Security

How Vista handles buyer data

A room is a page at a public link. Anyone with the link can open it, so a buyer needs no account. The invite that reaches a buyer carries a token inside the email URL, and that token is what lets them talk back without signing in. Their write access is then held in an httpOnly session cookie the browser stores on the first visit — a cookie that page scripts cannot read.

Voice notes

Recording happens only while the buyer holds ⌘ on a laptop, or taps and holds the mic on a phone. Let go and capture stops. There is no background or ambient recording of any kind.

The audio is stored in Google Cloud Storage and encrypted in transit. It is transcribed by Groq (Whisper) and polished into a readable message by Google Gemini. Those are the only automated services that touch a buyer’s recording. The full list is on our subprocessors page.

What Vista does not do

• No open or view tracking. Vista does not report which page a buyer looked at, or for how long.
• No ambient recording. The mic stays off unless the buyer is holding the key.
• No selling of data. We do not sell buyer or seller data to anyone.

Account access

The seller workspace sits behind industry-standard hosted authentication. Sellers sign in to build and manage their rooms. Buyers never sign in at all.

Data deletion on request

Sellers and buyers can ask us to delete their data. On request, we remove the stored audio and transcripts. Email support@vistaroom.dev and we will take care of it.

Vista is in beta

Vista is in beta. We do not yet hold formal certifications. Rather than claim one, we describe our practices plainly: audio stored in Google Cloud Storage, encrypted in transit, transcribed by Groq and polished by Google Gemini, with a subprocessor list you can read.

For anything security-related, email support@vistaroom.dev.