Privacy Policy

This Privacy Policy explains how XVESTA, LLC ("xVesta," "we," "us") collects, uses, stores, and shares information when you use the xVesta app and related services.

• Account information: name, email or phone number, password (hashed), profile details.
• Property and portfolio data: information you or members of your Workspace enter or capture about properties — addresses, structures, FF&E, inventory, vehicles, financial records, contacts, calendar events, and journal/maintenance entries.
• Captured media: photos, videos, and documents you upload for Alf to process (e.g., appliance nameplates, receipts, invoices, leases, permits, insurance documents).
• AI-derived data: structured information extracted by Alf from your captured media, along with your edits/corrections to that data (retained to improve extraction quality).
• Usage and device information: device type, app version, log data, and general diagnostics collected automatically.
• Location information: property addresses you provide; we do not track your real-time device location beyond what's needed for address-related features.

We use your information to:

• Provide the core capture → extraction → retrieval functionality of the Service.
• Operate role-based access, Workspace switching, and guest/tenant scoping.
• Auto-populate suggested property details (e.g., estimated value, bedrooms, bathrooms, square footage) using third-party public-data lookups, presented to you for confirmation before being saved.
• Communicate with you about your account, billing, and product updates.
• Improve Alf's extraction accuracy using confirmed/corrected data (in de-identified or aggregate form where feasible).
• Maintain security, detect fraud, and enforce our Terms.

Photos, videos, and documents you capture are sent to AI processing services (ours and/or trusted third-party AI providers) solely to extract structured data for your Workspace. This processing occurs under contractual safeguards restricting these providers from using your content beyond providing this service to xVesta, and your data is not used to train models outside of the purpose described here without additional notice and consent.

We do not sell your personal information. We may share information:

• Within your Workspace, according to the roles and permissions configured by the Workspace owner (e.g., a Bookkeeper role sees financials; a Tenant sees only their scoped property view).
• With service providers you engage, limited to the scope of the Engagement (e.g., a contractor sees only the properties/data the owner has shared with them).
• With third-party vendors who help us operate the Service (cloud hosting/storage, AI processing, address/property data lookups, payment processing, analytics, customer support), under confidentiality and data-protection obligations.
• For legal reasons, if required by law, subpoena, or to protect rights, safety, or property.
• In a business transfer, such as a merger or acquisition, subject to continued protection under a policy at least as protective as this one.
• Via share links, if you or a Workspace owner generate a time-limited external share link (e.g., to send a document to an insurance agent or lender); access via such links is logged for audit purposes.

• Original captured media is retained as long as your Workspace is active, unless deleted by you or your Workspace owner.
• Deleted items typically pass through a recovery ("soft-delete") period before permanent removal, as shown in-app.
• Upon Account or Workspace closure, we retain data only as long as necessary for legal, billing, or dispute-resolution purposes, after which it is deleted or anonymized.
• Audit logs (who accessed what, when) are retained for security and compliance purposes for a defined period disclosed in-app.

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise most of these rights directly in the App (e.g., editing captured records, exporting media to your device, deleting your Account). For additional requests, contact us at support@xvesta.com.

xVesta is not directed to children under 18 and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact support@xvesta.com for removal.

We use industry-standard safeguards, including encryption in transit and at rest, role-based access controls, and audit logging, to protect your information. No system is completely secure, and we cannot guarantee absolute security.

Your information may be processed in countries other than your own. Where required, we implement appropriate safeguards for such transfers.

We may update this Privacy Policy periodically. Material changes will be communicated in-app or via email before they take effect.

For privacy questions or requests: support@xvesta.com

Mailing address: XVESTA, 56 Franklin Ave. Ponte Vedra Beach, FL 32082