Who is responsible
Vezista is operated by Artifision, the Serbian business identified on this page. Artifision is responsible for processing account, service-security and support information. When a workspace connects business applications, we process their information to carry out that workspace’s instructions. The workspace remains responsible for its authority to share and use those records and for any required data-processing agreement.
Information we process
The information depends on the applications, tools and permissions you select. It can include:
- Account information: name, email address, password hash, language, workspace membership and role.
- Connection information: application endpoint, company or workspace identifiers, settings, encrypted credentials and authorization grants.
- Plan information: the plan of the workspace, its billing period and status, and the Paddle references of the customer and subscription. Payment card details are entered with Paddle and never reach Vezista.
- Request history: tool name, submitted arguments, returned results, request references, status, errors, approval decisions and relevant times. Results can contain customer names, business contact details, addresses, tax details, stock information, prices, orders, invoices and account balances.
- Technical information: session identifiers, IP address, browser or device information, and operational or security logs.
- Support information: messages and attachments you choose to send us.
Why we use this information
We use it to create accounts, authenticate users, connect applications, enforce permissions, execute requests, obtain approvals, return results, prevent duplicate actions, investigate failures and respond to support requests.
Where applicable, the legal bases are performing our agreement with you, legitimate interests in securing and operating the service, compliance with legal obligations and consent for processing that requires it. For records supplied by a workspace, that workspace must establish the appropriate legal basis.
Vezista does not use your connected business records to train AI models or sell them for advertising. The AI provider you choose has its own data-use terms.
Where your information goes
A tool request travels from your chosen AI client to Vezista and, when authorized, to the connected application or its local connector. Vezista returns the permitted result and request status to that client. The result may then appear in your conversation.
Recipients can include authorized workspace members, the application you connect, your chosen AI provider, Paddle.com, which processes online payments for Vezista plans as our reseller and Merchant of Record, and service providers used for hosting, storage, backups, email delivery and support. Artifision personnel may access relevant information when necessary to operate, secure or support the service. We may disclose information when legally required.
Vezista receives the tool arguments and resources the client explicitly sends. It does not request or reconstruct your full conversation history. Do not send unrelated personal information, payment-card details, health records or government identity documents through its tools.
Hosting and international processing
Artifision operates from Serbia. Data may also be processed where our infrastructure providers and the applications or AI services you select operate. Connecting an externally hosted service may therefore involve international transfers.
Contact us for the current infrastructure and recipient details relevant to your workspace, and any required transfer or data-processing arrangements, before connecting data subject to location restrictions.
How long information is kept
Account and workspace settings remain while the account or workspace is in use, and until a verified closure or deletion request is processed, subject to applicable legal obligations.
Request arguments, results and approval history are stored in Vezista. They currently have no scheduled automatic deletion and remain until manually deleted following an applicable request or workspace closure. A request’s execution or approval expiry is not a data-deletion deadline. Revoking an assistant or disabling a connection does not erase this history.
Support correspondence is kept to handle the request and related follow-up; you can ask for its deletion. If information must be retained for a specific legal obligation or dispute, we limit its use to that purpose. We explain applicable exceptions when handling a deletion request.
Operational and security logs are kept for troubleshooting and incident investigation. Contact us for the retention period that applies to your deployment; no fixed automatic deletion period is stated here.
Deleted data may remain in restricted recovery backups until those copies expire. Contact us for the applicable backup schedule. Disconnecting an assistant does not remove backup copies.
Security and browser storage
Connection credentials and stored request arguments and results are encrypted by the application. Account passwords are hashed. Permission profiles and authorization checks limit access, but no service can guarantee absolute security.
The website uses only the cookies and browser storage it needs to work: a session cookie and a security cookie against forged requests, which expire 120 minutes after your last activity; a sign-in cookie, only if you choose to stay signed in; a cookie with the language you chose; and display choices, such as your light or dark theme, kept in the browser storage. When you pay for a plan online, Paddle’s payment window uses its own cookies under Paddle’s privacy policy. Vezista uses no analytics or advertising cookies, so it does not ask for cookie consent. You can clear these in your browser; doing so may sign you out or reset your choices.
Your choices and rights
You can restrict tools, require approval, disable an application connection and revoke an assistant’s access. Requests already executed may need to be addressed in the connected application. Information already delivered to an AI provider is also governed by that provider’s retention and deletion process.
Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data, object to processing, or withdraw consent where consent is the basis. Contact us using the privacy email below. We verify the request and respond within the applicable legal deadline. Workspace business records may require coordination with that workspace’s administrator.
You may complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection or another competent supervisory authority.
info@artifision.comSerbian Commissioner for Information of Public Importance and Personal Data Protection
Changes to this policy
We update this page when our processing practices change and revise the date above. We will provide additional notice when required by applicable law.