Privacy Policy

Somos Media Bt. (registered seat and place of business: 6000 Kecskemét, Klapka utca 19. 2/2., Hungary; company registration number: 03-06-102991; tax number: 20470443-2-03; hereinafter: the Operator) operates Vistobi, available at https://app.vistobi.com. For the personal data described here we act as the data controller. You can reach us at info@vistobi.com. This policy covers the Vistobi application at https://app.vistobi.com only; other products, such as the separate Vistobi Assistant e-mail app, are not covered by it.

• Account data: email address, display name, password (stored only as a salted hash by our authentication provider), language and time-zone preference, workspace membership and role.
• Workspace configuration: the websites you add, their domains, selected Google properties, WordPress connection details, e-commerce API credentials and monitoring settings.
• Metrics collected on your behalf: aggregated traffic, search, ranking, site-health and order data for the websites in your workspace.
• Assistant conversations: the questions you ask Tobi and the answers generated for you.
• Content: the articles, social posts and images you create, edit or approve in Vistobi, and the public text of your website that Tobi reads to propose them.
• Billing data: subscription plan, status and period, a customer and subscription identifier from our payment provider, and the billing name, billing address and (for companies) VAT number you enter at checkout, which we need to issue your invoices. We never receive or store full card numbers.
• Expert help requests: if you ask the Somos Media team to do the work for you, we store your contact details and message and, with the consent you give in that form, the team may look at your website's data in Vistobi.
• Free website check e-mails: if you ask for your free check report by e-mail without an account, we store your e-mail address, the checked domain, the check result, your language and whether you agreed to receive 2 follow-up tips.
• Technical data: log entries, error reports and product analytics events (for example that a website was added), used to operate and improve the service.
• Usage data linked to your account: which parts of the app you open (for example Today, Content or Settings and their tabs), how many times, how long they are in active use, on which days, some actions (for example that a review reply was sent or a website was added), and where a click had no effect or was repeated several times in quick succession, recorded only with the app's own name for the button, never what is on your screen. This record never contains what you type or the content you create. We use it only to understand which features are used and to decide what to improve. Only the Operator's administrator can see it; it is not shared with anyone and not used for advertising.

If you choose to connect Google, we request only the scopes needed for the features you use:

• https://www.googleapis.com/auth/analytics.readonly — to list your GA4 properties so you can select them, and to read aggregated traffic, engagement, conversion and revenue metrics for the selected properties.
• https://www.googleapis.com/auth/webmasters.readonly — to list your Search Console properties, and to read search queries, clicks, impressions, click-through rate, average position, page performance and sitemap or indexing status for the selected properties.
• https://www.googleapis.com/auth/business.manage (Google Business Profile, optional, connected separately) — to list the Business Profiles you manage so you can link one to each website, to read the profile's details, performance (views, website clicks, calls, direction requests), search keywords and reviews, to publish a post to the linked profile only when you approve that post in the application, and to publish a reply to a review only when you press Send on that reply (the assistant can draft it for you; the review text is used only to write the draft). We change the profile's details (description, website, phone number, opening hours, additional categories, photos) only when you approve that exact change in the application (the assistant can draft a description for you). We never delete reviews, replies, posts or photos.
• https://www.googleapis.com/auth/content (Google Merchant Center, optional, connected separately) — to list the Merchant Center accounts you can access so you can link one to a webshop, and to read product statuses, disapproved products, account issues and aggregated product performance. Vistobi changes nothing by itself. Only when you approve a specific fix (for example a missing unit pricing measure or a title written in capitals) does it write those fields into its own supplemental data source named "Vistobi fixes" in your Merchant Center, and you can undo every fix in the app. We never change your own feeds, prices, availability or account settings, and never delete products.

We use this data solely to display metrics, calculate the Tobi Score, generate your daily brief and answer your own questions inside your workspace. Analytics and Search Console access is read-only. The only changes we ever make in a Google account are publishing a Business Profile post you have approved, a review reply you have sent, a Business Profile detail you have approved, and Merchant Center fixes you have approved (written only into the "Vistobi fixes" data source). You can disconnect Google Business Profile at any time on the Integrations page, which revokes the token immediately.

Vistobi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the user-facing features described in this policy.
• We do not transfer or sell Google user data to advertising platforms, data brokers, resellers or information resellers.
• We do not use Google user data to serve advertisements.
• We do not use Google user data to develop, improve or train generalised artificial intelligence or machine learning models. Data is only sent to our AI provider to answer your own question about your own workspace, and is not used by that provider for model training.
• Humans do not read your Google user data, except with your explicit permission for a support request you raised, when required by law, for security investigations or abuse handling, or on aggregated and anonymised data for internal operations.

Connecting Facebook or Instagram is optional. You authorise access yourself through Meta's own login and consent screen, started from the Integrations page in Vistobi. We request only these permissions:

• pages_show_list — to list the Facebook Pages you manage, so you can choose which Page a post goes to.
• pages_manage_posts — to publish, schedule and delete posts on the Page you selected, only when you approve a post in the application.
• pages_read_engagement — to check whether a scheduled or published post went live and to read its public link.
• instagram_business_basic — to read your Instagram professional account ID and username, so you can choose it as a publishing target.
• instagram_business_content_publish — to publish an image post with its caption to your Instagram professional account, only when you approve it.

The data we store is limited to the selected Page or account ID and name, the posts you create in Vistobi (text, image, schedule) and the resulting post ID, link and delivery status. We do not read your private messages, friends, followers' personal data or personal profile, and we do not use Meta data for advertising or sell it.

Connecting Pinterest is optional. You authorise access through Pinterest's own OAuth consent screen, started from the Integrations page in Vistobi. With your permission we access:

• Account data: your Pinterest account ID and username, to show which account is connected.
• Boards: the names and IDs of your boards, so you can choose the board a Pin is saved to.
• Pins: we create Pins (image, title, description and destination link) on the board you choose, only when you approve a Pin in the application. We store the resulting Pin ID, link and delivery status.

We do not read your followers, messages or other users' data, and we do not use Pinterest data for advertising or sell it.

• Access tokens issued by Meta and Pinterest are stored server-side by our hosting platform's connector service, are never sent to your browser, and are used only from our backend to perform the actions you requested.
• You can disconnect any social account at any time on the Integrations page. Disconnecting deletes the stored access token immediately and stops all further access.
• You can also revoke access directly at the provider: Facebook Settings → Business integrations, Instagram Settings → Apps and websites, or Pinterest Settings → Security and logins → Apps.
• Posts and Pins already published stay on your social account until you delete them there. The related records in Vistobi (post text, image reference, IDs and status) are deleted with your workspace or on request.

To request deletion of all social data we hold about you, email info@vistobi.com. Provider policies: Meta Platform Terms, Pinterest Developer Guidelines.

• Performance of a contract: operating your account, workspaces, monitoring and billing.
• Consent: connecting your Google, WordPress or e-commerce accounts, and any optional notification emails. You can withdraw consent at any time by disconnecting the integration.
• Your request and consent: we send the free check report because you asked for it, and the 2 follow-up tips only if you ticked the box for them. Every such e-mail has an unsubscribe link.
• Legitimate interests: security, abuse prevention, service reliability and product improvement, including the account-linked usage data described above. You can object to this at any time by writing to us.
• Legal obligation: invoices, accounting and tax records for paid subscriptions.

• Data is stored on the Base44 application platform, which hosts our database, backend functions and file storage.
• Access tokens and API credentials are stored server-side and are never exposed to the browser. Requests to third-party APIs are made only from our backend.
• All traffic is encrypted in transit over HTTPS.
• Each workspace is isolated at the database level, so records belonging to one workspace are not readable by another workspace's accounts.
• Access to production data by our staff is limited to what is necessary to operate and support the service.

We do not sell personal data. We share data only with the processors needed to run the service:

• Base44 — application hosting, database, authentication and transactional email.
• Stripe — card payments and subscription management.
• Számlázz.hu (KBOSS.hu Kft.) — issuing and storing our invoices; it receives your billing name, address, VAT number, the plan and the amount.
• Resend — delivery of the e-mails we send you.
• Our AI model providers — receive only what a task needs: your question and the relevant metrics, the brief or content to write, or, for the "What does AI say about you?" check, questions about your business category; not used for model training.
• Pexels and Pixabay: stock photo search for your posts and articles; they receive only the search words, no personal data.
• Google — for Google Analytics usage measurement, and to read the data you authorised and publish Business Profile posts, review replies and profile changes you approve on your behalf.
• Meta and Pinterest — only if you connect them, to publish the posts and Pins you approve.
• Providers you connect yourself, such as your WordPress site, your webshop or your SEO data provider.

• Account and workspace data is kept while your account exists.
• Daily metric records are retained for up to 25 months so that year-over-year comparisons remain possible; detailed query-level records are aggregated earlier, as shown in the application's data-retention settings.
• Assistant conversations are retained for up to 12 months.
• Synchronisation and audit logs are retained for up to 12 months.
• Account-linked usage data is deleted after 13 months.
• A copy of every e-mail we send (recipient, subject, content and delivery result) is kept for up to 12 months, so we can check that it was correct and arrived.
• Free website check e-mail contacts are deleted 12 months after the last e-mail. If you unsubscribe, we keep only your address on a do-not-email list so that we never write to you again.
• Google access and refresh tokens are deleted immediately when you disconnect the integration or delete your account.
• Invoices and the billing data on them are kept for 8 years, as Hungarian accounting law requires.
• When you delete your account, or ask us to delete it, we delete your account data, workspace configuration and collected metrics within 30 days, except records we must keep for accounting purposes.

You can revoke Vistobi's access to your Google account at any time in the application, or directly at myaccount.google.com/permissions. To request deletion of your data, email info@vistobi.com.

Depending on where you live, you have the right to access, correct, delete, export or restrict processing of your personal data, to object to processing based on legitimate interests, and to withdraw consent. Contact info@vistobi.com and we will respond within 30 days. If you are in the EU, you may also lodge a complaint with your local data protection authority.

Some of our processors operate outside the European Economic Area. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

Vistobi is a business tool and is not intended for children under 16. We do not knowingly collect data from children.

We use essential cookies and browser storage to keep you signed in and remember your language, theme, view and cookie preferences. We also use Google Analytics to measure usage; analytics storage is enabled only if you accept it. If you accept, we also load the Meta (Facebook) pixel to measure the results of our ads, such as sign-ups and subscriptions; if you decline, it is not loaded. Google may receive cookieless signals when analytics storage is denied. We also count, on our own servers, which parts of the app signed-in users open and for how long (see "Usage data linked to your account" above); this stores nothing on your device. Advertising storage is denied. Cookie settings

We will update this page when our practices change and revise the date above. Material changes affecting how we use Google user data will be announced in the application before they take effect. See also our Terms of Service.