Privacy

Privacy policy.

How Vistui collects, uses, and protects account data, prompts, generated flows, and billing information. Effective July 21, 2026.

1. Who we are

Vistui (“we”, “us”, or “our”) provides an AI-assisted studio for planning and generating multi-screen product design flows. This Privacy Policy explains how we collect, use, store, and share personal information when you use vistui.com and related services (the “Service”).

2. Information we collect

We collect information in the following categories:

  • Account information — email address, display name, authentication identifiers, and profile preferences you provide when you sign up or sign in (including via third-party auth providers such as Google).
  • Workspace content — prompts, project names, flow structures, brand direction, uploaded references, generated screen previews, exports, and related metadata you create in the studio.
  • Billing information — plan selection, credit balance, and payment-related records processed by our payment provider (Stripe). We do not store full card numbers on our servers.
  • Usage and device data — log data such as IP address, browser type, pages visited, approximate location derived from IP, and product events needed to operate, secure, and improve the Service.
  • Communications — messages you send to us (for example support or privacy requests at contact@vistui.com).

3. How we use information

We use personal information to:
  • Provide, maintain, and improve the Service, including AI generation and exports.
  • Authenticate users, manage sessions, and protect accounts.
  • Process subscriptions, credits, and invoices.
  • Personalize workspace settings and remember preferences.
  • Monitor reliability, prevent abuse, and enforce our Terms of Service.
  • Respond to support and privacy requests.
  • Comply with legal obligations and protect our rights.

4. AI generation and your content

When you submit prompts, references, or brand direction, we process that content to generate design flows and previews. Generation may involve third-party AI model providers acting as processors on our behalf. We use your content to deliver the Service to you. We do not sell your prompts or generated project assets. Public showcase projects are only published when you choose to make them public.

5. How we share information

We share information only as needed to run the Service:
  • Infrastructure providers — such as hosting, authentication, and database services (including Supabase).
  • AI providers — to generate screen previews and related outputs from your prompts.
  • Payment processors — Stripe, for billing and subscription management.
  • Legal and safety — when required by law, or to investigate fraud, abuse, or security incidents.

We do not sell personal information. If we are involved in a merger, acquisition, or asset sale, your information may transfer as part of that transaction under continued confidentiality commitments.

6. Cookies and similar technologies

We use cookies and similar technologies for authentication, security, preferences, and (where enabled) analytics. Details are in our Cookie Policy.

7. Data retention

We retain account and workspace data while your account is active and for a reasonable period afterward to support backups, dispute resolution, security, and legal compliance. You can delete your account in Settings (or email contact@vistui.com); some records (such as Stripe billing history or security logs) may be retained where required by law or legitimate business needs.

8. Security

We use industry-standard safeguards, including encryption in transit, access controls, and secure cloud infrastructure. No method of transmission or storage is completely secure; we work to protect your information and continually improve our controls.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, export, or delete personal information, or to object to or restrict certain processing. In Settings you can update your display name, download an account data export, and permanently delete your account. You can also manage billing from the dashboard or email contact@vistui.com. If you signed up through a third-party auth provider, some account controls also live with that provider.

10. Children’s privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

11. International transfers

We may process information in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers, such as contractual protections with our service providers.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the effective date. Material changes may also be communicated in-product or by email when appropriate.

13. Contact

For privacy questions or requests, email contact@vistui.com.