Privacy Policy
This explains what Vesta collects, why, and what you can ask us to do about it.
1. Who this covers
This policy covers vesta.money and the Vesta app. Vesta lets you deposit tokenized equities and send them to someone identified by their X username.
2. What we collect
From X. When you sign in with X we receive your public profile: your username, display name, account id and avatar. We never receive your X password, and we cannot post as you.
Your wallet. We create and hold a blockchain wallet for your account and store its address.
Your activity. We store a record of each send: sender, recipient, ticker, amount, time and the resulting transaction hash.
Technical data. Ordinary server logs — IP address, browser user agent and timestamps — kept to operate the service and investigate abuse.
We do not collect your name, postal address, date of birth, government identifiers or payment card details, and we do not ask for them.
3. Why we use it
- To run the service you asked for: creating your wallet, showing your balance, and carrying out sends. This is necessary to perform our agreement with you.
- To keep the service safe: enforcing limits, detecting abuse and preventing fraud. This is our legitimate interest, and yours.
- To meet legal obligations where they apply to us.
4. On-chain data is public and permanent
Every send settles on a public blockchain. Wallet addresses, amounts, tickers and timestamps are visible to anyone, permanently, and cannot be edited or deleted by us or by you. This is how the chain works, not a choice Vesta makes. Deleting your Vesta account does not and cannot remove anything already settled on-chain.
5. Who else sees it
We share the minimum necessary with the providers that run the service: our hosting provider, and the custody provider that holds wallet keys. They act on our instructions. We do not sell your data, we do not share it for advertising, and we run no third-party advertising or analytics trackers on this site.
We may disclose information where we are legally required to.
6. How long we keep it
Account and transaction records are kept for as long as your account is open, and for a reasonable period afterwards where we need them to resolve disputes or meet legal obligations. Server logs are kept for a short operational period and then discarded.
7. Your rights
You can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete your account, or object to a particular use. Message us on X and we will respond. Note the limits in section 4: on-chain records cannot be deleted.
You can also revoke Vesta's access to your account from X's settings at any time.
8. Security
Wallet keys are held by a specialist custody provider, encrypted at rest, and never reach your browser. Access to production systems is restricted. No system is perfectly secure, and you should treat your X account as the key to your Vesta wallet — protect it accordingly.
9. Children
Vesta is not for anyone under 18. We do not knowingly collect data from children.
10. Changes
If this policy changes materially we will update the date above and say so in the app.
11. Contact
Message @vesta on X. That is where support lives.