Your information, explained.

Your account

Vistalore uses Amazon Cognito to verify sign-in and authenticator codes. Accounts are currently created by invitation; public registration is not available. Account information such as your email address, name, and sign-in session is used to identify you and control access to connected information. Google sign-in is not currently available. Connecting a Google calendar or mailbox is a separate permission grant.

Information you save

Profile and workspace preferences, appearance choices, and feedback drafts are saved in this browser. Some planning features also use browser storage and demonstration content. Where a connected workspace service is enabled, the features using that service send and retrieve your records through it. Signing in does not mean every feature is synced across devices.

Browser-saved information can remain after sign-out and may be visible to someone using the same browser profile. Clearing site data can remove it. Keep your own copy of information you need.

Calendars and email

Connecting an external account is optional. Google connections use a permission grant; iCloud connections use an app-specific password. Vistalore stores connection credentials and imported records encrypted in its connection service, associated with your signed-in account.

You choose which calendars or mail folders to import. Google’s mail permission covers the mailbox; your selections limit what Vistalore imports. The current connection flow reads information without sending mail, marking messages read, or editing original events. Calendar imports contain event details; mail previews contain sender, subject, time, and, for Gmail, a text snippet.

These imported records are not sent into Vistalore’s AI features by the connection flow. Calendar subscription links are also treated as credentials. Anyone who has a public calendar link may be able to read that calendar.

Optional services

Features that contact another service share the information needed for that request. Weather uses approximate location with the National Weather Service. When enabled, cloud voice sends text to Speechify, and AI-assisted features such as receipt reading send the submitted material to their configured provider, including OpenAI. Feature availability varies during early access.

Sign-in, hosting, and external service providers process requests under their own terms and privacy notices. Web requests can include technical information such as an IP address and browser details. Cookies and browser storage support sign-in and saved preferences.

Removing information and access

In Connections, disconnect an account to remove its stored credentials and imported records from the connection service. This does not delete original events or mail, clear browser-saved preferences, or delete your sign-in account. You can separately revoke Google access or an Apple app-specific password with the provider.

Browser-saved data remains until you remove it through available controls or clear this site’s browser data. For account deletion or questions about server-stored information, use the early-access contact instructions. Account deletion and provider revocation are separate actions.

Questions and updates

As Vistalore changes, this page will be updated to describe its information practices. Check the date above for the latest revision. For privacy questions or requests, see Help.