privacy policy.

effective june 19, 2026 · last updated june 19, 2026

1. Introduction

This Privacy Policy explains how Vista Origins, Inc., doing business as Accountable ("Accountable," "we," "us," or "our"), collects, uses, shares, and protects personal information when you use our websites, applications, and services (together, the "Services"). It also describes your privacy rights and how to exercise them.

By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services. This Privacy Policy is incorporated into our Terms of Service.

The Services are operated from the United States, and personal information is processed in the United States.

2. Information We Collect

a. Information you provide to us.

• Account and profile information, such as your name, email address, profile photo, business or company name, mailing address, sender display name, time zone, role (freelancer or Payer), and login credentials.
• Payment method information you choose to add, such as external payment methods (for example, Venmo, Zelle, Cash App, PayPal, or check by mailing address) and any custom payment method you create with a label and details of your choosing. This information is provided voluntarily so that Payers can pay you directly. We store it to display on your invoices, and it is provided by you and not verified by us.
• Agreement and invoice content, such as the parties, deliverables, scope of work, project descriptions, amounts, dates, payment terms, and notes you submit to create, send, or formalize agreements and invoices.
• Information about your clients and Payers that you add, such as their name, email address, company, contact name, additional (CC) email addresses, and billing address. If you provide information about another person, you represent that you have the right to do so.
• Content you forward for parsing. When you forward or upload emails or documents for our agreement and invoice features, we process that content and may store extracted data, including the sender, subject, and counterparty name and email address.
• Communications and support. Messages you send to us or through the Services, and information you provide when you contact support.

b. Information collected by our payment processor.

When you set up payments, our payment processor (Stripe) collects and processes your payment and identity information directly. Depending on your role, this may include bank account details, card information, tax identification numbers, and verification documents. Accountable generally receives only limited information from Stripe, such as account-status confirmation and transaction records, and does not store full card or bank account numbers for payment processing. See Section 5.

c. Information we collect automatically.

• Usage and device information, such as IP address, browser type, device identifiers, pages viewed, features used, and timestamps.
• Cookies and similar technologies, including local storage. See Section 7.

d. Information from third parties.

If you sign in using Google or Apple, we receive basic profile information from those services. We also receive transaction and account-status information from Stripe.

3. How We Use Information

We use personal information to:

• Provide, operate, and maintain the Services, including creating and sending agreements, invoices, and reminders, and displaying your payment methods to Payers
• Process and track payments through our payment processor
• Send service, transactional, and administrative communications related to your account and transactions
• Provide AI-assisted features such as parsing forwarded emails and documents, the chat assistant, and coaching (see Section 4)
• Respond to support requests and communicate with you
• Protect the Services and our users, including detecting, preventing, and addressing fraud, abuse, and security incidents
• Understand how the Services are used and improve them
• Comply with legal obligations and enforce our Terms

We may also use your contact information to send you product updates and marketing communications. You can opt out of marketing messages at any time, and we will continue to send you service and transactional messages necessary to operate your account.

4. AI and Automated Processing

The Services include AI-assisted features that help with onboarding, parsing forwarded emails and documents, communication, and coaching. To provide these features, relevant content you submit may be processed by a third-party AI provider under that provider's terms.

We do not use your personal information, and we do not permit our AI provider to use your personal information, to train general-purpose AI models. AI-generated output may be inaccurate or incomplete and does not constitute legal, tax, or financial advice. You are responsible for reviewing any output before relying on it.

5. How We Share Information

We do not sell your personal information. We share personal information only as described below.

a. Service providers (subprocessors).

We share information with third-party service providers that help us operate the Services, under contracts that require them to protect it and to use it only on our behalf. These providers support functions such as payment processing and fund transfers, cloud hosting and infrastructure, data storage, authentication, email delivery, AI-assisted features (as described in Section 4), and product analytics (as described in Section 7). We use Stripe as our payment processor; otherwise we do not publish the specific identities of our service providers here, and we will provide more detail on request to the extent required by applicable law.

b. Other users.

Information necessary to complete a transaction is shared with the other party. For example, a Payer receiving an invoice will see the freelancer's name, invoice details, and the payment methods and instructions the freelancer includes.

c. Legal and safety.

We may disclose information if required by law, subpoena, or legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of Accountable, our users, or the public, or to detect or prevent fraud or security issues.

d. Business transfers.

If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.

e. With your consent or at your direction.

We may share information for other purposes with your consent.

f. Aggregated or de-identified data.

We may share information that has been aggregated or de-identified so that it cannot reasonably be used to identify you.

6. We Do Not Sell or Share Your Personal Information for Advertising

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law.

7. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies for two purposes:

• Necessary and functional. We use local storage to keep you signed in and maintain your session, to remember preferences such as your theme and dismissed notices, and to support certain flows such as saving a draft invoice while you sign in. These are required for the Services to function.
• Analytics. We use a third-party product-analytics service to understand how the Services are used so that we can improve them, including page views and feature interactions associated with your account. This service stores information using cookies and local storage.

Most browsers let you control cookies through their settings, and you can clear local storage. Blocking some technologies may affect how the Services function. We do not currently respond to "Do Not Track" or Global Privacy Control browser signals.

8. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Services, and afterward as needed to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements. You may request deletion of your account information as described in Section 10.

Files and documents you upload are stored transiently and deleted automatically on a schedule: temporary uploads after about one day, extracted documents after about 90 days, and forwarded inbound emails after about 30 days. Records required for legal, tax, or financial-recordkeeping purposes, including transaction records, may be retained longer as required by law. When we no longer need personal information, we delete or de-identify it.

9. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. Payment card and bank account information used for processing is handled by Stripe, a PCI-compliant payment processor, and is not stored by us for payment-processing purposes. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

10. Your Privacy Rights

10.1 California residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it
• Delete personal information we have collected, subject to exceptions
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information (we do not sell or share personal information)
• Limit the use of sensitive personal information (we use sensitive personal information only as needed to provide the Services)
• Non-discrimination for exercising your rights

In the past 12 months, we have collected the following categories of personal information under the CCPA: identifiers (such as name, email address, and IP address); customer records (such as business information, mailing address, and payment method details you provide); commercial information (such as transaction and invoice records); internet or network activity (such as usage and analytics data); general geolocation (derived from IP address); professional or employment-related information; and, through our payment processor, financial information. We collect this information for the business purposes described in Section 3.

To exercise your rights, contact us at contact@accountable.cx. We will verify your request and respond within the timeframes required by law. You may use an authorized agent to submit a request on your behalf, subject to verification.

10.2 Residents of other US states

If you are a resident of Nevada, Colorado, Connecticut, Virginia, or Utah, you may have similar rights to access, correct, delete, and obtain a copy of your personal information, and to opt out of certain processing, depending on your state's law. To exercise these rights, contact us at contact@accountable.cx.

10.3 How to exercise your rights

Submit requests to contact@accountable.cx. We will take steps to verify your identity before fulfilling a request. We will not discriminate against you for exercising your rights. If we deny a request, you may appeal by replying to our response.

11. Children's Privacy

The Services are not directed to children, and you must be at least 18 to use them. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us at contact@accountable.cx and we will take appropriate steps to delete it.

12. International Users

The Services are operated from, and personal information is processed in, the United States, and the Services are intended for users in the United States. If you access the Services from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your location.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice, such as by email or through the Services, and, where required, obtain your consent. The "Last Updated" date at the top reflects the most recent version. Your continued use of the Services after changes take effect constitutes acceptance.

14. Contact Us

If you have questions or requests regarding this Privacy Policy or your personal information, contact us at:

Vista Origins, Inc. (doing business as Accountable)
Email: contact@accountable.cx