Short version: We only collect what we need to run your AI assistant. We never sell your data. You can delete everything we hold with a single WhatsApp message.
Vesta AI ("Vesta", "we", "us") is an AI automation company operating in Mallorca, Spain. We are the data controller for personal data collected through our services, website, and WhatsApp communications.
Contact: privacy@vesta.systems
| Data | Why we collect it | Legal basis |
|---|---|---|
| WhatsApp phone number | To identify you and respond to your messages | Legitimate interest / Contract performance |
| Message content | To process your enquiry and provide AI responses | Contract performance |
| Conversation history | To maintain context across messages in the same session | Legitimate interest |
| Business name / type (if provided) | To personalise responses to your sector | Consent (you provide this voluntarily) |
| Interaction metadata | Message timestamps, response times — for service quality | Legitimate interest |
We do not collect: payment data, ID documents, precise location, or any special-category data under GDPR Article 9.
We do not use your data for advertising, profiling, or any automated decision-making that produces legal effects.
Your data is stored on:
All data is held within the European Economic Area (EEA). We do not transfer personal data outside the EEA.
| Data type | Retention period |
|---|---|
| Active conversation session | Duration of conversation + 90 days |
| Contact record (phone + business) | 12 months from last contact |
| Long-term AI memory | Until you request deletion |
| Service logs | 30 days rolling |
After retention periods expire, data is automatically purged.
Under GDPR you have the right to:
To exercise any right, message us at privacy@vesta.systems. We will respond within 30 days.
You can delete every record we hold about your number with a single WhatsApp message. No forms. No waiting. Instant.
Send this to our WhatsApp number and your contact record, conversation history, and all stored memories will be permanently erased within seconds. You'll receive a confirmation message.
The following phrases also work:
This deletes: your phone number record, all conversation history, all AI memory associated with your number, and removes you from our contact database. The deletion is irreversible.
Alternatively, email privacy@vesta.systems with your phone number and we will manually process the erasure within 72 hours.
| Processor | Purpose | Location |
|---|---|---|
| Meta (WhatsApp Business API) | Message delivery infrastructure | EU/US (Standard Contractual Clauses) |
| Supabase | Database storage | EU (Frankfurt) |
| Cloudflare | Network tunnel / DDoS protection | EU edge nodes |
| AI model providers | Language model inference (messages are processed) | EU/US (Data Processing Agreements in place) |
We have Data Processing Agreements in place with all processors. We do not sell or share your data with any third party for their own purposes.
This website (vesta.systems) uses no tracking cookies, no analytics platforms, and no advertising pixels. The only external requests made are to Google Fonts for typography.
If you believe we have handled your data incorrectly, you have the right to lodge a complaint with the Spanish data protection authority: