Privacy Policy

Vistr (getvistr.com)
Last updated: 23 May 2026

1. Introduction

Vistr ("we", "us", "our") is committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, store, and disclose your personal information when you use our web application at getvistr.com ("the Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Who We Are

Vistr is an AI-powered career intelligence platform that helps job seekers make informed decisions about job applications. The Service is operated from Australia.

Contact: hello@getvistr.com

3. Information We Collect

We collect the following types of personal information:

Account information

  • Email address
  • Name (if provided via Google sign-in)
  • Profile picture (if provided via Google sign-in)

Career documents

  • Resume/CV content (uploaded or pasted by you)
  • Cover letter content (uploaded or pasted by you)
  • Job descriptions (pasted by you for analysis)

Usage data

  • Analysis history and results
  • Job search preferences
  • Feature usage and interaction data

Payment information

  • Payment details are collected and processed by Stripe. We do not store your full card number, CVV, or banking credentials on our servers. We retain only a Stripe customer reference ID and subscription status.

4. How We Collect Information

We collect information you provide directly when you:

  • Create an account or sign in with Google
  • Upload or paste your resume, cover letter, or job descriptions
  • Set job search preferences
  • Subscribe to a paid plan

We also collect limited technical data automatically, including:

  • Browser type and device information
  • Usage patterns within the application
  • Error logs for debugging purposes

5. How We Use Your Information

We use your personal information to:

  • Provide and operate the Service
  • Analyse job descriptions against your resume using AI
  • Generate cover letters, tailored resumes, and gap analysis
  • Process subscription payments
  • Send transactional emails (account confirmation, password reset)
  • Improve the accuracy and quality of our AI analysis
  • Respond to your support requests
  • Comply with legal obligations

We do not use your information for advertising purposes. We do not sell your personal information to third parties.

6. AI Processing of Your Data

The core function of Vistr involves sending your resume content and job descriptions to third-party AI providers for analysis. Specifically:

Anthropic (Claude AI) — your resume content and job description text are transmitted to Anthropic's API for the purpose of generating match scores, gap analysis, cover letters, and tailored resumes. Anthropic's privacy policy is available at anthropic.com/privacy.

By using the Service, you consent to your career document content being processed by Anthropic for the purpose of providing you with analysis results. We do not send your email address or account information to AI providers — only the document content required to perform the analysis.

7. Third-Party Service Providers

We use the following third-party services to operate the platform. These providers process your data only as necessary to provide their services to us:

ProviderPurposeLocation
SupabaseDatabase and authenticationUSA (AWS)
AnthropicAI analysis engineUSA
StripePayment processingUSA
VercelFrontend hostingGlobal CDN
RailwayBackend hostingUSA

Each provider operates under their own privacy policy and security standards. We have selected providers with strong security practices and data protection commitments.

8. Data Storage and Security

Your data is stored in Supabase's managed database infrastructure hosted on Amazon Web Services (AWS). We implement the following security measures:

  • Encrypted connections (HTTPS/TLS) for all data transmission
  • Row-level security on all database tables
  • Authentication via Supabase Auth with Google OAuth support
  • API keys stored as environment variables, never in source code
  • Regular security reviews

While we take reasonable precautions to protect your information, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service.

  • Account data — retained until you delete your account
  • Career documents — retained until you delete them or close your account
  • Analysis history — retained until you delete individual analyses or close your account
  • Payment records — retained for 7 years as required by Australian tax law

You may request deletion of your data at any time by contacting hello@getvistr.com.

10. Your Rights

Under the Australian Privacy Act, you have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Delete your account and associated data
  • Complain about how we handle your information

To exercise any of these rights, contact us at hello@getvistr.com. We will respond within 30 days.

If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Children's Privacy

The Service is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at hello@getvistr.com and we will delete it promptly.

12. International Data Transfers

As outlined in Section 7, some of your data is processed and stored by third-party providers located in the United States. By using the Service, you consent to your data being transferred to and processed in the United States, where data protection laws may differ from those in Australia.

We only transfer data to providers that maintain appropriate data protection safeguards.

13. Cookies and Tracking

The Service uses minimal cookies and local storage necessary for authentication and session management. We do not use advertising cookies or third-party tracking technologies. We do not display advertisements.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice within the Service. The date at the top of this policy indicates when it was last updated.

Continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

For any privacy-related questions or requests:

Email: hello@getvistr.com
Website: getvistr.com

We aim to respond to all enquiries within 5 business days.

Vistr

Honest career intelligence.

© 2026 Vistr