Privacy Policy

Information Collection and Purpose

Our approach is to collect only the necessary information. Here's what this means:

Identity & Access

Upon signing up for a Vasta product, we request identifying details such as your name, email address and your phone number. This information allows you to personalize your account, receive essential updates, and enables us to enhance our products based on your feedback through optional surveys. With your consent, we may also send you newsletters and other relevant updates. Additionally, we may offer the option to upload a profile picture for use within our products.

Rest assured, we never sell your personal information to third parties, nor do we use your name or company in marketing materials without your explicit permission.

Billing Information

For users of our paid products, we require payment details and billing addresses. Your credit card information is securely submitted to our payment processor and is not stored on Vasta servers. We maintain records of payment transactions, including the last four digits of the credit card number, for account history, invoicing, and billing support purposes. Your billing address is retained to facilitate service charges, calculate applicable taxes, issue invoices, and identify fraudulent transactions.

Geolocation Data

For most of our products, we log the full IP address used during account signup to mitigate spam signups. Account access is also logged by IP address for security and fraud prevention purposes. This login data is retained as long as your product account is active.

Website Interactions

We gather browsing activity data for analytics and statistical analysis, including browser and operating system versions, IP addresses, visited web pages, and referral sources. If you have an active account, these analytics are tied to your account until its deactivation.

Voluntary Correspondence

Correspondence with Vasta via email is retained, including your email address, to maintain a history of interactions for future reference. Additionally, voluntarily provided information such as survey responses may be stored. We may request permission to record customer interviews for future reference or use, always with your explicit consent.

Data Access and Sharing

We may share your information with third-party subprocessors to facilitate product functionality or for business operations such as managing newsletter subscriptions. Additionally, integration with third-party services may involve sharing information at your direction, subject to your consent.

Access to your content is strictly limited, with human access only granted in rare cases with your express permission or for essential troubleshooting purposes. We may access your data when required to respond to legal processes or to prevent abuse of our products.

Your Rights

At Vasta, we uphold your data rights regardless of your location. These rights include:

• Right to Know: Understand what personal information we collect, use, share, and sell.

• Right of Access: Access the personal information we hold and obtain details on its processing.

• Right to Correction: Request correction of your personal information.

• Right to Erasure: Request deletion of your personal information, subject to legal limitations.

• Right to Complain: Lodge complaints regarding our handling of your data.

• Right to Restrict Processing: Request limitations on how your data is processed.

• Right to Object: Object to specific data processing activities.

• Right to Non-Discrimination: Exercise your privacy rights without facing discrimination in service provision.

Many of these rights can be exercised by updating your account information.

Data Location

Vasta products operate in the United States. By using our websites or services and providing us with your personal information, you consent to the transfer and storage of your data in the United States, regardless of your location.

For users in the EU or UK, you may contact your data protection authority for assistance or to learn more about local privacy regulations.