Privacy policy — Visitta

What this policy explains

This policy describes which data Visitta may process, why we use it, who it may be shared with, and which controls are available to you.

Data we may collect

We may process account data such as your name and email address; authentication data such as protected credentials and sessions; and operational data you add to Visitta, such as doctors, addresses, itineraries, cycles, visits, and preferences. When you connect ChatGPT, we also process the data needed to authenticate the connection, answer queries, and carry out the actions you authorize and confirm.

How we use data

We use data to authenticate your account, provide Visitta features, organize doctors and visits, answer queries and carry out actions authorized through the MCP, and maintain service security, availability, and operational improvement. We do not use your account data to create answers for another person.

Sharing and providers

We may share the minimum necessary data with providers that host the application or process authentication, maps, billing, or technical infrastructure. Those providers should process data only to provide the contracted service. We do not sell your personal data.

Retention and deletion

We retain operational data while your account is active and the service requires it. You can request correction or deletion through support. After verifying your identity, we manually delete or anonymize operational data and handle independent copies and snapshots under our control within 30 calendar days. Some records may be retained when needed for legal obligations, security, or dispute resolution; in those cases, we explain the purpose and retention period or criterion and restrict access. Better Stack logs and traces are retained for 3 days and metrics for 30 days. Operational MCP logs in Google Cloud are retained for 30 days; Render logs for up to 30 days depending on the plan. These periods start when each event is generated. Google Cloud administrative and infrastructure records have a mandatory 400-day retention period. The Neon database has a 6-hour recovery window; pre-deletion data may remain in that history during this window. Independent copies do not expire with this history and are checked individually when handling the request. We report completion and any applicable residual retention. Data already shared with ChatGPT and records held by external providers are also subject to those platforms' policies.

Your controls

You can review and update data available in your account, disconnect ChatGPT on the My account page, and request information, correction, or deletion through support. To protect the account, we may confirm your identity before fulfilling a request.

Contact

For privacy questions or requests, email [email protected].