Privacy Policy

Provistia Inc. ("Provistia," "we," "us," or "our") operates the Provistia platform, which provides AI-powered cinematic listing-video generation services to real estate professionals (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have with respect to your personal information.

By accessing or using the Service, you agree to the collection and use of information as described in this Privacy Policy.

2.1 Information You Provide Directly

• Account information: Your name, email address, and password when you register.
• Listing data: Property addresses, photos, descriptions, and related listing details you upload in order to generate videos.
• Brokerage and agent details: Your brokerage name, agent name, and contact information used to brand generated videos.
• Payment information: Billing details processed securely by Stripe. We never store raw card numbers.
• Communications: Messages you send to our support team.
• Marketing consent: Your explicit opt-in or opt-out preference for marketing emails, recorded at registration with a timestamp and browser identifier.

2.2 Information Collected Automatically

• Log data: IP address, browser type, pages visited, and timestamps.
• Device information: Operating system, screen resolution, and user-agent string.
• Usage data: Features used, videos generated, and session duration.
• Cookies and similar technologies: Session tokens and preference cookies to keep you signed in and remember your settings.

2.3 Information from Third Parties

• Address auto-complete data from the Google Places API based on partial addresses you type.
• Payment transaction status and subscription data from Stripe.

We use the information we collect to:

• Create and maintain your account.
• Generate AI-powered listing videos on your behalf.
• Process payments and manage subscriptions.
• Send transactional emails (e.g., video-ready notifications, receipts).
• Send marketing emails only if you have opted in at registration or subsequently.
• Improve, personalise, and secure the Service.
• Comply with legal obligations.
• Investigate fraud or security incidents.

We will only send you promotional or marketing emails if you explicitly checked the consent box during sign-up or subsequently opted in. Every marketing email contains an unsubscribe link. You can also withdraw consent at any time by contacting us at privacy@provistia.com.

Your consent, including the date, time, and the browser user-agent string at the time of registration, is logged and retained as proof of consent.

We do not sell your personal information. We share data only as follows:

• Service providers: Supabase (database and authentication), Stripe (payments), Google (address autocomplete), Mailjet (transactional email), and AI rendering infrastructure — each bound by data-processing agreements.
• Legal requirements: When required by law, regulation, court order, or to protect the rights and safety of Provistia or others.
• Business transfers: In connection with a merger, acquisition, or sale of assets, where the receiving party agrees to honour this Privacy Policy.
• With your consent: For any other purpose with your explicit permission.

We retain your account information and generated videos for as long as your account is active. You may request deletion of your account and associated data at any time. Consent logs are retained for a minimum of five (5) years to comply with applicable marketing-consent regulations.

We use industry-standard security measures including encryption in transit (TLS 1.2+), encryption at rest, row-level security on all database tables, and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing.
• Data portability.
• Withdraw marketing consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email us at privacy@provistia.com. We will respond within 30 days.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email (if you have consented to receive emails) or by posting a prominent notice on the Service. Your continued use of the Service after the effective date of the revised policy constitutes your acceptance.

If you have questions about this Privacy Policy, please contact:
Provistia Inc.
Email: privacy@provistia.com