1. Overview

This page contains Vista's complete legal documentation, including our Terms of Service, Privacy Policy, and links to companion documents for Buyers, Chrome Extension users, and our Subprocessor list.

Vista is operated by Northstar Advisory Corp. d/b/a Vista, an Alberta corporation. By creating an account or using Vista, you agree to the Terms of Service below. For questions, contact support@vistaroom.dev.

2. Terms of Service

Effective Date: April 7, 2026  ·  Last Updated: April 7, 2026

These Terms of Service ("Terms") govern your access to and use of the Vista platform and services provided by Northstar Advisory Corp. d/b/a Vista ("Vista," "we," "us," or "our"), an Alberta corporation. By creating an account or using Vista, you ("Customer" or "you") agree to these Terms on behalf of yourself and any organization you represent.

1. Definitions

2. Account Registration

To use the Platform, you must create an account and provide accurate, complete information. You are responsible for maintaining the confidentiality of your credentials and for all activities that occur under your account. You must notify us promptly at support@vistaroom.dev of any unauthorized use of your account. Vista is not liable for any loss or damage arising from unauthorized use of your credentials.

If you register using an email address associated with a company domain, Vista will automatically associate your account with other Authorized Users who register using the same email domain, creating a shared workspace for that organization. You are responsible for ensuring that Authorized Users in your workspace are authorized to access your Customer Content.

3. License Grant

Subject to these Terms and payment of all applicable Subscription fees, Vista grants Customer a limited, non-exclusive, non-transferable, non-sublicensable license to access and use the Platform during the Subscription period solely for Customer's internal business purposes and in accordance with these Terms.

4. Acceptable Use

Customer and its Authorized Users must not:

• Use the Platform for any unlawful purpose or in violation of applicable law;
• Transmit content that is defamatory, obscene, harassing, or infringes third-party rights;
• Attempt to reverse engineer, decompile, or extract the source code of any Vista software;
• Interfere with or disrupt the integrity or performance of the Platform or its underlying infrastructure;
• Use the Platform to upload malware, viruses, or any other malicious code;
• Circumvent any access controls or security features of the Platform;
• Resell, sublicense, or make the Platform available to unauthorized third parties.

Vista reserves the right to suspend or terminate access for violations of this section.

5. Customer Communications and CASL

AI-Generated Email Drafts. Vista's AI features may generate draft email content based on Customer Content ("Email Drafts"). Email Drafts are suggestions only. Customer is solely responsible for reviewing, editing, approving, and sending any communications to Buyers, Prospects, or any third party. Vista does not send communications on Customer's behalf without Customer's explicit action.

CASL Compliance. Where Canada's Anti-Spam Legislation (CASL) applies, Customer is the "sender" as defined under CASL for all commercial electronic messages transmitted using Email Drafts or other Platform features. Customer is responsible for: (a) obtaining express or implied consent from recipients as required by CASL; (b) including required identification information; and (c) providing a functional unsubscribe mechanism. Vista's generation of Email Drafts does not constitute sending and does not satisfy Customer's CASL obligations.

6. Deal Rooms and Buyer Access

Customer Control. Customer controls which Buyers receive access to Deal Rooms and the content shared therein. Customer is responsible for ensuring that all materials shared with Buyers comply with applicable law and do not infringe third-party intellectual property rights.

Buyer Data. When Buyers access a Deal Room, Vista collects engagement data (such as page views, document interactions, and time-on-page) on Customer's behalf. This data is made available to Customer through the Platform. Customer's use of Buyer engagement data must comply with all applicable privacy laws and Vista's Privacy Policy.

Buyer Privacy Notice. Vista displays a privacy notice to Buyers upon first accessing a Deal Room. Customer must not instruct Vista to suppress or misrepresent this notice.

7. Chrome Extension

Vista offers a Chrome browser extension that allows Authorized Users to import call transcripts from supported third-party platforms into the Platform. The extension reads transcript content from web pages on supported platforms solely to facilitate import at the Authorized User's direction. The extension does not record audio or video calls and does not operate on pages other than those for which it is expressly designed. Authorized Users are responsible for ensuring that any transcript imported via the extension was recorded and shared in compliance with applicable law and any applicable consent requirements.

8. Intellectual Property

Vista IP. As between the parties, Vista retains all right, title, and interest in and to the Platform, including all software, AI models, algorithms, prompts, templates, tooling, designs, trademarks, and documentation ("Vista IP"). These Terms do not transfer any Vista IP to Customer.

Customer Ownership; License to Vista. As between the parties, Customer owns Customer Content and AI Output, to the extent any intellectual property rights exist therein. Customer grants Vista a non-exclusive, worldwide, royalty-free license to use, reproduce, process, and store Customer Content and AI Output as necessary to: (a) provide, operate, secure, and support the Platform; (b) comply with legal obligations; and (c) generate and use Aggregate Data as described in Section 13. This license terminates upon account deletion, subject to Vista's data retention practices.

Feedback. If Customer or any Authorized User provides suggestions, ideas, or other feedback regarding the Platform, Vista may use such feedback for any purpose without restriction or compensation.

9. Privacy

Vista's collection, use, and handling of personal information is governed by the Privacy Policy below. By using the Platform, Customer agrees to the Privacy Policy and represents that it has obtained all necessary consents and has the authority to provide any personal information submitted to Vista in connection with the Platform.

10. Third-Party Services and Subprocessors

Vista uses third-party service providers ("Subprocessors") to deliver certain Platform features, including cloud hosting, authentication, payment processing, AI inference, and analytics. A current Subprocessor List is available at vistaroom.app/legal/subprocessors. Vista maintains this list and updates it when Subprocessors are added or materially changed. Customers may subscribe to change notifications by emailing support@vistaroom.dev.

Vista is not responsible for the terms, privacy practices, or availability of third-party services that Customer chooses to integrate with the Platform outside of Vista's standard integrations.

11. Confidentiality

Each party agrees to protect the other party's Confidential Information using at least the same degree of care it uses to protect its own confidential information (but not less than reasonable care), and not to disclose such Confidential Information to any third party except: (a) to employees, contractors, or agents who need to know it and are bound by confidentiality obligations no less protective than these Terms; or (b) as required by law or legal process (in which case the disclosing party will, to the extent permitted by law, provide prompt prior written notice to the other party).

"Confidential Information" means any non-public information disclosed by one party to the other that is marked as confidential or that reasonably should be understood to be confidential. Customer Content is Customer's Confidential Information. Vista's pricing, product roadmap, and non-public technical documentation are Vista's Confidential Information. Confidential Information does not include information that is or becomes publicly known through no breach of this section, was rightfully known before disclosure, is independently developed without use of Confidential Information, or is rightfully received from a third party without restriction.

12. Credits and Subscription

Credit System. Certain Platform features consume credits. Vista will clearly display the credit cost of operations within the Platform. Newly registered accounts receive an initial credit grant as described in Vista's then-current onboarding documentation.

Credit Exhaustion. If Customer's credits are exhausted, affected AI features will be paused until credits are replenished. Exhaustion of credits does not affect access to Deal Rooms, shared links, or non-AI features of the Platform, and does not constitute a suspension of the Subscription.

Credit Expiry. Credits do not expire unless otherwise stated at the time of purchase or in a separate order form. Any applicable expiry date will be clearly communicated before purchase.

No Refunds for Credits. Purchased credits are non-refundable except as required by applicable law or as expressly stated in these Terms.

13. Aggregate and Anonymized Data

Vista may collect, generate, and use aggregated, de-identified, or otherwise anonymized data derived from Customer's use of the Services — including from Customer Content and transcripts — to operate, maintain, and improve the Services, develop new features, and for analytics, benchmarking, and other lawful business purposes ("Aggregate Data"). Vista will not use Aggregate Data in a form that identifies Customer or any individual.

Vista does not use Customer Content or AI Output to train Vista's AI models without Customer's express consent.

14. Representations and Warranties

Each party represents and warrants that: (a) it has the legal authority to enter into these Terms; and (b) its performance under these Terms does not violate any applicable law or any agreement with a third party.

Customer additionally represents and warrants that: (a) Customer Content does not infringe any third-party intellectual property rights; (b) Customer has obtained all necessary consents and authorizations for any personal information included in Customer Content; and (c) Customer's use of the Platform complies with all applicable laws, including privacy and anti-spam laws.

Vista represents and warrants that it will maintain commercially reasonable security measures appropriate to the nature of the data processed on the Platform.

15. Term and Termination

Term. These Terms begin on the date Customer first creates an account and continue until terminated as provided herein.

Termination for Cause. Either party may terminate these Terms immediately upon written notice if the other party: (a) materially breaches these Terms and fails to cure such breach within 30 days of written notice; or (b) becomes insolvent, makes an assignment for the benefit of creditors, or is subject to bankruptcy or insolvency proceedings.

Termination for Convenience. Customer may cancel a Self-Serve Subscription at any time through the Platform account settings. Cancellation takes effect at the end of the then-current billing period, and no refund is provided for the remainder of that period. If Vista terminates these Terms for convenience (not for cause), Vista will provide Customer with a pro-rata refund of any prepaid Subscription fees for the unused portion of the then-current Subscription period.

Effect of Termination. Upon termination: all licenses granted herein terminate; Customer's access to the Platform will be suspended; Vista will retain Customer Content for 30 days following termination to allow Customer to export its data, after which Vista may delete Customer Content in accordance with its data retention practices. Sections 8, 11, 13, 16, 17, 18, 19, and 20.1 survive termination.

16. Disclaimer of Warranties

The Platform is provided "as is" and "as available." To the fullest extent permitted by applicable law, Vista disclaims all warranties, express or implied, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement. Vista does not warrant that the Platform will be error-free, uninterrupted, or free of security vulnerabilities. AI Output is generated algorithmically and may contain errors or inaccuracies; Customer is responsible for reviewing AI Output before reliance or use.

17. Limitation of Liability

To the fullest extent permitted by applicable law, neither party shall be liable for any indirect, incidental, special, exemplary, consequential, or punitive damages, including loss of profits, loss of data, or loss of goodwill, even if advised of the possibility of such damages.

Except for Customer's payment obligations, each party's aggregate liability arising out of or relating to these Terms, whether in contract, tort, or otherwise, will not exceed the fees paid by Customer to Vista for the Services in the twelve (12) months immediately preceding the event giving rise to the claim, or CAD $100, whichever is greater.

The aggregate cap above does not apply to Customer's indemnification obligations under Section 18. Vista's indemnification obligations under Section 18 remain subject to the aggregate cap.

18. Indemnification

By Customer. Customer will indemnify, defend, and hold harmless Vista and its officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to: (a) Customer Content; (b) Customer's or any Authorized User's use of the Platform in violation of these Terms; (c) Customer's breach of its representations and warranties under Section 14; or (d) Customer's communications with Buyers or Prospects, including any CASL violations.

By Vista. Vista will indemnify, defend, and hold harmless Customer from and against any third-party claims that the Platform, as provided by Vista and used in accordance with these Terms, infringes any Canadian or United States patent, copyright, trademark, or trade secret. Vista's indemnification obligations are subject to the aggregate cap in Section 17 and do not apply to the extent a claim arises from: (a) Customer Content or AI Output; (b) Customer's modification of the Platform; (c) Customer's use of the Platform in combination with third-party products or services not authorized by Vista; or (d) Customer's continued use of the Platform after Vista has provided a non-infringing alternative.

19. Governing Law and Dispute Resolution

Governing Law. These Terms are governed by the laws of the Province of Alberta and the federal laws of Canada applicable therein, without regard to conflict of law principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Informal Resolution. Before initiating any formal proceeding, the parties agree to attempt in good faith to resolve any dispute by providing written notice and engaging in good-faith negotiation for at least 30 days following receipt of such notice.

Binding Arbitration. If a dispute is not resolved through informal negotiation, it will be finally resolved by binding arbitration administered by the ADR Institute of Canada (ADRIC) under its Arbitration Rules, with the following modifications: (a) single arbitrator; (b) seat of arbitration: Calgary, Alberta; (c) language: English; (d) the arbitrator's award is final and binding and may be entered as a judgment in any court of competent jurisdiction.

Class Action Waiver. All disputes must be brought in the parties' individual capacities and not as a plaintiff or class member in any purported class or representative action. The arbitrator may not consolidate more than one person's claims and may not preside over any form of class or representative proceeding.

Exceptions. Either party may seek emergency injunctive or other equitable relief from a court of competent jurisdiction in Alberta to prevent irreparable harm pending arbitration, without waiving the right to arbitration.

20. General

3. Privacy Policy

Effective Date: April 7, 2026  ·  Last Updated: April 7, 2026

This Privacy Policy describes how Northstar Advisory Corp. d/b/a Vista ("Vista," "we," "us," or "our") collects, uses, discloses, and protects personal information in connection with the Vista platform and services (the "Platform"). Vista is subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA), and, where applicable, the EU General Data Protection Regulation (GDPR) and Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25).

1. Who This Policy Covers

This Privacy Policy applies to:

• Customers and Authorized Users — individuals who create or access a Vista account on behalf of themselves or an organization;
• Buyers and Prospects — individuals who access a Vista Deal Room or shared link at the invitation of a Customer;
• Visitors — individuals who visit Vista's marketing websites without creating an account.

A separate, short-form Buyer and Prospect Privacy Notice is displayed to Buyers when they access a Deal Room. That notice is also available at the "Additional Legal Documents" section below.

2. Information We Collect

3. How We Use Personal Information

4. Buyer and Prospect Data

Vista processes Buyer and Prospect personal information as a data processor on behalf of the Customer who shared the Deal Room. Vista's Customer is the data controller responsible for the lawfulness of collecting and sharing Buyer and Prospect data.

Notwithstanding the foregoing, Vista independently processes Buyer engagement data (in de-identified, aggregated form) for Platform improvement and analytics as described in Section 6.

Vista provides Buyers with a privacy notice at the point of first accessing a Deal Room, meeting Vista's obligations under GDPR Article 14 (indirect collection) and equivalent provisions under PIPA and Law 25.

5. How We Share Personal Information

Vista does not sell personal information.

6. Aggregate and Anonymized Data

Vista may collect, generate, and use aggregated, de-identified, or otherwise anonymized data derived from Customer's use of the Services — including from Customer Content and transcripts — to operate, maintain, and improve the Services, develop new features, and for analytics, benchmarking, and other lawful business purposes. Vista will not use such data in a form that identifies Customer or any individual. Vista does not sell Aggregate Data.

7. AI and Machine Learning

Vista uses AI and machine learning to generate summaries, content, email drafts, and other AI Output from Customer Content. AI Output is generated on your behalf and stored within your account.

We do not use Customer Content or AI Output to train Vista's AI models without your express consent.

Vista's AI inference relies on third-party AI providers. Data submitted to these providers for inference is subject to those providers' data processing agreements with Vista and is not used by those providers to train their models, per the applicable agreements in place.

8. Cookies and Tracking Technologies

Vista does not use cookies for cross-site behavioral advertising and does not participate in any advertising network. You can manage cookie preferences through your browser settings.

9. Data Retention

• Account and Customer Content: Retained for the duration of the active Subscription and for 30 days following account termination or cancellation, after which it is deleted or de-identified.
• Buyer and Prospect engagement data: Retained for the duration of the Customer's Subscription and deleted or de-identified following Customer account deletion.
• Billing records: Retained for 7 years as required for tax and accounting purposes.
• Aggregate Data: Retained indefinitely in de-identified form.

Vista does not sell personal information and does not share personal information with third parties for their own marketing purposes.

10. Data Security

Vista maintains administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include:

• Encryption of data in transit (TLS 1.2+); data at rest is protected using server-side encryption provided by our cloud infrastructure providers;
• Access controls limiting data access to authorized personnel on a need-to-know basis;
• Regular security reviews and vulnerability assessments.

No method of transmission over the internet is completely secure. Vista cannot guarantee absolute security. In the event of a data breach involving personal information, Vista will notify affected individuals and relevant authorities as required by applicable law.

11. International Data Transfers

Vista's infrastructure is primarily hosted in the United States. If you are located in Canada, the European Union, or another jurisdiction, your personal information may be transferred to and processed in countries outside your jurisdiction, including the United States. Vista ensures appropriate safeguards are in place for such transfers, including standard contractual clauses where required by the GDPR or equivalent mechanisms under applicable law.

12. Children's Privacy

The Platform is intended for business use by individuals 18 years of age or older. Vista does not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a minor, we will delete it promptly.

13. Your Rights

Depending on your location and applicable law, you may have the following rights:

• Access: Request a copy of the personal information Vista holds about you.
• Correction: Request that Vista correct inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request your personal information in a structured, machine-readable format.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdrawal of Consent: Where processing is based on consent, withdraw consent at any time without affecting prior lawful processing.
• Complaint: Lodge a complaint with a supervisory authority (e.g., the Office of the Privacy Commissioner of Canada, or your national/provincial data protection authority).

Buyers and Prospects: If you accessed a Vista Deal Room and wish to exercise rights regarding data held within that Deal Room, please contact the Customer who shared it (they are the data controller). For data Vista processes on its own behalf, contact Vista at support@vistaroom.dev.

To exercise your rights, contact: support@vistaroom.dev. Vista will respond within 30 days (or as required by applicable law).

14. California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights.

Categories of personal information collected: Identifiers (name, email, IP address); commercial information (subscription and billing data); internet and electronic network activity (usage and engagement data); inferences drawn from the above.

Your CCPA/CPRA rights include: Right to Know; Right to Delete; Right to Correct; Right to Opt-Out of sale or sharing; Right to Limit Use of sensitive personal information; Right to Non-Discrimination.

Vista does not sell or share your personal information with third parties for cross-context behavioral advertising. Vista does not have actual knowledge of selling or sharing the personal information of minors under 16. To submit a CCPA/CPRA request, contact: support@vistaroom.dev.

15. Changes to This Privacy Policy

Vista may update this Privacy Policy from time to time. For material changes, Vista will provide at least 30 days' advance notice by email to the primary account holder or by prominent notice within the Platform before the change takes effect. The updated Policy will be posted on this page with the revised effective date.

16. Contact Us

Vista has designated a Privacy Officer responsible for overseeing compliance with this Policy and applicable privacy laws.

4. Additional Legal Documents

Vista maintains the following companion documents. These are referenced in the Terms of Service and Privacy Policy above and are available at the links below.

5. Contact Information