Privacy Policy
Effective 2026-09-07
This privacy policy is applicable to the Vignettes Live app (hereinafter referred to as "Application") for mobile devices, which was developed by Certo Partners (hereinafter referred to as "Service Provider") as a commercial service. This service is provided "AS IS".
What information does the Application obtain and how is it used?
User Provided Information
The Application requires an account. When you register, the Service Provider collects your mobile phone number (your sign-in identity), your name, and optionally an email address and business name. Everything you then enter — inventory, properties, rooms, contacts, quotes, invoices and photos — is stored in your workspace so that you and the team members you invite can see it.
The Service Provider may also use the information you provided them to contact you from time to time to provide you with important information, required notices and marketing promotions.
Phone Number and SMS Verification
The Application uses your mobile phone number as your account identifier. When you sign in, the Service Provider sends a one-time passcode to that number by SMS text message. To deliver those messages, your phone number is transmitted to Twilio, the Service Provider's SMS and verification provider, which processes it on the Service Provider's behalf under its own privacy policy, linked below. Your phone number is retained for as long as your account exists so that you can continue to sign in. The terms of the SMS program, including how to opt out, are described in the Terms and Conditions.
Camera and Photos
The Application requests access to your device's camera and photo library to allow you to photograph inventory items, rooms and properties and attach those images to your records. Photos are compressed on-device and stored locally; when you are online they are uploaded to cloud storage operated by the Service Provider on Microsoft Azure so that other members of your workspace can see them and so that they survive a lost phone. Your photos are associated with your account and are not shared with third parties except as described in this policy. You may revoke camera and photo library access at any time through your device's system settings, though doing so may limit certain features of the Application.
AI-assisted cataloguing
When you use "Add from photos" or the photo suggestion on the New item form, the selected photo is sent to Anthropic's Claude API, which returns a suggested name, category and attributes for the piece. Only the downsized image is sent; no name, phone number, account or location data accompanies it. Anthropic processes the image on the Service Provider's behalf under its commercial API terms: it is not used to train Anthropic's models and is retained by Anthropic only briefly for abuse monitoring. You can skip these features entirely and enter item details by hand.
Contacts
If you choose to import a client from your phone's address book, the Application asks for contacts permission and reads only the entries you pick. The name, phone number and email of the selected contact are stored in your workspace so that they can be attached to a property. The Application never uploads your whole address book and never writes to it. Contacts you add are visible to the other members of your workspace.
Automatically Collected Information
In addition, the Application may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device's unique device ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browsers you use, and information about the way you use the Application.
Location
When you add a property, the Application offers to fill in the address from your current position. That uses your device's precise location once, only while the Application is open and only after you grant permission; the coordinates are converted to a street address on the device and are not stored or sent to the Service Provider. Address search on the same screen sends the text you type to Google Places so it can suggest matching addresses. The Application never tracks your location in the background.
Push notifications
With your permission the Application registers a push token so that the Service Provider can notify you when a property you watch changes status. The token is stored with your account and messages are delivered through Expo's push service. Declining or revoking notification permission does not affect any other feature.
Do third parties see and/or have access to information obtained by the Application?
The Service Provider does not sell your information and does not share it with third parties for their own marketing. Personal information is shared only with the service providers below, each of which processes it on the Service Provider's behalf for the purpose named:
- Twilio — delivers the SMS sign-in code to your phone number.
- Anthropic — receives inventory photos for AI-assisted cataloguing, as described above.
- Google — Places (address suggestions from the text you type) and Firebase Cloud Messaging (push delivery on Android).
- Expo — push notification routing and over-the-air application updates.
- Stripe — subscription billing for workspace owners; the Application itself never handles card details.
- Resend — transactional email, such as invoices and quotes you choose to send.
- Cloudflare — hosts this website and receives property-alert emails you forward to the Application.
- Microsoft Azure — hosts the Service Provider's servers, database and photo storage.
Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:
- Google (Play Services, Places, Firebase)
- Anthropic
- Expo
- Twilio
- Resend
- Cloudflare
- Stripe
- Microsoft Azure
The Service Provider may disclose User Provided and Automatically Collected Information:
- as required by law, such as to comply with a subpoena, or similar legal process;
- when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
- with their trusted services providers who work on their behalf, do not have an independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this privacy statement.
What are my opt-out rights?
You can halt all collection of information by the Application easily by uninstalling the Application. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.
Data Retention
The Service Provider retains your account and workspace data for as long as your account exists. Server logs, which may include your IP address and device type, are kept for up to 90 days. Billing records are kept for as long as tax and accounting law requires.
Deleting Your Account
You can delete your account from inside the Application at any time: open Settings → About & data (or Profile → About), tap Delete account, and confirm. If you are the owner of a workspace this deletes the whole workspace — every item, property, photo, quote, invoice and contact — and removes every team member. If you are a team member it removes you and your sign-in only; the workspace stays with its owner.
Deletion is immediate and permanent on the Service Provider's servers, including your photo files and any backups in cloud storage. Data already shared with the providers above for a completed purpose (for example an SMS that was delivered) is subject to their own retention.
If you can no longer sign in, email privacy@certopartners.com from a message that includes the phone number on the account and we will delete it within 14 days.
Children
The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.
The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age. In the case the Service Provider discover that a child under 13 has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact the Service Provider (privacy@certopartners.com) so that they will be able to take the necessary actions.
Security
The Service Provider are concerned about safeguarding the confidentiality of your information. The Service Provider provide physical, electronic, and procedural safeguards to protect information we process and maintain. For example, we limit access to this information to authorized employees and contractors who need to know that information in order to operate, develop or improve their Application. Please be aware that, although we endeavor provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.
Changes
This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.
Your Consent
By using the Application, you are giving your consent to the Service Provider processing of your information as set forth in this Privacy Policy now and as amended by us. "Processing," means using cookies on a computer/hand held device or using or touching information in any way, including, but not limited to, collecting, storing, deleting, using, combining and disclosing information.
Contact us
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at privacy@certopartners.com.