01.Introduction & Scope
This Privacy Policy applies to the Vestiger web application, mobile Progressive Web Application (PWA), API, and related services (collectively, the “Service”). Vestiger provides an Answer Engine Optimization (AEO) and local presence management platform designed specifically for home service contractors, tradespeople, and small business owners.
By accessing or using Vestiger, creating an account, or connecting any third-party business channels, you agree to the collection and use of information in accordance with this policy. If you do not agree with any terms in this policy, please do not use our Service.
02.Information We Collect
We collect information you provide directly to us, as well as data gathered automatically when you interact with the Service:
- Account Credentials: When you register, we collect your email address, securely hashed password, business name, and industry/trade category (e.g. Roofing, Landscaping, HVAC, Remodeling).
- Business Profile Data: Optional contact details you provide to enrich your posts and local SEO presence, including business phone number, website URL, and primary service areas.
- Field Project Photos & Metadata: Photos you capture on site or upload, along with accompanying job notes, captions, and project tags.
- Geolocation Data: With your explicit device permission, we collect GPS coordinates (latitude, longitude) and resolved city/state/zip metadata strictly to geotag your project posts and optimize map rankings in your service area. You may disable location permissions at any time via your browser or device settings.
- Connected Platform Credentials: When you connect accounts such as Google Business Profile, Instagram, Facebook, X (formerly Twitter), Yelp, Nextdoor, LinkedIn, Angi, Houzz, or Thumbtack, we store authorized OAuth tokens and location/account identifiers. We do not have access to or store your platform passwords.
- Billing Information: Payment card details and subscriptions are processed by our PCI-DSS compliant payment processor (Stripe). Vestiger does not store your raw credit card numbers or security codes.
- Technical Logs & Usage: Browser user-agent, operating system, IP address, and access timestamps to detect security anomalies, ensure platform stability, and diagnose technical issues.
03.How We Use Your Information
We use the data collected strictly for the following operational purposes:
To transform your uploaded project photos into engaging, locally-optimized marketing copy, hashtags, and structured Answer Engine Optimization (AEO) data.
To publish project updates, photos, and geotagged pins directly to your connected Google Business Profile and social media platforms upon your confirmation.
To maintain an audit trail of published posts, track platform response latencies, and confirm successful live link creation across marketing directories.
To manage your 30-day risk-free trial, process billing renewals, issue receipts, and provide customer support assistance.
04.Google API Services User Data Policy & Limited Use Disclosure
Vestiger integrates with Google Business Profile APIs to publish local updates, project photos, and business notifications. Our use and transfer of information received from Google APIs strictly adheres to the Google API Services User Data Policy, including the Limited Use requirements:
- Specific Purpose: We only request and access Google Business Profile permissions necessary to retrieve your verified location list and publish authorized project posts and photos.
- No Transfer to Third Parties: We do not transfer Google user data to external third parties, except as strictly required to provide the core syndication features requested by you, comply with applicable law, or as part of a corporate merger or acquisition.
- No Advertising Use: We do not use or transfer Google user data to serve advertisements, including personalized, re-targeted, or interest-based advertising.
- No Human Review: No human employees or contractors read your Google Business Profile data unless you provide explicit consent to investigate a specific technical error, or where required by law or security necessity.
05.AI Copywriting & Large Language Models
Vestiger utilizes enterprise AI models (such as Google Gemini and OpenAI) to craft localized copy, headlines, and tags from project inputs.
Project descriptions and photo prompts passed to our AI processing pipeline are encrypted in transit and transmitted solely for real-time text completion. Under our enterprise terms of service, customer prompts are not used to train public machine learning foundation models.
06.Data Sharing & Third-Party Services
We do not share your personal information with third parties, except in the following limited circumstances:
- Your Authorized Publishing Channels: When you press “Confirm & Publish Everywhere”, your project photos, captions, and coordinates are transmitted to the third-party platforms you explicitly connected (Google Business Profile, Meta, X, Yelp, Nextdoor, LinkedIn, etc.).
- Essential Infrastructure Providers: Hosting and database providers (Render, Vercel, PostgreSQL) and payment processors (Stripe) who operate under strict confidentiality agreements and industry security standards.
- Legal Compliance: If required by valid subpoena, legal process, or applicable regulation, or to protect the safety, rights, or property of Vestiger and its users.
07.Data Security & Storage
We implement comprehensive technical and organizational safeguards designed to protect your data against unauthorized access, loss, or alteration:
- All network communications are secured using modern Transport Layer Security (TLS 1.3 / SSL).
- OAuth access tokens are encrypted at rest using AES-256 encryption.
- All administrative dashboards and internal endpoints are protected by hardware key/access header verification.
- Database instances are isolated behind secure firewalls with daily encrypted backups.
08.Data Retention & Account Deletion
We retain your profile data, project history, and connected channel tokens for as long as your account remains active.
You have full control over your information:
- Disconnecting Channels: You can disconnect any social or business profile at any time from your Account Settings. Disconnecting immediately revokes our access token.
- Full Account Deletion: You may request complete erasure of your account, history, media records, and stored tokens by emailing us at support@vestiger.app or submitting a ticket in your dashboard. Upon confirmation, all account data is purged within 30 days.
09.Your Rights (GDPR, CCPA/CPRA)
Depending on your geographical location, you have statutory rights concerning your personal data:
- Right to Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request the deletion of your personal data under certain conditions.
- Right to Restrict Processing: Request limits on how we process your information.
- Right to Data Portability: Obtain your project content in a structured, machine-readable format.
- Non-Discrimination: We will never discriminate against you or deny services because you exercised your privacy rights.
10.Cookies & Local Storage
Vestiger does not deploy third-party behavioral advertising cookies. We only utilize:
- Essential Session Storage: Secure JWT authentication tokens to keep you logged in.
- PWA State Storage: Browser local storage to remember your Progressive Web App installation prompt preferences and draft inputs.
11.Changes to This Policy
We may update our Privacy Policy periodically to reflect enhancements to our service, new platform integrations, or legal compliance updates. We will notify you of material changes by placing a prominent notice on our website or sending an email notification prior to the change becoming effective.
Contact & Privacy Inquiries
If you have questions, comments, or data access/deletion requests regarding this Privacy Policy, please contact our Data Protection and Security Team:
Entity: Vestiger Presence & Marketing Inc.
Email: support@vestiger.app
Support Turnaround: Within 24-48 business hours
Web Portal: https://vestiger.app