Legal

Overview

Vista is operated by Northstar Advisory Corp. d/b/a Vista, an Alberta corporation. By creating an account or using Vista, you agree to the Terms of Service below. For questions, contact support@vistaroom.dev.

Terms of Service

These Terms of Service (“Terms”) govern your access to and use of the Vista platform and services provided by Northstar Advisory Corp. d/b/a Vista (“Vista,” “we,” “us,” or “our”). By creating an account or using Vista, you (“Customer” or “you”) agree to these Terms on behalf of yourself and any organization you represent.

1. Definitions

Authorized User means any individual (including employees, contractors, and agents) whom Customer grants access to the Platform.

AI Output means any transcripts, polished text, classifications, summaries, or other content generated by Vista’s automated features from Customer Content or Buyer Reactions. AI Output is distinct from Customer Content.

Buyer or Prospect means any third party who accesses a Room or shared link at Customer’s invitation, including anyone a link is forwarded to.

Buyer Reaction means a voice note or typed message a Buyer chooses to leave inside a Room, together with its transcript and classification.

Customer Content means any data, files, pages, text, images, or other materials that Customer or its Authorized Users upload, submit, or transmit to the Platform. Customer Content does not include AI Output.

Room means a page or bundle of collateral published within the Platform at a shareable link for Buyers or Prospects.

Platform means Vista’s web application, APIs, and related services, including the Claude integration via MCP.

Privacy Policy means Vista’s Privacy Policy, below on this page, incorporated into these Terms by reference.

2. Account Registration

To use the Platform as a seller, you must create an account and provide accurate, complete information. You are responsible for maintaining the confidentiality of your credentials and for all activities that occur under your account. You must notify us promptly at support@vistaroom.dev of any unauthorized use of your account. Vista is not liable for any loss or damage arising from unauthorized use of your credentials. During account creation, Vista presents these Terms for review and requires affirmative acceptance before completing registration. Buyers do not need an account to open a Room or leave a Buyer Reaction.

If you register using an email address associated with a company domain, Vista may associate your account with other Authorized Users who register using the same email domain, creating a shared workspace for that organization. You are responsible for ensuring that Authorized Users in your workspace are authorized to access your Customer Content.

3. Beta Service and License

Vista is currently in beta and is free while in beta. No fees are currently charged. If Vista introduces paid plans, we will give at least 30 days’ notice before any charge applies to you, and you will be able to stop using the service before then.

Subject to these Terms, Vista grants Customer a limited, non-exclusive, non-transferable, non-sublicensable license to access and use the Platform during the beta solely for Customer’s internal business purposes and in accordance with these Terms.

4. Acceptable Use

Customer and its Authorized Users must not:

• Use the Platform for any unlawful purpose or in violation of applicable law;
• Transmit content that is defamatory, obscene, harassing, or infringes third-party rights;
• Attempt to reverse engineer, decompile, or extract the source code of any Vista software;
• Interfere with or disrupt the integrity or performance of the Platform or its underlying infrastructure;
• Use the Platform to upload malware, viruses, or any other malicious code;
• Circumvent any access controls or security features of the Platform;
• Resell, sublicense, or make the Platform available to unauthorized third parties.

Vista reserves the right to suspend or terminate access for violations of this section.

5. Customer Communications and CASL

Customer decides who receives Room invitations and any related messages. Where Canada’s Anti-Spam Legislation (CASL) applies, Customer is the “sender” for commercial electronic messages sent using the Platform, including Room invitation emails sent at Customer’s direction. Customer is responsible for: (a) obtaining express or implied consent from recipients as required by CASL; (b) including required identification information; and (c) honoring unsubscribe requests. Vista transmits invitations only at Customer’s explicit action. Vista’s own transactional and operational communications to Customers are sent pursuant to Vista’s CASL compliance obligations and include the required identification and unsubscribe mechanism.

6. Rooms, Buyer Access, and Voice Notes

Customer Control. Customer controls which Buyers receive access to Rooms and the content shared in them. Customer is responsible for ensuring that all materials shared with Buyers comply with applicable law and do not infringe third-party intellectual property rights.

Voice Notes. Buyers can leave voice notes on Room content. Recording happens only while the Buyer actively holds the designated key or the on-screen microphone control — never in the background. Audio is stored securely, transcribed and polished by automated services listed on our subprocessors page, and delivered to Customer as a Buyer Reaction. Vista does not record calls or meetings and does not capture ambient audio. Before a Buyer first uses the voice note feature, Vista presents a brief disclosure explaining that audio is recorded, transcribed, and delivered to the Customer.

Attribution.Each invitation link that is opened creates its own session, so when a link is forwarded, each person’s Buyer Reactions come back to Customer separately. Vista does not track page views, time-on-page, or document engagement, and provides no such analytics.

Buyer Privacy Notice. Vista makes a privacy notice available to Buyers (see the buyer notice). Customer must not instruct Vista to suppress or misrepresent this notice.

7. Intellectual Property

Vista IP.As between the parties, Vista retains all right, title, and interest in and to the Platform, including all software, models, prompts, tooling, designs, trademarks, and documentation (“Vista IP”). These Terms do not transfer any Vista IP to Customer.

Customer Ownership; License to Vista.As between the parties, Customer owns Customer Content and AI Output, and Buyers own the words of their Buyer Reactions, to the extent any intellectual property rights exist in them. Customer grants Vista a non-exclusive, worldwide, royalty-free license to use, reproduce, process, and store Customer Content, Buyer Reactions, and AI Output as necessary to: (a) provide, operate, secure, and support the Platform; (b) comply with legal obligations; and (c) generate and use Aggregate Data as described below. This license terminates upon account deletion, subject to Vista’s data retention practices.

Feedback. If Customer or any Authorized User provides suggestions, ideas, or other feedback regarding the Platform, Vista may use such feedback for any purpose without restriction or compensation.

8. Privacy

Vista’s collection, use, and handling of personal information is governed by the Privacy Policy below. By using the Platform, Customer agrees to the Privacy Policy and represents that it has obtained all necessary consents and has the authority to provide any personal information submitted to Vista in connection with the Platform. Customers subject to the GDPR may request Vista’s Data Processing Agreement by contacting support@vistaroom.dev; where required by applicable law, the parties will enter into a DPA, which is incorporated into these Terms by reference.

9. Third-Party Services and Subprocessors

Vista uses third-party service providers (“Subprocessors”) to deliver certain Platform features, including cloud hosting and storage, authentication, automated transcription and text polish, and analytics. A current Subprocessor List is available at vistaroom.app/legal/subprocessors. Vista maintains this list and updates it when Subprocessors are added or materially changed.

10. Confidentiality

Each party agrees to protect the other party’s Confidential Information using at least the same degree of care it uses to protect its own confidential information (but not less than reasonable care), and not to disclose such Confidential Information to any third party except: (a) to employees, contractors, or agents who need to know it and are bound by confidentiality obligations no less protective than these Terms; or (b) as required by law or legal process (in which case the disclosing party will, to the extent permitted by law, provide prompt prior written notice to the other party).

“Confidential Information” means any non-public information disclosed by one party to the other that is marked as confidential or that reasonably should be understood to be confidential. Customer Content and Buyer Reactions are Customer’s Confidential Information. Vista’s product roadmap and non-public technical documentation are Vista’s Confidential Information. Confidential Information does not include information that is or becomes publicly known through no breach of this section, was rightfully known before disclosure, is independently developed without use of Confidential Information, or is rightfully received from a third party without restriction.

11. Aggregate and Anonymized Data

Vista may collect, generate, and use aggregated, de-identified, or otherwise anonymized data derived from Customer’s use of the Platform — including from Customer Content and Buyer Reaction transcripts — to operate, maintain, and improve the Platform, develop new features, and for analytics and other lawful business purposes (“Aggregate Data”). Vista will not use Aggregate Data in a form that identifies Customer, any Buyer, or any individual.

Vista does not use Customer Content, Buyer Reactions, or AI Output to train Vista’s AI models without express consent.

12. Representations and Warranties

Each party represents and warrants that: (a) it has the legal authority to enter into these Terms; and (b) its performance under these Terms does not violate any applicable law or any agreement with a third party.

Customer additionally represents and warrants that: (a) Customer Content does not infringe any third-party intellectual property rights; (b) Customer has obtained all necessary consents and authorizations for any personal information included in Customer Content; and (c) Customer’s use of the Platform complies with all applicable laws, including privacy and anti-spam laws.

Vista represents and warrants that it will maintain commercially reasonable security measures appropriate to the nature of the data processed on the Platform, as further described in Vista’s Security Overview at vistaroom.app/security and in Section 9 of the Privacy Policy below.

13. Term and Termination

Term. These Terms begin on the date Customer first creates an account and continue until terminated as provided herein.

Termination. Customer may stop using the Platform and delete its account at any time. Either party may terminate these Terms immediately upon written notice if the other party materially breaches these Terms and fails to cure such breach within 30 days of written notice, or becomes insolvent or subject to bankruptcy proceedings. Vista may also suspend or end the beta, or any part of it, with reasonable notice.

Effect of Termination.Upon termination: all licenses granted herein terminate; Customer’s access to the Platform will be suspended; Vista will retain Customer Content for 30 days following termination to allow Customer to export its data, after which Vista may delete Customer Content in accordance with its data retention practices. The sections on Intellectual Property, Confidentiality, Aggregate Data, Disclaimers, Limitation of Liability, Indemnification, and Governing Law survive termination.

14. Disclaimer of Warranties

THE PLATFORM IS PROVIDED “AS IS” AND “AS AVAILABLE.” TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, VISTA DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. VISTA DOES NOT WARRANT THAT THE PLATFORM WILL BE ERROR-FREE, UNINTERRUPTED, OR FREE OF SECURITY VULNERABILITIES. AI OUTPUT, INCLUDING TRANSCRIPTS AND CLASSIFICATIONS, IS GENERATED ALGORITHMICALLY AND MAY CONTAIN ERRORS; CUSTOMER IS RESPONSIBLE FOR REVIEWING AI OUTPUT BEFORE RELIANCE OR USE.

15. Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, LOSS OF DATA, OR LOSS OF GOODWILL, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

EACH PARTY’S AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS, WHETHER IN CONTRACT, TORT, OR OTHERWISE, WILL NOT EXCEED THE FEES PAID BY CUSTOMER TO VISTA IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR CAD $100, WHICHEVER IS GREATER.

Data and privacy specific cap.Notwithstanding anything to the contrary in these Terms, Vista’s total aggregate liability arising out of or relating to any actual or alleged unauthorized access, use, disclosure, loss, or alteration of personal information or Customer Content (including any “data breach”) is limited to CAD $5,000. Vista is not liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or any loss of profits, revenue, business, goodwill, or anticipated savings, arising out of or relating to any data breach or security incident, even if advised of the possibility of such damages.

Security incident exclusions.A security incident does not, by itself, establish a breach of these Terms; Vista is liable only for a failure to meet its own security obligations as described in Section 12 and the Privacy Policy. Vista has no liability for any data breach or security incident caused by: (a) Customer’s configuration, misuse, or failure to use the Platform in accordance with documentation; (b) Customer’s failure to implement its own access controls; or (c) third-party services used by Customer outside the Subprocessors listed by Vista.

16. Indemnification

By Customer.Customer will indemnify, defend, and hold harmless Vista and its officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to: (a) Customer Content; (b) Customer’s or any Authorized User’s use of the Platform in violation of these Terms; (c) Customer’s breach of its representations and warranties; or (d) Customer’s communications with Buyers or Prospects, including any CASL violations.

By Vista.Vista will indemnify, defend, and hold harmless Customer from and against any third-party claims that the Platform, as provided by Vista and used in accordance with these Terms, infringes any Canadian or United States patent, copyright, trademark, or trade secret, subject to the aggregate cap above. This does not apply to the extent a claim arises from Customer Content or AI Output, Customer’s modification of the Platform, or use in combination with unauthorized third-party products.

17. Governing Law and Dispute Resolution

Governing Law. These Terms are governed by the laws of the Province of Alberta and the federal laws of Canada applicable therein, without regard to conflict of law principles.

Informal Resolution. Before initiating any formal proceeding, the parties agree to attempt in good faith to resolve any dispute by providing written notice and engaging in good-faith negotiation for at least 30 days following receipt of such notice.

Binding Arbitration.If a dispute is not resolved through informal negotiation, it will be finally resolved by binding arbitration administered by the ADR Institute of Canada (ADRIC) under its Arbitration Rules: single arbitrator; seat of arbitration Calgary, Alberta; language English; the arbitrator’s award is final and binding.

Class Action Waiver.ALL DISPUTES MUST BE BROUGHT IN THE PARTIES’ INDIVIDUAL CAPACITIES AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE ACTION.

Exceptions. Either party may seek emergency injunctive or other equitable relief from a court of competent jurisdiction in Alberta to prevent irreparable harm pending arbitration.

18. General

Entire Agreement. These Terms, together with the Privacy Policy, constitute the entire agreement between the parties and supersede all prior agreements and understandings.

Modifications.Vista may modify these Terms at any time. For material changes, Vista will provide at least 30 days’ advance notice by email or by prominent notice within the Platform. Continued use after the effective date constitutes acceptance; if you do not agree, stop using the Platform before the effective date.

Severability. If any provision is found to be unenforceable, it will be modified to the minimum extent necessary, and the remaining provisions continue in full force and effect.

Assignment.Customer may not assign these Terms without Vista’s prior written consent. Vista may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of its assets upon notice to Customer.

Force Majeure.Neither party is liable for any failure or delay in performance caused by circumstances beyond that party’s reasonable control.

Notices.Legal notices to Vista must be sent to support@vistaroom.dev · Northstar Advisory Corp. d/b/a Vista, Alberta, Canada. Vista will send notices to the email address associated with Customer’s account.

Privacy Policy

This Privacy Policy describes how Northstar Advisory Corp. d/b/a Vista collects, uses, discloses, and protects personal information in connection with the Vista platform. Vista is subject to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta’s Personal Information Protection Act (PIPA), and, where applicable, the EU General Data Protection Regulation (GDPR) and Quebec’s Law 25.

1. Who This Policy Covers

• Customers and Authorized Users — individuals who create or access a Vista account on behalf of themselves or an organization;
• Buyers and Prospects — individuals who open a Vista Room or shared link at the invitation of a Customer;
• Visitors— individuals who visit Vista’s marketing site without creating an account.

A separate, short-form Buyer and Prospect Privacy Notice is available to Buyers.

2. Information We Collect

Provided directly: account information (name, email address, company, and password or sign-in credentials); Customer Content (pages, files, and other materials placed in Rooms); and messages sent to our support team. No billing information is collected during beta — Vista currently charges no fees.

Buyer Reactions: when a Buyer chooses to leave a voice note, Vista records audio only while the Buyer holds the designated key or on-screen control, stores the audio securely, and generates a transcript and classification. Buyers may also type a message instead. Buyers may voluntarily provide contact information (such as a name or email) to label their feedback.

Collected automatically:basic usage data through a first-party, privacy-respecting analytics proxy (pages viewed on the marketing site, feature usage in the app); device and technical data (IP address, browser type); and cookies as described below. Inside Rooms, Vista does not track page views, time-on-page, or reading behavior on Customers’ behalf — the only thing that comes back to a Customer is what a Buyer chooses to say.

3. How We Use Personal Information

• Providing and operating the Platform — performance of contract
• Authentication and account security — legitimate interests / contract
• Transcribing, polishing, and classifying Buyer Reactions — performance of contract
• Sending operational and transactional emails — performance of contract
• Analytics and Platform improvement — legitimate interests
• Generating de-identified Aggregate Data — legitimate interests
• Complying with legal obligations — legal obligation
• Enforcing our Terms of Service — legitimate interests

4. Buyer and Prospect Data

Vista processes Buyer and Prospect personal information as a data processor on behalf of the Customer who shared the Room. The Customer is the data controller responsible for the lawfulness of collecting and sharing Buyer and Prospect data. Each opened invitation link creates its own session so that forwarded links produce separately attributed Buyer Reactions.

Vista independently processes Buyer Reaction data in de-identified, aggregated form for Platform improvement, as described below. Vista makes a privacy notice available to Buyers (see the buyer notice), consistent with GDPR Article 14 and equivalent Canadian requirements.

5. How We Share Personal Information

Vista does not sell personal information.

Subprocessors. Vista uses trusted third-party service providers to operate the Platform: cloud infrastructure and storage, authentication, automated transcription and text polish, and analytics. These providers may process personal information only to the extent necessary to perform their services for Vista and are contractually bound to protect it. The complete list is at vistaroom.app/legal/subprocessors.

Customers.Buyer Reactions left in a Customer’s Room are shared with that Customer.

Legal requirements. Vista may disclose personal information if required by applicable law, regulation, court order, or governmental authority, to the extent permitted by law.

Business transfers.In the event of a merger, acquisition, or sale of substantially all of Vista’s assets, personal information may be transferred to the acquiring entity, subject to the same privacy commitments.

6. AI and Automated Processing

Vista uses automated services to transcribe Buyer voice notes, polish the transcript into a readable message, and classify it (for example, as a question or an objection). This processing happens on the Customer’s behalf and the results are stored in the Customer’s account.

We do not use Customer Content, Buyer Reactions, or AI Output to train Vista’s AI models without express consent. Data submitted to third-party AI providers for transcription and polish is governed by Vista’s agreements with those providers and is not used by them to train their models under those agreements.

7. Cookies and Tracking Technologies

Vista uses strictly necessary cookies (authentication, security, session management — including the buyer session cookie that keeps reactions attributed), functional cookies (preferences), and first-party analytics via a proxy. Vista does not use cookies for cross-site behavioral advertising and does not participate in any advertising network.

8. Data Retention

• Account and Customer Content: retained while the account is active and for 30 days after deletion, then deleted or de-identified.
• Buyer Reactions (audio and transcripts):retained while the Customer’s account and Room are active; deleted on verified request or following Customer account deletion.
• Aggregate Data: retained indefinitely in de-identified form.

9. Data Security

Vista maintains administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS 1.2+), server-side encryption at rest via our cloud infrastructure, access controls on a need-to-know basis, and regular security reviews. No method of transmission over the internet is completely secure; in the event of a data breach involving personal information, Vista will notify affected individuals and relevant authorities as required by applicable law. See the security page for a plain-language overview.

10. International Data Transfers

Vista’s infrastructure is primarily hosted in the United States. If you are located in Canada, the European Union, or another jurisdiction, your personal information may be transferred to and processed in countries outside your jurisdiction. Vista ensures appropriate safeguards are in place for such transfers, including standard contractual clauses where required.

11. Children’s Privacy

The Platform is intended for business use by individuals 18 years of age or older. Vista does not knowingly collect personal information from anyone under 18 and will delete such information promptly if discovered.

12. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal information; to object to or restrict certain processing; to withdraw consent; and to lodge a complaint with a supervisory authority (for example, the Office of the Privacy Commissioner of Canada).

Buyers and Prospects: if you left a reaction in a Vista Room and wish to exercise rights over that data, contact the seller who shared the Room (they are the data controller), or reach Vista at support@vistaroom.dev. Vista will respond within 30 days or as required by applicable law.

13. California Residents

If you are a California resident, the CCPA (as amended by the CPRA) provides additional rights: to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and non-discrimination. Categories collected: identifiers (name, email, IP address); audio (Buyer voice notes, only while the control is held); internet activity (basic usage data). Vista does not sell or share your personal information for cross-context behavioral advertising. To submit a request, contact support@vistaroom.dev.

14. Changes to This Policy

Vista may update this Privacy Policy from time to time. For material changes, Vista will provide at least 30 days’ advance notice by email or prominent notice in the Platform. The updated Policy will be posted on this page with a revised effective date.

15. Contact

Vista has designated a Privacy Officer responsible for overseeing compliance with this Policy. Contact: Privacy Officer, Northstar Advisory Corp. d/b/a Vista, Alberta, Canada · support@vistaroom.dev.