Privacy policy

Last updated 22 October 2026

NodeVista is a business portal: the web app at nodevista.com, the desktop app and the phone app for iOS and Android. It is provided by UnboundIQ Solutions - FZCO, trading as NodeVista ("we", "us"). This policy explains what personal data NodeVista handles, why, and the choices you have.

Who is responsible for your data

Each business that uses NodeVista (an "organisation") decides what it keeps in it, about its own team, customers and contacts. For that data the organisation is the controller and we process it on its behalf, under our Data Processing Agreement with it. We are the controller for the account details of the people who sign in, and for running and billing the service. If you are a customer or contact of an organisation, please contact that organisation first about your data.

What we collect

• Account details: your name, work email address, role and permissions, and the organisation you belong to.
• What you and your organisation put in: companies, contacts, deals, tasks, messages, tickets, notes, files, images and videos, and the other records the portal keeps.
• Calls and recordings: when your organisation makes phone calls through NodeVista, the call, its recording, transcript and summary.
• Device and usage information: the device type and operating system, app version, a push-notification token, and logs of how the service is used, kept to run it securely and fix faults.
• Billing details: handled by our payment provider; we do not store full card numbers.

Permissions the phone app asks for

• Microphone: only when you make a call or dictate a note, and only while you do.
• Notifications: to tell you about new messages, tickets and tasks. You can turn them off in the app's settings or your phone's.

The app does not track you across other companies' apps or websites, and shows no ads.

How we use it

• To provide the service: sign you in, store and show your organisation's data, send notifications and emails, and make calls.
• To run the AI features your organisation uses, such as Dia, writing help, images, video and transcription.
• To keep the service secure, prevent abuse and fix problems.
• To bill organisations and to meet our legal obligations.

We do not sell personal data, and we do not use it for advertising.

Google user data

When a member connects their Google account, NodeVista uses Google Calendar to show their meetings and put events made in NodeVista on their calendar, and Gmail to send email they write to a contact from their own address and to copy email exchanged with existing contacts onto those contacts' timelines. Other mail is not stored.

NodeVista's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train AI models, and people at NodeVista do not read it unless the member asks us to for support, it is needed for security or the law requires it. A member can disconnect at any time in Settings, Integrations, which revokes NodeVista's access at Google and deletes the stored tokens.

Who we share it with

We use trusted providers to run NodeVista. They process data only on our instructions:

• Supabase (database, sign-in and file storage) and Vercel (hosting).
• OpenAI, Google (Gemini) and BytePlus, for the AI features. Data sent to them is used to answer the request; under our agreements with OpenAI and Google, data sent through their APIs is not used to train their models.
• Twilio, for phone calls and recordings.
• Resend, for email; Expo and Google Firebase, for push notifications.
• Stripe, for payments.
• Sentry, for error monitoring; Apify, to read competitors' public social pages where an organisation turns it on.
• Google, Microsoft and other services, only where your organisation connects them (for example calendar or email).

Some providers are outside the European Economic Area; where they are, we rely on safeguards such as the European Commission's standard contractual clauses.

How long we keep it

We keep data for as long as the organisation's account is active, or as long as the organisation chooses. When an organisation closes its account, its data is deleted within 90 days, apart from what we must keep by law (for example invoices).

Your rights

You can ask to see, correct, export or delete your personal data, to restrict or object to how it is used, and you can complain to the data protection authority where you live. To delete your NodeVista account, ask your organisation's admin or write to us at the address below.

Children

NodeVista is a business tool and is not meant for anyone under 16.

Security

Data is encrypted in transit and at rest, each organisation's data is kept in its own separate database schema, and access is limited by each member's permissions.

Changes

If we change this policy we will update the date above, and tell organisations of significant changes.

Contact

Questions or requests: support@nodevista.com.