M/S InfiniSoft Solutions, operating under the brand name Velisto (“Velisto,” “we,” “us,” or “our”), provides an AI-powered social media marketing platform for real-estate professionals. This Privacy Policy explains what information we collect when you use our website and application, how we use and share it, and the choices and rights you have. By using Velisto, you agree to the practices described here.
Information we collect
We collect the following categories of information:
- Account information. Your name, email address, and authentication details when you sign up, including data provided through Google sign-in. If you subscribe to a paid plan, our payment provider collects billing details on our behalf.
- Newsletter sign-ups. If you sign up for the Velisto playbook on our website, the email address you enter. It is added to our newsletter list only; it does not create an account.
- Workspace content. The content you create, upload, or generate in Velisto — captions, images, videos, carousels, brand personas, scheduled posts, comments, and any media you store in your workspace.
- Connected social accounts. When you connect an Instagram, Facebook, Threads, LinkedIn, TikTok, or YouTube account, we receive and store OAuth access tokens and basic profile details (such as account name, ID, and avatar) so we can publish and analyze content on your behalf. We only request the permissions needed to provide those features, and you can disconnect an account at any time.
- Listings and property data. Property listings you add manually, import from a CSV, or sync from an integration such as Houzez — including addresses, prices, descriptions, features, and photos.
- Usage and device data. Information about how you interact with Velisto, such as pages viewed, features used, log data, IP address, browser type, and device information, collected to operate, secure, and improve the service.
How we use your information
We use the information we collect to:
- Provide, maintain, and operate the Velisto platform and its features.
- Generate marketing content on your behalf using AI — for example, drafting captions, weekly content plans, and images from the details of your listings and brand persona.
- Publish, schedule, and measure the performance of posts on the social accounts you connect.
- Process subscriptions, payments, and refunds, and send you related account and service communications.
- Send the newsletter you signed up for. Every issue has an unsubscribe link, and unsubscribing stops it.
- Provide customer support and respond to your requests.
- Monitor, secure, troubleshoot, and improve the service, and prevent fraud and abuse.
- Comply with legal obligations and enforce our terms.
How your content is processed by AI
Velisto uses third-party AI providers to generate text and images. When you use an AI feature, the relevant content — such as a listing description, a brand persona, or an uploaded image — is sent to these providers so they can return a result. We do not sell your content, and we do not use it to train our own advertising models. AI-generated output may be inaccurate; you are responsible for reviewing it before publishing.
YouTube API Services
Velisto uses YouTube API Services to connect your YouTube channel, upload the videos you schedule, and show you how your channel and videos perform. By connecting a YouTube channel you also agree to the YouTube Terms of Service, and Google’s handling of your data is described in the Google Privacy Policy.
- What we access. Your channel’s ID, name, handle, and avatar; your subscriber and video counts; the ID, title, description, tags, privacy setting, and processing status of videos you publish through Velisto; and analytics for your channel and those videos, such as views, watch time, likes, comments, shares, and subscribers gained or lost.
- How we use it. Only to publish the videos you schedule and to show you their performance in Velisto. We do not use YouTube data for advertising, we do not sell it, and we do not send it to AI providers. We never add your YouTube figures into totals with other platforms’ figures.
- Who can see it. You and the people you give access to the workspace the channel is assigned to. Beyond that, we share it only with the hosting and storage providers that run Velisto.
- How long we keep it. Access tokens, channel analytics, and video statistics are kept while your channel stays connected. Channel details are refreshed at least every 30 days. When you disconnect the channel, we revoke our access with Google and delete the channel’s stored YouTube data right away, and always within 7 days.
- Revoking access. You can disconnect YouTube from your workspace’s channel settings in Velisto, or remove Velisto’s access at any time from your Google Account’s security settings page. When we detect that access was removed on Google’s side, we delete the same data.
- How we protect it. Your YouTube access and refresh tokens are encrypted before they are stored and are never sent to your browser. All YouTube data travels over encrypted HTTPS connections, both between Velisto and Google and between Velisto and you. Velisto staff do not read your YouTube data unless you ask us to for support, it is needed for security purposes, or the law requires it. The other safeguards described under “How we protect your data” below also apply.
Velisto’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Service providers and subprocessors
We share information with trusted third parties that perform services for us, only as needed to operate Velisto. These include:
- Hosting and infrastructure. Cloud hosting, database, and file-storage providers that run the application and store your data.
- AI providers. Providers that power our text and image generation features, as described above.
- Payments. A merchant-of-record payment provider processes subscriptions and payments and handles billing information on our behalf. We do not store full card numbers.
- Email. An email service provider stores email addresses and sends our emails, including the newsletter if you sign up for it.
- Social platforms. Instagram, Facebook, Threads, LinkedIn, TikTok, and YouTube, which receive the posts and requests we send when you connect an account and publish content.
- Analytics. On our marketing website we use Google Analytics to understand aggregate traffic and improve the site.
We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets.
How we protect your data
We use administrative, technical, and organizational safeguards designed to protect your information — and especially sensitive data such as the access tokens for your connected social accounts — against unauthorized access, loss, and misuse:
- Encryption in transit. Velisto is served only over HTTPS (TLS), with HTTP Strict Transport Security enforced, and our connections to social platforms and service providers are encrypted too.
- Encryption of credentials. OAuth access and refresh tokens for connected accounts are encrypted before they are stored in our database and are never exposed to your browser. Passwords are stored only as salted one-way hashes, and session data is encrypted and kept in secure cookies.
- Access controls. Data in a workspace is visible only to you and the people you give access to that workspace. Access to our production systems is limited to a small number of authorized personnel who need it to operate the service, provide support you request, or meet legal obligations.
- Account protection. Repeated failed sign-in attempts are rate-limited to protect against password guessing, and we monitor the service for abuse.
- Minimal permissions. We request only the platform permissions needed for the features you use, and you can disconnect any connected account at any time.
- Trusted providers. Our hosting, database, and file-storage providers are required to protect the data they process for us and may use it only to provide their services to Velisto.
No method of transmission or storage is completely secure, but we work to protect your information and review our safeguards as the service evolves. If we learn of a security incident that affects your personal data, we will notify you and the relevant authorities as required by applicable law. To report a security concern, contact us at hello@velisto.ai.
Cookies and tracking
Our marketing website uses cookies and similar technologies to measure traffic and improve content, and to run our affiliate program. If you reach us through an affiliate’s link, we store a referral identifier for up to 90 days so that the affiliate can be credited if you subscribe. It records the referral itself, not your browsing on other sites, and we do not use cookies for advertising. You can control cookies through your browser settings. The Velisto application uses cookies that are strictly necessary to keep you signed in and to operate the service.
Data retention and deletion
We retain your information for as long as your account is active or as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete content or disconnect a social account, we remove or revoke the associated data within a reasonable period. Data we received from YouTube is deleted within 7 days of disconnecting the channel or of a deletion request. When you close your account, we delete or anonymize your personal information, except where we are required to retain it by law.
Your rights and choices
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update much of your information directly in your account settings, and you can disconnect any social account at any time. To exercise a right or make a request, email us at hello@velisto.ai. We will respond within the time required by applicable law.
GDPR and CCPA
If you are in the European Economic Area or the United Kingdom, we process your personal data under the GDPR on the legal bases of performing our contract with you, our legitimate interests in operating and improving the service, your consent where applicable, and compliance with legal obligations. You have the rights described above, as well as the right to lodge a complaint with your local data protection authority.
If you are a California resident, the CCPA gives you the right to know what personal information we collect, to request its deletion, and to opt out of any “sale” of personal information. We do not sell your personal information. You will not be discriminated against for exercising these rights. To make a request under either regime, contact us at hello@velisto.ai.
International data transfers
Velisto is operated with the help of service providers that may be located in countries other than your own, including the United States. When we transfer personal data across borders, we rely on appropriate safeguards, such as standard contractual clauses, to protect it in accordance with applicable law.
Children's privacy
Velisto is a business tool intended for real-estate professionals. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of Velisto after an update means you accept the revised policy.
Contact us
If you have questions about this Privacy Policy or your data, contact us at hello@velisto.ai.
Velisto is a brand of M/S InfiniSoft Solutions, which operates the service and receives its payments. Contact: hello@velisto.ai