Privacy policy

VistoPilot helps people move to and settle in Portugal. To do that well, we handle some of your personal data. We keep it minimal, we tell you plainly what we do with it, and we put you in control. This policy explains the what, the why and your rights. If anything here is unclear, email us at support@vistopilot.com.

What we collect

We only collect what we need to give you accurate, tailored guidance:

• Account details: your name, email address and profile picture when you create an account (typically via Google Sign-In, see below).
• Intake answers: where you're from, your goal and your stage, so the assistant can tailor its answers.
• Your questions: what you ask the assistant, so we can answer and improve quality.
• Usage data: first-party, privacy-respecting analytics about how the product is used — the pages you visit and the buttons you click. It is cookieless and anonymised (we never store your IP address or set a tracking cookie), stays on our own servers, and is never sold or used for advertising. See our Cookie Policy.

Why we use it

We use your data to run the service, answer your questions, build your relocation plan, keep your account secure, and improve our guidance over time. We do not sell your personal data, and we do not use it to target you with third-party advertising.

Signing in with Google

When you choose “Continue with Google”, we use Google Sign-In (OAuth) to authenticate you. Google shares a limited set of profile information with us (your name, email address and profile picture) which we use only to create and secure your account and to identify you inside the app. We do not access your Gmail, Drive, Contacts or any other Google data, and we never use this information for advertising.

VistoPilot's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Separately, and only with their explicit consent, lawyers on VistoPilot may connect their own Google Calendar so the app can create a meeting link for a booked consultation. This is a distinct opt-in that applies only to participating lawyers and can be revoked at any time from their Google Account.

Cookies & analytics

We set only a small number of strictly-necessary cookies — to keep you signed in and to credit a referral. We do not use advertising or third-party tracking cookies. Our analytics is first-party and cookieless: we count page views and clicks using a daily, non-reversible visitor code that is generated on our servers and then discarded — your IP address is never stored, and nothing is saved on your device. Because it stores nothing on your device, it needs no consent banner; you can still object at any time (see Your rights). Every cookie we set is listed in our Cookie Policy.

Where your data lives

Your data is stored and processed on servers in the European Union. When we work with trusted processors (for example, hosting or email delivery), we choose EU-based or adequacy-covered providers and bind them with data-processing agreements.

Consent

We rely on your consent and on our legitimate interest in providing the service you asked for. You can withdraw consent at any time, and doing so won't affect anything we processed before you withdrew it.

Your rights

Under the GDPR, you can exercise the following rights at any time:

• Access & export gets you a copy of the data we hold about you.
• Correction: fix anything that's inaccurate.
• Deletion: ask us to erase your account and data.
• Objection: object to or restrict certain processing.

To exercise any of these, email support@vistopilot.com. We'll respond within 30 days.

Keeping data safe

We use encryption in transit, access controls and regular reviews to protect your information. No system is perfect, but we treat your trust as the heart of the product.

Contact

Questions about your privacy? Write to us at support@vistopilot.com. You can also read our Terms of service and Disclaimer.