Privacy Policy

1. Platforms Covered

This Privacy Policy applies to all Estavo platforms operated by ViveScript Solutions:

• Web application — estavo.net and all subdomains
• Android mobile app — distributed via Google Play Store
• Future iOS app — distributed via the Apple App Store when available; this policy will cover that platform upon launch

All platforms share the same data practices described in this policy. Where mobile-specific collection differs from the web app, it is called out explicitly.

2. What We Collect

Account information

• Name and email address when you register
• Password — stored as a cryptographic hash; we never see or store your plain-text password
• Organization name and team member names and emails you add

Property and financial data you enter

• Properties and units — addresses, types, statuses, lease types
• Transaction records — income, expenses, categories, booking details (guest names, check-in/out dates)
• Financial obligations — mortgage details, insurance policies, utility accounts, renewal dates
• Vendor contacts and maintenance request history
• Access credentials (WiFi passwords, door codes, gate codes) — encrypted with AES-256-GCM before storage; we cannot read these values

Files and attachments

• Receipt photos, maintenance evidence photos, and documents you upload
• Stored in S3-compatible object storage; accessible only via short-lived signed URLs that expire in 15 minutes

Usage and analytics data

• Pages visited, features used, and navigation patterns within the app
• Session recordings — we use PostHog to record how the app is used. All form inputs (passwords, financial figures, door codes, personal details) are masked before recording and are never captured. Recordings are used to identify bugs and improve the product.
• Browser type, device type, OS version, and approximate location (country/region)
• Error logs and performance metrics

Device information (mobile app only)

• Device model and OS version
• App version — used for crash reporting and support
• Push notification token — used to deliver obligation reminders and check-in alerts to your device. You control notification preferences in your device settings.

Payment data

• Payment processing is handled by Stripe. We store only your subscription plan, billing status, and Stripe customer ID. We never see or store credit card numbers, CVVs, or bank account details.

3. Mobile App Permissions (Android)

The Estavo Android app requests only the permissions it needs to operate:

• Camera — used to photograph receipts and maintenance evidence. Photos are uploaded to your account and are not shared with any third party.
• POST_NOTIFICATIONS — used to send obligation reminders and check-in alerts via push notification. You can revoke this in Android Settings at any time.

We do not request access to your contacts, location, SMS, call logs, microphone, or any other sensitive permission.

4. How We Use Your Data

We use your data to:

• Provide the Service — display your portfolio, calculate reports, generate obligation alerts, deliver check-in reminders
• Send transactional emails and push notifications — account verification, obligation alerts, billing receipts, team invitations
• Improve the product — analyze usage patterns and session recordings (inputs masked) to identify bugs and prioritize features
• Provide support — diagnose issues when you contact us at support@estavo.net
• Process payments — manage your subscription via Stripe
• Comply with law — respond to lawful requests from courts or regulatory authorities where required

We do not use your property data, financial data, or transaction history for advertising, profiling, or sale to third parties.

5. Third-Party Service Providers

We share data with the following service providers, solely to operate Estavo. Each is bound by a data processing agreement.

• Stripe — payment processing. Stripe receives payment card data directly and is subject to PCI-DSS compliance. Our integration routes through the ViveScript Solutions billing hub. Privacy: stripe.com/privacy
• Resend — transactional email delivery. We send your email address and email content (e.g., obligation alerts, billing receipts) to Resend for delivery. Privacy: resend.com/privacy
• Vercel — web hosting and global CDN. Vercel processes request and response data as part of serving the web application. Privacy: vercel.com/legal/privacy-policy
• PostHog — product analytics and session recording. PostHog receives usage data (pages visited, features used) and session recordings with all inputs masked. We use PostHog Cloud (US region). Privacy: posthog.com/privacy
• Cloud file storage provider — S3-compatible storage for file attachments (receipt photos, documents). Files are stored encrypted at rest.
• Google Play Services — the Android app uses Google Play Services to deliver push notifications via Firebase Cloud Messaging (FCM). Privacy: policies.google.com/privacy

We do not share your data with advertisers, data brokers, AI training services, or any party not essential to operating the Service.

6. Session Recording Disclosure

We use PostHog to record user sessions within the app. This means we can replay how the interface was navigated to identify usability problems and bugs.

What PostHog records:

• Mouse movement, scrolling, and clicks
• Which pages and features were visited
• Navigation order and timing

What PostHog does NOT record:

• Text typed into input fields (passwords, amounts, door codes) — masked at the point of capture
• On-screen text content — all displayed text, including financial figures, property addresses, and guest names, is masked in recordings at the point of capture, so it never leaves your browser in a readable form

Analytics and session recording are off by default. On your first visit we ask for consent via a cookie banner — no analytics cookies are set and nothing is captured until you choose Accept. If your browser sends a Global Privacy Control or Do-Not-Track signal, we treat that as a decline automatically. You can change or withdraw your choice at any time via Cookie preferences in the website footer, or in the app under Settings → Account → Privacy.

7. App Store Compliance

The Estavo Android app is distributed through Google Play. As a result:

• Google Play Services Terms of Service govern the distribution channel. Those terms are separate from this privacy policy.
• Google may collect certain device telemetry and crash data through the Play Store app itself, independent of Estavo.
• Push notifications on Android are delivered via Firebase Cloud Messaging (FCM), operated by Google.

When the iOS app launches: Apple App Store distribution terms will apply. Apple may collect device telemetry independently. This policy will be updated to reflect iOS-specific practices at that time.

8. Cookies and Local Storage

The web app uses cookies and browser localStorage. For a full breakdown by type and how to control them, see the Cookie Policy. In summary:

• Session cookies — required for authentication. Set by Better Auth; expire when you log out or the session expires.
• Analytics cookies — set by PostHog to identify returning visitors and maintain session continuity in analytics. These are only set after you opt in via the consent banner, and you can withdraw consent any time through Cookie preferences.

The mobile app does not use browser cookies. Session authentication is managed via secure, device-stored tokens.

9. Data Retention

• Active account — all data is retained while your account is active.
• After cancellation — your data remains accessible for 30 days so you can export it. After 30 days, all account data — including uploaded files and product-analytics records — is permanently deleted from our active systems, and expunged from rolling encrypted backups within the backup-retention window (currently 30 days).
• Payment records — transaction records required by financial regulations (invoice history, payment receipts) may be retained for up to 7 years as required by law, in anonymized form where possible.
• Analytics data — anonymized, aggregated product usage statistics (no link to your identity) may be retained longer than 30 days to understand long-term product trends.

10. Your Rights

You have the following rights regarding your data:

• Access — request a copy of the personal data we hold about you
• Export — download all your property and financial data as CSV at any time, on any plan, from Settings → Data → Export
• Correct — update inaccurate data directly in the app or by contacting us
• Delete — delete your account and all associated data. See Data Deletion for the step-by-step process.
• Restrict processing — request that we limit how we process your data in certain circumstances
• Object — object to processing based on legitimate interests (e.g., analytics)
• Portability — receive your data in a structured, machine-readable format (CSV export covers this)

California (CCPA): California residents may request disclosure of what personal information we collect and how it is used. We do not sell personal information. You have the right to opt out of the sale of personal information — there is nothing to opt out of, as we do not sell your data.

EU/UK (GDPR/UK GDPR): If you are in the European Economic Area or United Kingdom, you have additional rights under GDPR including the right to lodge a complaint with your local data protection supervisory authority. Our legal basis for processing your data is performance of contract (providing the Service you signed up for) and legitimate interests (product analytics to improve the Service).

To exercise any right, contact us at support@estavo.net. We respond within 30 days.

11. Security

• All data in transit is encrypted via TLS 1.2 or higher
• Access credentials (door codes, WiFi passwords) are encrypted at rest with AES-256-GCM; the encryption key is never stored in the database
• File attachments are stored in private object storage; access requires a signed URL that expires in 15 minutes
• Database row-level security (RLS) ensures your data is scoped to your organization and cannot be accessed by other accounts
• Passwords are hashed using a one-way cryptographic function and are never stored or transmitted in recoverable form
• Credential vault values are never returned in list API responses; they require an explicit reveal action that is logged in an audit trail

No system is perfectly secure. If you discover a security vulnerability, please report it to support@estavo.net before disclosing publicly. We take security reports seriously and respond within 48 hours.

12. International Data Transfers

Our primary infrastructure is located in the United States (Vercel US region), and our product analytics provider (PostHog) processes data in its US region. If you access Estavo from outside the US, your account and analytics data will be transferred to and processed in the United States.

For EU and UK users, we rely on Standard Contractual Clauses (SCCs) and adequacy decisions where applicable to legitimize international transfers. For more information, contact us at support@estavo.net.

13. Children's Privacy

Estavo is a business tool for property owners and investors. It is not directed at anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has registered an account, contact us immediately at support@estavo.net and we will delete the account.

14. Changes to This Policy

We may update this Privacy Policy when we change how we collect or use data. Material changes — those that meaningfully affect your rights or how we use your data — will be communicated via email to your account address at least 14 days before taking effect. Non-material changes (clarifications, formatting, new platform coverage) take effect on the date published.

The "last updated" date at the top of this page reflects the most recent revision.

15. Contact

Privacy questions, rights requests, or data deletion requests:

• Email: support@estavo.net
• Web: estavo.net/contact
• Data deletion instructions: estavo.net/legal/data-deletion

ViveScript Solutions · vivescriptsolutions.com