Privacy Policy

What we collect

Account details: your name, business name, email, phone, sign-in and two-step settings.

Business data you add or connect: customers and their contact details, estimates, invoices, payments received, jobs, schedules, notes, photos, and team messages.

Messages and calls you connect: emails, texts and calls handled through Vesaya, plus voice messages and their transcripts.

Voice: what you say to the assistant is turned into text to carry out your request. Listening for her name happens on your phone; no audio leaves the device until she's actually listening.

Device and usage information: app version, device type, crash reports, and sign-in events (time, approximate location from IP, device) to protect your account.

Location: driving mode reads your speed on the phone to switch on by itself. We don't store or send your location.

Billing: handled by Stripe. We see your plan and the last four digits of a card, never the full number.

How we use it

To run Vesaya for you: drafting, reminders, scheduling, dispatch, sending what you approve, and answering your questions.

To keep accounts and data secure, prevent fraud, and meet legal requirements.

To support you and improve Vesaya. We don't sell personal information, don't share it for others' advertising, and don't use your data to train AI models.

Google data

If you connect Google (Gmail, Calendar), Vesaya uses that data only to provide the features you turned on, like booking visits, sending crew invites and drafting replies. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. People at Viridia can't read it except with your permission, for security, or as the law requires.

Text messages

Mobile numbers and texting consent are never shared with third parties or affiliates for their marketing. Customers can reply STOP to stop texts and HELP for help.

Who helps us run Vesaya

We use a small set of service providers ("subprocessors") to host data, run the assistant, send texts and take payments. They may use your data only to provide their service to us. The current list is on the Subprocessors page.

Calls, recordings and the people who call you

If you use a Vesaya business number or the AI receptionist, we process calls and texts for your business: callers' phone numbers, what they say (as audio and transcripts), call times and the lead details the assistant captures. We do this on your behalf, as your service provider, only to run those features for you.

Recordings (if you turn them on, with a notice to callers) are deleted after [90] days; transcripts and summaries stay with the lead until you delete it. Voice on calls is produced by our voice provider (ElevenLabs) and calls run through our telecom provider (Twilio); neither may use your calls to train models or for their own purposes.

For carrier texting registration we share your business details (not your customers' data) with the carriers' registry.

Purchases

Plans and add-ons are billed by Stripe (on vesaya.app) or by Apple (if bought in the iPhone app). We see what you bought and the last four digits of a card, never the full number. Apple purchases are also covered by Apple's privacy policy.

Our website and the waitlist (vesaya.app)

If you join the waitlist we keep your email and, only if you choose to give them, your first name, business name, trade, crew size, the tool you use today and a mobile number. We also keep your place in line, your referral code and who referred you, the page you signed up on and any campaign tags in the link you followed (like utm_source or an ad click ID), so we know which ads and posts work.

We use it to confirm your email, save your spot, send launch updates (email: unsubscribe in any message), and, only if you checked the box, texts about the launch (reply STOP to stop; we keep the exact consent wording and when you agreed). We don't sell it or share it for anyone else's marketing.

The site sets no advertising cookies. It remembers your waitlist spot and campaign tags in your own browser (local storage) so the page can show your position; clearing your browser data removes them. Analytics, if on, use Plausible, which doesn't use cookies or track you across sites. Sign-up is protected by Cloudflare Turnstile, which checks for bots. If we ever add an ad pixel (like Meta's) we'll say so here first and ask where the law requires.

Every page is served over an encrypted connection with strict security headers, and the site only talks to our own servers and the services named here. The live demo on the site never turns on your microphone: it plays sample answers.

Waitlist data is deleted if you ask, or within [12 months] if you never start a plan. Email privacy@vesaya.app to see, change or delete it.

If Viridia changes hands

If Viridia or Vesaya is sold, merged or reorganized, your data may move to the new owner, who must keep honoring this policy. We'll tell you before that happens.

How long we keep it

While your account is open. After you cancel, you have 30 days to export; then we delete your business data within [60] days, except what the law requires us to keep (like billing records). Backups roll off within [35] days.

Audit records of security events are kept [1 year].

Security

Each business's data is walled off at the database level and tested on every change. Sign-in requires two-step verification. Passwords for connected accounts are never stored by us (you sign in on their pages); the access they grant is encrypted with keys in a separate key vault. Sends require your approval and a 10-second undo. No system is perfect; if a breach affects your data, we'll tell you as the law requires.

Your choices and rights

In the app you can see, correct, export or delete your data (Settings → Legal & privacy), disconnect any account, and sign out other devices.

Depending on where you live (for example California, Colorado, Virginia, Texas, Oregon and others), you may have rights to know, access, correct, delete or port your information and to opt out of sale or targeted advertising (we do neither). Email privacy@vesaya.app; we'll verify your identity and answer within the time the law sets.

If you're a customer of a business that uses Vesaya, contact that business first; we'll help them answer you.

Children

Vesaya is for businesses and isn't meant for anyone under 18.

Changes and contact

We'll post changes here and tell you in the app if they matter.

Contact: Viridia Analytics LLC, [street address], Phoenix, Arizona · privacy@vesaya.app · [phone]