Privacy Policy

• Provide, operate, and maintain the Service.
• Sync your watchlist and preferences across devices.
• Process subscription payments and send billing receipts.
• Send push notifications you have opted into (market alerts, earnings reminders, app updates).
• Generate AI-powered research reports — ticker queries are sent to our backend and processed by AI models; queries are not linked to identifiable profiles for model training without your consent.
• Analyze usage trends and improve features, performance, and user experience.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.
• Communicate with you about product updates, new features, and promotional offers (you may opt out at any time).

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

• Contract: processing necessary to provide the Service you requested (account creation, watchlist sync, subscriptions).
• Legitimate interests: analytics, security, fraud prevention, and product improvement, where our interests are not overridden by your rights.
• Consent: push notifications, marketing emails, and any optional data sharing (you may withdraw consent at any time).
• Legal obligation: compliance with applicable law.

We do not sell your personal information. We share data only in these limited circumstances:

• Service providers: third-party vendors who process data on our behalf (cloud hosting, payment processing via Stripe, analytics, crash reporting, push notification delivery). These parties are contractually bound to protect your data and may not use it for their own purposes.
• AI model providers: ticker queries entered in the AI Research feature are sent to third-party AI API providers to generate research reports. Queries are transmitted securely and are not used to train third-party models without your consent.
• Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is subject to a different privacy policy.
• Legal requirements: when required by law or to protect the rights, property, or safety of MindNestCorp, our users, or the public.
• With your consent: in any other circumstance, with your explicit permission.

The Service integrates with the following third-party providers. Their privacy practices govern their own data handling:

With your permission, we send push notifications to your device for market alerts, earnings reminders, and product announcements. You can opt out at any time through:

• Your device's notification settings (iOS Settings / Android Settings).
• The Notifications section inside the Vesto app settings.

Disabling notifications does not affect your ability to use the app.

Vesto offers free and paid subscription tiers. Paid subscriptions are processed through Stripe. When you subscribe:

• Your payment card details are transmitted directly to Stripe and are never stored on our servers.
• We store your subscription status, plan tier, and transaction history to manage your account.
• Stripe may use your payment information in accordance with their Privacy Policy.

• We retain your account data for as long as your account is active or as needed to provide the Service.
• When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal obligations (e.g., billing records for up to 7 years).
• Anonymized and aggregated analytics data may be retained indefinitely as it cannot identify you.

To exercise any of the rights above, email us at hello@mindnestcorp.com with the subject line "Privacy Request".

MindNestCorp is based in the United States. If you access the Service from outside the US, your information will be transferred to and processed in the United States and potentially other countries where our service providers operate.

For transfers from the EEA or UK to the US, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms.

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure. We encourage you to use a strong, unique password and to enable device-level security features.

In the event of a data breach that affects your rights and freedoms, we will notify you and applicable authorities as required by law.

The Service is not directed to children under 13 (or under 16 for users in the EEA under GDPR Article 8). We do not knowingly collect personal information from children under these ages. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at hello@mindnestcorp.com.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated effective date and, where appropriate, by sending an in-app notification or email. Your continued use of the Service after any change constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy, please reach out: