Privacy Policy
Last updated: November 5, 2026
Effective: November 5, 2026
This policy explains what information Vistrial collects, why we collect it, who we share it with, how long we keep it, and what choices you have.
1. The short version
- Vistrial is an agentic workforce for business growth. Our first agent, Growth Architect, researches a business's market from public sources and the business's own results, then prepares reports, strategy, and creative drafts for a person to review.
- If you visit our website or ask for access, we collect only what we need to respond to you.
- If you are a customer, the information in your workspace belongs to you. We handle it on your behalf to provide the service.
- Research uses official access only: public web pages, official platform APIs, and links you provide. Vistrial does not log in to a platform for you or get around blocks.
- Nothing is published, posted, or sent by Vistrial. A person on your team approves the work, and you decide what to use.
- We use a small number of service providers to run Vistrial. Section 6 names them.
- You can ask us to export, correct, or delete your information. Section 12 explains how.
- Questions? Email contact@vistrial.io.
2. Who we are and when this policy applies
The operator is Divine Agency LLC ("Vistrial," "we," "us," or "our"). We are based in Maryland, United States. Mailing address: 7404 Executive Place, Lanham, MD 20706.
This policy covers:
- Our public website and its forms.
- The Vistrial application, including accounts, workspaces, and agents.
- Our communications with you, such as email and support replies.
We act in two different roles, and the difference matters:
Our own information. For visitors, people who request access, account holders, and people who contact us, we decide why and how the information is used. This policy describes those uses.
Customer workspace information. A Vistrial customer tells Growth Architect what to research and brings in its own information, such as its business profile, competitors, results files, and lead lists. The customer decides what to bring in and how it is used. We process that information for the customer, to provide the service, and follow the customer's instructions and our agreement with them. If you are a lead or contact of a customer, Section 13 explains your options.
3. Information we collect
A. When you visit our website
- Basic technical information your browser sends automatically, such as IP address, browser type, device type, pages viewed, referring page, and the date and time of your visit.
- Information needed to keep the site secure, such as records of unusual or abusive traffic and the result of a bot check on our forms.
- Your choice about optional cookies, described in Section 8.
B. When you request access or contact us
- Name, work email address, business name, website, and the details you choose to give us in the form, such as your type of business, team size, the tools you use, and what you need.
- For data requests: the details needed to verify and fulfil the request.
- Records of our replies and the status of your request.
C. When you create or use an account
- Name, email address, role in your workspace, and sign-in information. Sign-in is handled by our sign-in provider. Passwords are not stored by Vistrial in readable form.
- Settings and preferences.
- Information about how you use the product, such as actions taken (for example approvals) and security events. We keep an audit trail of important actions.
D. Customer workspace information
A customer workspace holds the information the customer enters or uploads, and the work Growth Architect prepares from it. This can include:
- The business profile: what the business sells, where, to whom, its offers, and its competitors.
- Research assignments: the questions, markets, keywords, competitors, and links the team asks Growth Architect to look at.
- Files the team uploads, such as the business's own ad or sales results.
- Lead lists the team imports, such as names, email addresses, phone numbers, and activity dates, and notes the team adds.
- Research runs: the steps an agent took, the sources it checked, whether each source was available, and the cost of the run.
- Reports, strategy, ad copy, scripts, briefs, and other drafts, with their versions and who approved them.
E. Information from public sources
To research a market, Growth Architect reads public sources: public web pages, YouTube through its official API, the Meta Ad Library through Meta's official API where it is available, and TikTok and Instagram posts the team provides or the research finds, through the platforms' public link previews. From these, Vistrial stores links, titles, publishers, dates, short text excerpts, and the facts drawn from them, such as which offers an advertiser leads with and how long an ad has run. It does not store copies of ad images or video files. Some posts are shown through the platform's own embedded player.
Public sources can name businesses and people, such as advertisers, creators, and reviewers. Section 14 explains your options if that includes you.
F. Payments
Vistrial does not take payments on its website or in the application. Billing details are shared with a customer when their team is approved. We do not see or store a full card number.
G. Support and communications
Messages you send us, our replies, and information you share to get help.
H. Information created by our AI features
Reports, summaries, drafts, and answers that our agents prepare from the customer's workspace information and from public sources. These belong with the workspace they were created for.
4. How we use information
We use information to:
- Provide, run, and maintain the service, including running research and preparing reports and drafts for the right people in a workspace.
- Create and manage accounts, roles, and invitations.
- Send notices you need or asked for, such as account and security notices.
- Respond to access requests, support requests, and data requests.
- Keep the service secure, prevent abuse and fraud, and investigate problems.
- Meet legal obligations and enforce our terms.
- Understand how the product is used so we can fix problems and improve it, using aggregated or de-identified information wherever practical.
We do not use the contents of a customer workspace for advertising.
5. What stays under your control inside a workspace
- Growth Architect prepares work for review. It does not publish, post, send, or charge anything to an ad account. A person approves the work, and you decide what to use.
- You choose what Growth Architect researches, and every run has a cost limit.
- Collection from public ad libraries stays off until a workspace Owner accepts the risk in writing.
- Only the people invited into a workspace can see it, and what each person sees depends on their role. Important actions, including staff actions that change a workspace, are recorded.
7. How our AI features use information
Vistrial uses AI to research, sort, and write inside a customer workspace. When an agent runs, the relevant workspace information and the public sources it found are sent to our AI provider, Anthropic, to do that work. Web searches and web page reading for research also run through Anthropic.
- Agents work only inside the workspace they belong to.
- Text found in public sources, and text in files you upload, is treated as information to read, not as instructions to follow.
- Agents cannot publish, post, send, or spend anything. A person on the customer team reviews and approves the work, and publishing happens outside Vistrial.
- Every claim in a report is labeled as observed, inferred, a hypothesis, or backed by the customer's own results, with its source. When there is not enough data, the report says so.
- AI output can be wrong. Teams should review it before approving or using it.
9. Email from us
We send service email: sign-in and account messages, invitations, security notices, data request updates, and replies to your requests. You cannot turn off account and security notices because they are required to run your account.
Vistrial does not send a separate product newsletter.
10. How long we keep information
We keep information only as long as needed for the purposes in this policy, then delete or de-identify it:
- Account and workspace information, including research, reports, drafts, and uploaded files, is kept while the workspace is active.
- Earlier versions of a report or draft are kept with it, so a team can see what changed. Versions are not overwritten.
- Information you send us through our website or by email is kept as long as we need it to respond to you and to manage our relationship with you.
- Vistrial does not currently delete workspace information on an automatic schedule. When a customer asks us to delete information, we verify the request and a person carries it out.
11. How we protect information
We use measures designed to protect information, including:
- Separate workspaces. Customers are separated from each other, and the separation is enforced on the server for every request, not only on screen.
- Role-based access. People see only what their role allows.
- Audit trail. Important actions, such as approvals and staff actions that change a workspace, are recorded.
- Cost limits. Every research run has a cost limit, and the cost is shown as it runs.
- The website and the application are served over HTTPS. Browsers are told to stay on HTTPS.
No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. Vistrial is not currently certified under SOC 2, ISO 27001, or a similar standard. More detail is on our Security page at /security.
12. Your choices and rights
Everyone can ask us to:
- Tell you what personal information we hold about you.
- Correct information that is wrong.
- Delete information, where we are able to.
- Provide a copy of the information you gave us.
- Stop a message that is not required to run the account.
Workspace Owners can also ask us to:
- Export their workspace data.
- Delete uploaded files or imported lists.
- Delete the workspace.
How to ask. Use the data requests page at /privacy/requests, or email contact@vistrial.io. We verify your identity before acting, because we do not want to give your information to the wrong person. We aim to respond within 30 days. We will tell you if we cannot fulfil a request and why.
You will not be treated worse for making a request.
13. If you are a lead or contact of a Vistrial customer
A customer can import its own lead lists into Vistrial. If a business has your information in Vistrial, the business decides what to keep and how to use it. Vistrial handles that information on the business's behalf and does not contact you.
If you want to see, correct, or delete your information, the fastest route is to contact the business directly. You can also email contact@vistrial.io, tell us which business you mean, and we will pass your request to that business. We may not be able to act on the request ourselves without the customer's direction, but we will tell you what happens next.
14. If you appear in public content we researched
Growth Architect reads content that is already public, such as ads in the Meta Ad Library, public videos and posts, and public web pages. A research report can mention the business or person who published that content and link to it. Vistrial does not log in to see private content, does not get around blocks, and does not store copies of images or videos.
If you want a link or excerpt about you removed from a report, email contact@vistrial.io with the link, and we will review it with the customer whose workspace holds it.
15. Children
Vistrial is for businesses and is not directed to anyone under 18. We do not knowingly collect information from people under 18. If you believe a child has given us information, email contact@vistrial.io and we will delete it.
16. Where information is processed
We are based in the United States. Our service providers may process information in the United States and in other countries where they operate.
If you use Vistrial from Canada or elsewhere outside the United States, you understand your information will be transferred to and processed in the United States, which may have different data protection laws than your country.
17. Region-specific information
United States state privacy laws. Depending on where you live, you may have additional rights such as knowing, correcting, deleting, or obtaining a copy of your personal information, and limiting certain uses.
To ask about these rights, email contact@vistrial.io. We reply by email.
If you are in Canada, email contact@vistrial.io about your information and about storage in the United States.
Vistrial is not currently offered to customers in the European Economic Area, the United Kingdom, or Switzerland.
18. Data incidents
If we learn that information we hold has been accessed or disclosed without authorization, we will investigate and notify affected customers and any other required parties as the law requires.
19. Changes to this policy
We may update this policy. When we make a material change, we will update the date above and notify account holders by email or in the product before the change takes effect. Past versions are available on request.
20. Contact us
Questions, requests, or concerns about this policy or your information:
Email: contact@vistrial.io
Divine Agency LLC. 7404 Executive Place, Lanham, MD 20706.
To report a security issue, visit /security/report.