Privacy policy

VistoPilot helps people move to and settle in Portugal. To do that well, we handle some of your personal data. We keep it minimal, we tell you plainly what we do with it, and we put you in control. This policy explains the what, the why and your rights. If anything here is unclear, email us at support@vistopilot.com.

What we collect

We only collect what we need to give you accurate, tailored guidance:

• Account details — your name, email address and profile picture when you create an account (typically via Google Sign-In — see below).
• Intake answers — where you're from, your goal and your stage, so the assistant can tailor its answers.
• Your questions — what you ask the assistant, so we can answer and improve quality.
• Usage data — basic, privacy-respecting analytics about how the product is used. No selling, no ad tracking.

Why we use it

We use your data to run the service, answer your questions, build your relocation plan, keep your account secure, and improve our guidance over time. We do not sell your personal data, and we do not use it to target you with third-party advertising.

Signing in with Google

When you choose “Continue with Google”, we use Google Sign-In (OAuth) to authenticate you. Google shares a limited set of profile information with us — your name, email address and profile picture — which we use only to create and secure your account and to identify you inside the app. We do not access your Gmail, Drive, Contacts or any other Google data, and we never use this information for advertising.

VistoPilot's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Separately, and only with their explicit consent, lawyers on VistoPilot may connect their own Google Calendar so the app can create a meeting link for a booked consultation. This is a distinct opt-in that applies only to participating lawyers and can be revoked at any time from their Google Account.

Where your data lives

Your data is stored and processed on servers in the European Union. When we work with trusted processors (for example, hosting or email delivery), we choose EU-based or adequacy-covered providers and bind them with data-processing agreements.

Consent

We rely on your consent and on our legitimate interest in providing the service you asked for. You can withdraw consent at any time, and doing so won't affect anything we processed before you withdrew it.

Your rights

Under the GDPR, you can exercise the following rights at any time:

• Access & export — get a copy of the data we hold about you.
• Correction — fix anything that's inaccurate.
• Deletion — ask us to erase your account and data.
• Objection — object to or restrict certain processing.

To exercise any of these, email support@vistopilot.com. We'll respond within 30 days.

Keeping data safe

We use encryption in transit, access controls and regular reviews to protect your information. No system is perfect, but we treat your trust as the heart of the product.

Contact

Questions about your privacy? Write to us at support@vistopilot.com. You can also read our Terms of service and Disclaimer.