ViveScript Solutions ("we," "us," "our") operates Estavo. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. We believe privacy is a feature, not a footnote. We do not sell your data.
1. What We Collect
Account information
- Name and email address when you register
- Password (stored as a secure hash — we never see your plain-text password)
- Organization name and team member details you provide
Property and financial data you enter
- Properties, units, and their attributes (address, type, status)
- Transaction records (income, expenses, categories)
- Obligation templates and policies (mortgage, insurance, utility details)
- Maintenance requests, vendor information, and work history
- Access credentials (WiFi passwords, door codes) — stored AES-256-GCM encrypted
Files and attachments
- Receipt photos and documents you upload to maintenance requests or transactions
- Stored in S3-compatible object storage; accessed only via short-lived signed URLs
Usage data
- Pages visited, features used, and interaction patterns within the app
- Device type, browser, and approximate location (country/region)
- Error logs and performance metrics
Payment data
- Payment processing is handled entirely by Stripe. We do not store credit card numbers, CVVs, or full card numbers on our servers. Stripe's privacy policy applies to payment data: stripe.com/privacy
2. How We Use Your Data
We use your data to:
- Provide the Service — display your properties, calculate reports, send obligation reminders
- Send transactional emails — account confirmations, obligation alerts, billing receipts (via Resend)
- Improve the product — analyze usage patterns to prioritize features and fix bugs
- Provide support — diagnose issues when you contact us
- Comply with law — respond to legal requests where required
We do not use your property or financial data for advertising, profiling, or selling to third parties. Period.
3. Who We Share Data With
We share data with the following service providers, solely to operate Estavo:
- Stripe — payment processing
- Resend — transactional email delivery
- Hosting and infrastructure providers — server hosting and database operations
- Error monitoring tools — for debugging service issues
Each of these providers is bound by data processing agreements. We do not share your data with advertisers, data brokers, or any third party not essential to providing the Service.
4. Data Retention
We retain your data as long as your account is active. If you cancel, your data is retained for 30 days to allow for export, then permanently deleted. Anonymized, aggregated analytics data (with no link to your identity) may be retained longer to understand product usage trends.
5. Security
We take security seriously:
- All data in transit is encrypted via TLS
- Sensitive credentials (door codes, WiFi passwords) are encrypted at rest with AES-256-GCM
- File attachments use expiring signed URLs — no publicly guessable permanent links
- Row-level security enforced at the database layer — your data is scoped to your organization and cannot be accessed by other users
- Passwords are hashed and never stored in recoverable form
No system is 100% secure. If you discover a security issue, please report it to security@vivescriptsolutions.com.
6. Your Rights
You have the right to:
- Access — request a copy of the data we hold about you
- Export — download all your data as CSV from your account settings, at any time
- Correct — update inaccurate data in your account
- Delete — request deletion of your account and all associated data
- Restrict processing — in certain circumstances, request that we limit how we use your data
- Object — object to processing based on legitimate interests
To exercise any of these rights, contact us at privacy@vivescriptsolutions.com or through the contact page.
7. Cookies
Estavo uses cookies for session management (keeping you logged in) and for anonymous usage analytics. We do not use advertising cookies or third-party tracking pixels.
- Session cookies — required for authentication; expire when you log out or close your browser
- Analytics cookies — anonymized usage data; you can opt out in account settings
8. Children's Privacy
Estavo is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
9. International Data Transfers
Our servers are located in the United States. If you access Estavo from outside the US, your data will be transferred to and processed in the US. By using the Service, you consent to this transfer. We apply appropriate safeguards for international data transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to your account address. Continued use of the Service after changes take effect constitutes acceptance.
11. Contact
Privacy questions or requests: privacy@vivescriptsolutions.com
General contact: contact page or hello@vivescriptsolutions.com
ViveScript Solutions · vivescriptsolutions.com