Privacy Policy

What we collect, how we use it — including billing — and the choices you have.

Last updated: July 31, 2026

Information we collect

We collect information you provide directly and data generated when you use Vistai. The categories below are the main types we handle:

Account data — name, email, and profile photo from Google sign-in.
Profile data — username, bio, and visibility settings you choose.
Growth data — planets, tasks, streaks, badges, task history, and Orba usage.
Billing data — subscription plan, status, renewal dates, and Dodo customer/subscription IDs needed to manage your paid access. Card numbers are collected and stored by our payment processor (Dodo Payments), not by Vistai.
Connector data — OAuth tokens (encrypted), connected account display names, and synced activity metadata from GitHub, Notion, Figma, and other connectors when you opt in (Plus/Max).
MCP session data — encrypted session tokens and Skill Graph activity used when AI tools call Vistai MCP.
Technical data — device/browser type and basic usage needed for limits and reliability.

How we use information

We use your information to operate and improve Vistai, including:

Generating and serving daily missions, plans, and Orba responses.
Processing subscriptions, renewals, plan changes, invoices, and entitlement checks.
Syncing Connector activity into your Skill Graph and serving MCP tools to authorized AI clients.
Syncing progress across devices and enforcing plan-tier limits.
Displaying optional public profiles and leaderboard rankings.
Responding to support and billing requests, and fixing bugs you report.
Sending essential service notices (including billing and security) — not selling your data to advertisers.

Payments & processors

Paid plans are billed through Dodo Payments. When you subscribe, Dodo processes your payment and may collect billing name, email, payment method details, and transaction records under its own privacy policy. Vistai receives confirmation of payment status and subscription identifiers so we can unlock the correct plan — we do not store full card numbers on our servers.

Billing history and payment method updates are available via Manage subscription on /billing. See also our Refund Policy and Terms of Service.

Storage & security

Data is stored on secure cloud infrastructure with encryption in transit and at rest. We apply access controls, monitoring, and reasonable organizational measures to reduce the risk of loss, misuse, or unauthorized access. Payment credentials are handled by Dodo Payments under PCI-aligned practices.

No online service is perfectly secure. If we learn of a breach that affects your account, we will notify you as required by applicable law and work to remediate quickly.

Retention

We retain account and growth data while your account is active. After you delete your account from Settings, we remove associated profile and product data from our systems promptly (typically within a few days, including backup rotation). Payment processors may keep their own transaction records under their policies and applicable law.

Your rights & choices

You stay in control of your Vistai data:

Update profile fields and username rules in Settings.
Control what appears on your public profile page.
Manage or cancel your subscription from /billing (via the Dodo customer portal).
Disconnect cloud Connectors and rotate MCP session tokens from Settings.
Delete your account permanently from Settings → Delete account.
Sign out on any device from Settings.
Email support for help with access or correction requests — we aim to reply within one to two business days.

Questions about this policy? Email support@vistai.site or ask in Discord. See also our Cookie Policy.

Need help? Email support@vistai.site or join our Discord community for updates, feedback, and support from the team and other builders.