Privacy Policy.

Vesta is operated by CPLEX Management AG, the controller for the personal data described here. Our registered address is Lättichstrasse 6, 6340 Baar, Switzerland. For any privacy request, including access, deletion or a complaint, write to privacy@vestaanalysis.com. We answer within one month.

• Email address and account details — to create your account, sign you in and send service messages about your subscription.
• Questionnaire answers — tenure, room type, goals, size, window orientation, budget and region. These are the inputs to your score, plan and buy list.
• Room photographs — the image you upload is what the analysis and the render are produced from.
• Payment data — handled by Stripe. We never see or store your full card number. We keep a Stripe customer reference, your subscription status, interval and renewal date.
• Product analytics — only if you allow analytics cookies. Essential cookies keep you signed in and are the only ones set by default.

Your room photographs are used to generate your score and your render, and nothing else. They are stored in a private bucket that only your own account can read. They are never published, never shown to other users, never sold, and are never used in marketing without your explicit, separate opt-in. We do not use your photographs to train our own models. If a photograph contains a person, our analysis refuses it and returns an error rather than assessing it.

• Performance of a contract — account creation, questionnaire answers, photograph analysis, scores, improvement plans, renders, buy lists and billing. Without this data there is no product to deliver.
• Consent — analytics cookies, marketing cookies, marketing email, and any use of your photographs in marketing. You can withdraw consent at any time through cookie preferences or by writing to us.
• Legal obligation — retaining invoices and tax records.
• Legitimate interests — security, fraud prevention and keeping the service running.

We use these processors, and no others, to deliver the service:

• Anthropic (United States) — room analysis. Receives your room photograph and questionnaire answers. Does not train on it.
• Google (United States) — image generation for renders. Receives your room photograph and the render brief.
• Stripe (United States, Ireland) — payments, subscriptions and invoices.
• Lovable (European Union, with United States infrastructure) — application hosting, database and photograph storage.
• PostHog (European Union) — product analytics, only with your consent.

Anthropic, Google and Stripe process data in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum and, where applicable, the EU–US and Swiss–US Data Privacy Framework. Copies of the transfer mechanisms are available on request.

• Room photographs — deleted 24 months after upload, or immediately when you delete your account. This runs as an automated daily job, not as a promise: files are removed from storage, not just unlinked in the database.
• Renders — deleted on the same 24-month schedule as the photograph they came from, or immediately on account deletion.
• Scores, plans and buy lists — kept while your account exists so you can track progress, then deleted with the account.
• Account and questionnaire data — deleted when you delete your account.
• Billing records — retained by us and by Stripe for up to 10 years where tax law requires it.

Under the EU GDPR, the UK GDPR and the Swiss revFADP you have the right to access, rectify, erase, restrict and port your data, to object to processing, and to withdraw consent. Two of these are built into the product: Download my data and Delete my account in your account settings. Deletion removes your profile, rooms, scans, scores and every stored image file.

You may also complain to a supervisory authority — your local EU authority, the UK Information Commissioner's Office, or the Swiss Federal Data Protection and Information Commissioner.

Your score, improvement plan and render are produced by automated analysis. They are design opinions, not decisions with legal or similarly significant effects, and you can rescan a room at any time.

Some links are affiliate links. Prices and recommendations are unaffected.