Privacy Policy

Last updated: October 23, 2026

Who We Are

VITA AI ("VITA," "we," "us," or "our") provides a cloud-hosted AI coworker with its own persistent virtual desktop. This Privacy Policy explains what we collect when you use our website, web app, virtual desktop, and related services (collectively, the "Service"), why we collect it, and the choices you have.

VITA AI is responsible for the personal information described in this policy. If you have questions, contact us at [email protected].

Information We Collect

Account and organization information

When you create a VITA account or join an organization, we collect:

• Your name, email address, and profile image.
• Information from the sign-in method you choose. If you sign in with Google or GitHub, we receive your name, email address, and profile image from that provider. We do not receive or store your Google or GitHub password.
• Email verification status, authentication records, and session information.
• Your role and organization details, including organization name, organization email, logo, members, and invitations.

We use magic-link emails to sign you in. If you join the waitlist, we collect your name and email address. If you submit feedback, we collect the title, message, label, status, and the account it is associated with.

Your workspace and content

VITA works inside a virtual desktop and persistent workspace. To provide the Service, we store the content you create or that VITA creates for you, including:

• Chat messages, prompts, task descriptions, instructions, agent responses, and conversation summaries.
• Files, applications, browser state, and other content in your workspace.
• Artifacts such as written content, code, spreadsheets, images, and social post drafts.
• Screenshots that VITA captures while performing tasks.
• Scheduled tasks and posts, publication history, upstream post IDs or URLs, and error details.

If you are a member of an organization, other members and organization administrators may be able to access content in that organization's workspace.

Connected accounts and integrations

You can connect social media accounts to VITA. Today this includes Bluesky, X, and LinkedIn; Threads and Instagram are available when those integrations are enabled in the Service. When you connect an account, the platform shares information such as your account ID, handle, display name, avatar, and the permissions you grant.

We store OAuth access and refresh tokens for connected social accounts so VITA can prepare, schedule, and publish content on your behalf. These social integration tokens are encrypted at rest. Disconnecting an integration removes it from your active integrations and cancels pending scheduled posts associated with it. You can also revoke VITA's access from the platform's own settings.

Billing and credits

Paid plans are processed by Lemon Squeezy, our payment provider and merchant of record. We receive and store subscription and transaction information such as your plan, subscription status, billing period, credit balance and usage, order and subscription identifiers, and related billing records.

We do not store your full payment card details. Lemon Squeezy collects and processes payment information under its own privacy policy.

Usage, device, and log data

When you use the Service, we automatically collect technical information such as:

• IP address, device and browser type, operating system, and language.
• Pages and features used, actions taken, timestamps, and request identifiers.
• Error reports, performance data, and diagnostic logs.
• Approximate location derived from your IP address.

We use this information to operate and secure the Service, debug problems, provide support, prevent abuse, and understand how the product is used.

Cookies and similar technologies

We use cookies and similar technologies to:

• Authenticate you and keep you signed in.
• Protect against cross-site request forgery and secure OAuth flows.
• Measure product usage and diagnose errors through PostHog.

We do not use advertising cookies or sell data to ad networks. You can block or delete cookies in your browser, but authentication cookies are required to sign in and use the Service.

How We Use Information

We use personal information to:

• Provide, operate, and maintain the Service.
• Authenticate you, authorize access, and manage your account and organization.
• Run tasks on your virtual desktop and execute actions you request.
• Connect to social platforms, prepare drafts, schedule posts, and publish content you approve.
• Process payments, manage subscriptions, and calculate credit usage.
• Send essential service messages such as sign-in links, organization invitations, task failure notifications, and security alerts.
• Provide support and respond to your requests.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Analyze usage and improve the Service's features, reliability, and performance.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information or share it for cross-context behavioral advertising.

AI Processing

VITA is powered by third-party AI models and tools. When you ask VITA to do something, we send the relevant prompts, conversation context, files, screenshots, and tool results to our AI gateway and model providers — such as OpenAI and Anthropic — and to tool providers such as E2B for the virtual desktop and Parallel for web search and extraction. These providers process the data to return results to us and are bound by their own terms and privacy policies.

We do not use your content to train our own AI models.

AI-generated output can be inaccurate, incomplete, or unexpected. You are responsible for reviewing content before publishing it and for supervising actions VITA takes on your behalf. Do not use VITA for high-stakes decisions without human review. See our Terms of Service for more information.

Because VITA can browse the web and operate connected accounts, it may encounter personal information about third parties. You must have the right to provide any personal information you submit to the Service.

How We Share Information

We share personal information only as described in this policy:

• Service providers. We use vendors that help us run VITA, including the providers listed below.
• Connected platforms. When you publish or schedule content, we send the content and necessary account information to the platform you connected.
• Legal and safety. We may disclose information if required by law, legal process, or a valid government request, or if we believe disclosure is necessary to protect the rights, property, or safety of VITA, our users, or others.
• Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will require the recipient to honor this policy.
• With your consent. We may share information for other purposes when you ask us to or consent.

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

Third-Party Services

Our Service relies on the following providers. Their handling of information is also governed by their own privacy policies:

• Authentication: Google and GitHub
• Email delivery: Resend
• Payments and billing: Lemon Squeezy
• Hosting: Fly.io
• Virtual desktop and storage: E2B and Backblaze B2
• Data infrastructure and scheduling: Upstash
• AI models and gateway: Vercel AI Gateway, OpenAI, and Anthropic
• Web research: Parallel
• Analytics and error tracking: PostHog
• Connected social platforms: Bluesky, X, LinkedIn, and, when enabled, Meta for Threads and Instagram

Data Retention

We keep personal information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements.

• Account, workspace, and chat data are retained while your account is active. If you ask us to delete your account, we will delete or anonymize the associated data within a reasonable period, except where we must retain it for legal, tax, security, or backup purposes.
• Screenshots stored in our object storage are subject to a 30-day lifecycle rule and are automatically deleted after that period.
• Logs and diagnostics are retained for a limited period appropriate for debugging, security, and support.
• Billing records are retained as required by tax and accounting law.
• Backups may retain copies of deleted data for a limited period before they are overwritten.

You can delete files and artifacts in your workspace, disconnect integrations, and cancel scheduled posts at any time. To request deletion of your account or other personal information, contact us at [email protected].

Security

We use technical and organizational safeguards designed to protect your information, including HTTPS in transit, encryption of social integration tokens at rest, access controls, and isolated virtual desktop environments.

No method of transmission or storage is completely secure. We cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

Your Rights and Choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your information.
• Receive a portable copy of your information.
• Restrict or object to certain processing.
• Withdraw consent where we rely on consent.
• Lodge a complaint with your local data protection authority.

You can update account details in your settings, disconnect integrations from the Integrations page, and delete workspace files at any time. To exercise any other right, email [email protected]. We may need to verify your identity before fulfilling a request. You may use an authorized agent where the law allows it.

We will not discriminate against you for exercising your privacy rights.

If you are in the European Economic Area or the United Kingdom, we process personal information to perform our contract with you, to pursue our legitimate interests in operating and improving the Service, to comply with legal obligations, and with your consent where required.

If you are a California resident, we do not sell your personal information and do not share it for cross-context behavioral advertising. You can request access, correction, or deletion as described above.

International Data Transfers

VITA and our service providers operate in the United States and other countries. Your information may be transferred to and processed in countries other than the one where you live. Where required, we take steps designed to ensure your information receives an adequate level of protection consistent with applicable law.

Children

The Service is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information to VITA, contact us and we will take appropriate steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and change the "Last updated" date above. If a change is material, we will provide additional notice by email or in the Service. Your continued use of the Service after the update means you accept the revised policy.

Contact Us

If you have questions, concerns, or requests about this Privacy Policy or your personal information, contact us at [email protected].