Privacy Policy

Last Updated: May 2, 2026 1. INTRODUCTION Viser Inc. ("Viser," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Platform"). 2. INFORMATION WE COLLECT Personal Information You Provide: • Account information: name, email address, phone number, profile photo • Professional information (Advisors): headline, bio, expertise, credentials, LinkedIn URL • Payment information: processed securely through Stripe (we do not store full card numbers) • Session content: booking details, session notes, ratings, and reviews • Communications: messages sent through the Platform Information Collected Automatically: • Device information: device type, operating system, unique device identifiers • Usage data: pages viewed, features used, session duration, interaction patterns • Location data: approximate location based on IP address • Push notification tokens (with your permission) • Crash and performance data: error reports, diagnostic logs (via Sentry — not linked to your identity) Third-Party Services Used: • Video calls: Daily.co (session video/audio is not recorded or stored by Viser) • Payments: Stripe Connect (payment details processed and stored by Stripe) • Push notifications: Apple APNs / Google FCM • Error monitoring: Sentry (crash data only) • Calendar integration: Google Calendar API (Advisors only — see Section 2a below) 2a. GOOGLE CALENDAR INTEGRATION (ADVISORS ONLY) Advisors may optionally connect their Google Calendar to Viser. When an Advisor connects Google Calendar: What we access: Viser requests read-only access to the Advisor's Google Calendar events (OAuth scope: https://www.googleapis.com/auth/calendar.readonly). We read event titles, start times, and end times for events occurring in the next 60 days. Why we access it: We use this data solely to create unavailability blocks on the Advisor's Viser schedule — preventing Seekers from booking time slots that conflict with existing calendar events. This is a direct, user-facing feature requested by the Advisor. What we store: We store an OAuth refresh token (encrypted at rest in our database) that allows us to fetch updated calendar data when the Advisor requests a sync. We do not store full event details permanently — only the start and end times needed to create unavailability blocks on Viser. What we do NOT do: • We do not share Google Calendar data with any third parties • We do not use Google Calendar data for advertising or marketing • We do not allow any Viser employees or contractors to read your calendar event content • We do not use Google Calendar data for any purpose other than blocking your Viser availability • We do not access calendars other than your primary Google Calendar Revoking access: Advisors can disconnect Google Calendar at any time from the Availability page (Settings → Availability → Calendar sync → Disconnect). This immediately deletes the stored OAuth token from our systems. You can also revoke access directly at https://myaccount.google.com/permissions. Google API Services User Data Policy: Viser's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. See https://developers.google.com/terms/api-services-user-data-policy. 3. HOW WE USE YOUR INFORMATION We use collected information to: • Create and manage your account • Facilitate bookings and Sessions between Seekers and Advisors • Process payments and payouts through Stripe Connect • Send session reminders, booking confirmations, and platform notifications • Improve and personalize the Platform experience • Ensure platform safety and prevent fraud • Comply with legal obligations • For Advisors who opt in: sync external calendar events to prevent booking conflicts (see Section 2a) 4. HOW WE SHARE YOUR INFORMATION We may share your information with: • Other Users: Your profile information is visible to other Users as needed for the Platform's functionality • Payment Processors: Stripe processes all payments • Service Providers: Third-party services that help us operate the Platform • Legal Requirements: We may disclose information if required by law We do not sell your personal information to third parties. Google Calendar data (Section 2a) is never shared with any third party. 5. DATA SECURITY We implement industry-standard security measures including encryption in transit (TLS/SSL), encrypted storage, and access controls. OAuth tokens obtained via Google Calendar integration are stored encrypted at rest and accessed only by our server-side systems. 6. DATA RETENTION We retain your information for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data as required by law for up to 3 years. Google OAuth refresh tokens are deleted immediately upon disconnection or account deletion. 7. YOUR RIGHTS AND CHOICES You have the right to: • Access: Request a copy of your personal data • Correction: Update inaccurate or incomplete information • Deletion: Request deletion of your account and personal data • Portability: Request your data in a portable format • Opt-out: Unsubscribe from marketing communications • Revoke calendar access: Disconnect Google Calendar at any time (see Section 2a) To exercise these rights, contact us at legal@getviser.co. 8. CHILDREN'S PRIVACY The Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children. 9. CALIFORNIA PRIVACY RIGHTS (CCPA) California residents have additional rights under the California Consumer Privacy Act. We do not sell personal information. 10. CHANGES TO THIS POLICY We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. 11. CONTACT US For questions about this Privacy Policy: Viser Inc. Email: legal@getviser.co