and what you tell us about each space — room type, style, dimensions, ceiling height, light and condition — plus any listing address or locality you enter.

Payment information. Payments are handled by Stripe. We never receive or store your full card number; we keep the Stripe customer and subscription identifiers, your plan, its status and renewal date.

Keys you give us. If you connect your own imaging-provider API key, we store it so the Studio can act on your behalf with that provider.

Compliance records. For every image we disclose and export, an audit-ledger entry: a cryptographic hash of the file, the time, and the disclosure applied.

Usage analytics, when enabled. Our own first-party analytics can record the pages you visit, how far you scroll, clicks on named buttons and links, where you pause, your device type, screen size, the website that referred you, and whether you have visited before. It never records what you type, the contents of forms, or text on the page. It honours Do Not Track and Global Privacy Control, and where we ask for consent it records nothing until you give it. We do not use third-party advertising trackers.

• To create and secure your account and sign you in.
• To stage, edit and deliver the images you request, and to keep them in your gallery.
• To apply the disclosure the law requires and keep the record that proves it was applied.
• To bill you, manage your plan and credits, and send receipts and service messages.
• To understand how the site is used so we can improve it, where analytics are enabled.
• To respond to you, prevent abuse, and meet our legal obligations.

California’s AB 723 requires advertised, digitally altered listing photographs to carry a disclosure and a link to the unaltered original. To meet that, when you stage a photograph, Vesta publishes the original on a public page at a long, unguessable link, and places a QR code pointing to it on every export. Anyone who has that link can view the original.

Only upload photographs you are entitled to publish in this way.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share it only with the service providers that run the Studio for us, each for the purpose given:

• Google and Apple — signing you in, if you choose them.
• WorkOS — sending and verifying email sign-in codes.
• Decor8 and MuAPI — processing the photographs you submit to produce the images you ask for.
• Supabase — our database and private file storage.
• Stripe — payments and subscriptions.
• Vercel — hosting the website and application.
• Our email and automation providers — sending account and service emails.

We may also disclose information if the law requires it, to protect our rights or users’ safety, or as part of a merger or sale of the business, in which case this policy continues to apply.

Vesta does not use your photographs or your images to train AI models. Your photographs are sent to our imaging providers only so they can produce the output you request.

We use a small number of essential cookies to keep you signed in and to protect forms against forgery.

Your browser’s local storage holds a few preferences: your light or dark theme, whether the Studio sidebar is collapsed, whether you have visited before, and your analytics choice. None of it is used for advertising, and you can clear it at any time in your browser.

We keep your account information, photographs and images for as long as your account is open. When you ask us to delete your account, we delete or anonymise your personal information, except:

• audit-ledger entries, which are append-only by design because they exist to prove a disclosure was applied;
• records we must keep for tax, accounting or other legal reasons, for as long as the law requires.

Your files are held in private storage and served through signed, expiring links; data travels encrypted; and access to our database is restricted to the application itself. No system is perfectly secure, so please use a strong sign-in method and tell us at info@vestastudio.io if you suspect a problem.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or limit how we use it. California residents have these rights under the CCPA; we do not sell or share personal information as that law defines it.

To use any of these rights, email info@vestastudio.io from the address on your account. We will confirm it is you, act on the request within the time the law allows, and not treat you differently for asking.

Vesta is a professional service and is not directed at children. We do not knowingly collect information from anyone under 16.

We and our providers process data in the United States. If you use Vesta from elsewhere, your information will be transferred to and processed in the United States.

We will update this page when our practices change and revise the date at the top. If a change is significant we will tell you by email or in the Studio before it takes effect.

Vesta Global Inc. · 539 West Commerce, Dallas, TX 75208, United States · info@vestastudio.io. See also our Terms & Conditions.