Privacy policy

Last updated November 2, 2026

Who we are

Vesta is run by Brett Stone, a sole proprietor in British Columbia, Canada ("we", "us"). We're responsible for the personal information described here and follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act where it applies. Questions go to support@vesta-ai.ca.

What stays on your computer

The Vesta app saves these on your PC, not on our servers:

• your conversations, and what Vesta remembers about you (you can view and clear this in Settings);
• documents you add, and projects you work on;
• your settings, and your sign-in, which is encrypted with Windows' built-in protection.

Reading text from scanned documents (OCR) also happens on your PC. Uninstalling Vesta, or deleting items in the app, removes them from your computer.

What we collect, and why

• Your account: your email address and a scrambled form of your password (we can't read the password itself), plus who invited you during the beta. We use these to sign you in and contact you about your account.
• Usage records: for each request, the time, which AI model ran it, how much work it took, and what it cost. We use these to bill you correctly, show you your usage, keep the network fair, and fix problems.
• What you send: your requests pass through our server to the computer that does the work, and the answer comes back the same way. We don't save the text of your requests. We keep a fingerprint of each one (a code calculated from it that can't be turned back into your words) so a repeated request isn't charged twice.
• Copies of text replies: we store a copy of each text reply so that if your connection drops and the app asks again, you get the same answer without paying twice. These copies aren't deleted automatically yet. We're adding automatic deletion, and until then we'll delete yours whenever you ask.
• Images and audio: what Vesta makes is sent back to your app. We keep a record of each job: its type, whether it finished, and its cost.
• Payments: Stripe handles card payments. We never see or store your full card number. Stripe tells us your customer ID, plan, and whether each payment succeeded.
• Support emails: if you write to us, we keep the conversation so we can help you.

What we don't do

• We don't sell or rent your personal information.
• We don't show ads, in the app or on this website.
• We don't use your chats, files or creations to train AI models.
• This website uses no cookies, analytics or trackers.

Who else handles your information

• Stripe processes payments and may store payment details outside Canada, including in the United States.
• Cloudflare hosts this website and our domain. Like any web host, it sees visitors' IP addresses so it can deliver pages and block attacks.
• Namecheap (Private Email) delivers and stores our email, including support email.

The AI work itself runs on computers we operate in British Columbia. If we ever add rented computing capacity from another company, we'll update this policy before any of your requests are sent there.

What the app connects to

• Our network, to sign in and to do the AI work you ask for.
• GitHub, to check whether a newer version of Vesta exists. Only the version number is fetched; nothing about you is sent.
• Websites you ask Vesta to research, which it visits from your computer.
• Programs you choose to connect, such as Blender, which run on your own computer.

How long we keep it

• Account details and usage records: while your account is open. When you close it, we delete them within 30 days, except billing records.
• Billing records: six years, as Canadian tax law requires.
• Copies of text replies: see above. We'll delete them on request now, and automatically once that's built.
• Support emails: as long as we need them to help you, then deleted.

Security

Connections between the app and our network are encrypted. Passwords are stored only in scrambled form. Access to our servers is limited to us. If a breach puts your information at real risk, we'll tell you and the Privacy Commissioner of Canada, as the law requires.

Your rights

You can ask to see the personal information we hold about you, have it corrected, or have your account and information deleted. Email support@vesta-ai.ca from your account's email address and we'll respond within 30 days. You can also withdraw your consent at any time by closing your account.

If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

Age

Vesta is for people 18 and older. We don't knowingly collect information from anyone younger.

Changes

We'll post any changes here and update the date at the top. If a change matters to how your information is used, we'll email you before it takes effect.