Legal · Privacy

Privacy Policy

Effective
11 · 08 · 2026

Vestra, operated by ForgeurAI Systems Pvt Ltd ("we," "our," or "us"), values your privacy and is committed to protecting your personal data. This Privacy Policy explains how Vestra collects, uses, and safeguards your information when you use our platform, services, and tools.

1. Information We Collect

We collect the following types of information to provide and improve our services:

1.1 Personal Information

  • Name, email address, phone number, and other contact details when you register for an account.
  • Payment information when you purchase tokens or subscribe to services.

1.2 Usage Data

  • Interactions with Vestra's platform, such as the agents you use or create, activity logs, and preferences.
  • IP address, browser type, device information, and operating system for troubleshooting and analytics.

1.3 Third-Party Data

  • Data from integrations with third-party platforms or tools, where applicable.
  • Information shared through APIs or external services connected to Vestra.

2. How We Use Your Information

We use your data to:

  • Provide and improve Vestra's platform and services.
  • Facilitate the creation, deployment, and management of agent systems.
  • Personalize your experience and recommend relevant agents or features.
  • Process payments and manage subscriptions.
  • Communicate updates, promotions, or changes to the platform.
  • Monitor platform performance, troubleshoot issues, and enhance security.

3. Data Sharing and Disclosure

We do not sell your personal information. However, we may share data in the following circumstances:

  • Service Providers: trusted third parties who assist us in providing services (e.g., payment processors, hosting services).
  • Legal Obligations: when required by law or to protect our legal rights.
  • Business Transfers: in case of mergers, acquisitions, or asset sales, your data may be transferred to the new entity.

4. Google User Data

When you connect a Google account to Vestra (for example Gmail, Google Drive, Calendar, Docs, Sheets, Meet, YouTube, or Contacts), you grant access through Google's OAuth consent screen. This section describes how we handle that data, whether raw or aggregated/anonymized.

4.1 What We Access

We access only the Google data needed to carry out a task you explicitly ask your agent to perform, or an automation you have explicitly set up (for example, a routine that watches your inbox). Access happens per request under the narrowest applicable OAuth scopes; we do not bulk-download or continuously mirror your Google account.

4.2 How We Use It

Google user data is used solely to provide and improve the user-facing features you request — reading and summarizing email, sending messages you direct, and managing files, events, and documents on your behalf. Results are shown to you and stored in your workspace only as the output of your own tasks. We do not use Google user data for advertising, and we do not sell it.

4.3 How We Share It

Google user data is shared only with the processors strictly necessary to run the feature you invoked: the AI model providers that power your agent (which process it to generate your agent's response and are contractually prohibited from using it to train their models), and our integration provider, Composio, Inc., which performs the OAuth flow and stores access tokens on our behalf. It is never transferred to advertisers, data brokers, or any other third party.

4.4 No AI/ML Training

We do not use raw or derived Google user data to develop, improve, or train generalized artificial intelligence or machine learning models. Our model providers process it through APIs whose terms prohibit training on customer data. Any personalization derived from your data (such as your agent's memory) serves only you.

4.5 How We Protect It

Google user data is encrypted in transit (TLS) and at rest. OAuth tokens are held server-side and are never exposed to your browser or to other users. Access is limited to the systems that execute your tasks, under least-privilege scopes.

4.6 Retention and Deletion

Google user data persists only as part of the results of your own tasks in your workspace, and you can delete those tasks and files at any time. Disconnecting a Google account from Vestra deletes its access tokens, and deleting your Vestra account removes all stored data, including any Google user data, within 30 days. You can also revoke Vestra's access at any time from your Google Account security settings.

4.7 Limited Use

Vestra's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. User-Generated Content and Discoverability

By default, user-created agents and their execution metadata (runs) may be exposed to search engines via dynamic sitemaps for discoverability and SEO purposes. If you wish to keep your agents or runs private and exclude them from public indexing, please email us at user@vestra.ai with your request.

We will process your opt-out request and ensure your content is marked as private and excluded from public sitemaps.

6. Cookies and Tracking

Vestra uses cookies and similar tracking technologies to enhance your experience. You can manage cookie preferences through your browser settings.

7. Your Rights

You have the following rights regarding your personal data:

  • Access, update, or delete your account information.
  • Opt out of marketing communications.
  • Request a copy of your data or its deletion (subject to applicable laws).

8. Data Security

We implement industry-standard security measures to protect your data. However, no system is entirely secure, and we cannot guarantee complete protection.

9. Children's Privacy

Vestra is not intended for children under the age of 13. We do not knowingly collect data from children.

10. Third-Party Links

Vestra may contain links to external websites or services. We are not responsible for their privacy practices or content.

11. Updates to this Privacy Policy

We may update this Privacy Policy from time to time. The Effective Date at the top indicates when the latest changes were made. Continued use of Vestra constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Email: user@vestra.ai
Mailing Address:
ForgeurAI Systems Pvt Ltd
3rd Floor, Landmark Cyber Park
Sector 67, Badshahpur,
Gurgaon — 122101, Haryana