Privacy policy

Who is responsible

Vistward is published by L'Atelier du Dev. For any question about this policy or your data, write to us at the address below.

latelierdudev.contact@gmail.com

In short

• Your messages, your contacts and your credentials never pass through us: Vistward connects directly to your providers.
• Only the Pro licence, if you enter one or start the trial, calls our licence server, which receives nothing but the key and an anonymous fingerprint of the computer.
• Your data stays on your computer and with your email provider. We have no access to it.
• No telemetry, no advertising, no resale, no training of artificial intelligence models.
• You can remove an account from Vistward and revoke its access from your Google Account at any time.
• If you connect Zoom or Google Meet to create meeting links, the same rules apply: direct connection, tokens kept on your computer, no Vistward server.

Google user data Vistward accesses

When you add a Gmail or Google Workspace account, Vistward accesses the following Google user data, and only this data:

• Your Gmail messages: their headers (sender, recipients, subject, date and message identifiers), their content (text and HTML) and their attachments. Headers are read when Vistward syncs your mailbox; the content and attachments when you open a message, search it or save an attachment.
• The state of each message in Gmail: its labels, whether it is read or starred (shown as "follow-up" in Vistward), and whether it is in the inbox, archived or in the trash.
• Your Gmail labels: their names and how they are nested.
• The drafts you save from Vistward for this account and the messages you send from it.
• Gmail's synchronisation markers (history identifiers), used only to fetch what changed since the last sync.
• Your Google Account email address and the account identifier provided by Google sign-in.
• The access and refresh tokens Google issues to Vistward, kept in your computer's secure vault.

Permissions Vistward asks Google for

To access this data, Vistward asks you, through Google's consent screen, for the following permissions. It does not access your name, photo, contacts, calendar, Drive or any other Google service:

• Full Gmail access (https://mail.google.com/): read your messages and their attachments, list and manage your labels, mark as read or for follow-up, archive, move to the trash, delete permanently when you ask, save your drafts and send the messages you write.
• Your email address (email) and account identifier (openid): recognise the account you add, show it in the app and avoid adding it twice.

How Vistward uses this data

Google data is used only to provide the email features visible in the app: showing your messages, searching them, organising them, replying to them and sending new ones. Vistward only acts on your mailbox when you ask it to (for example when you archive or delete a message) or to keep your computer in sync with Gmail.

Some features are computed on your computer from your messages: search, recipient suggestions, new mail notifications (sender and subject only) and junk filtering. These computations never leave your computer.

Where the data is kept and how it is protected

Downloaded messages are kept in a local database on your computer, separate for each installation. They are not copied to any server.

The access authorisations issued by Google are kept in the system's secure vault (the keychain on Mac, Credential Manager on Windows), limited to this computer. They never appear in a file, a log or a diagnostic.

All exchanges between Vistward and Google are encrypted in transit.

On Mac, the "Encrypt local data" option (Settings, Privacy) is on by default as soon as a Google account is added: from the next start of Vistward, the message database, its search index, attachments and drafts are encrypted with a key kept in the keychain. You can turn it off. Without this option, and on other systems, protection of data on disk relies on your computer's disk encryption (FileVault on Mac, BitLocker on Windows), which we recommend you turn on.

Sharing

Vistward does not transfer your Google data to anyone. It only travels between your computer and Google. The only exceptions are those you decide: the messages you send reach their recipients, and a remote image you choose to display is downloaded from its sender's site.

Nobody at L'Atelier du Dev reads your mail: we have no technical access to it. If you write to us for help, we only read what you send us yourself.

What Vistward never does

• Sell, rent or transfer your data to advertising platforms, data brokers or information resellers.
• Use your data for advertising, retargeting or personalised advertising.
• Use your data to determine creditworthiness or for lending purposes.
• Use your data to create, train or improve an artificial intelligence or machine learning model.
• Collect usage statistics, automatic crash reports or any other telemetry.

Retention and deletion

An account's data stays on your computer as long as the account is in Vistward. Removing the account (Settings, Accounts, "−" button) erases its messages, folders, pending operations and access authorisations from the computer; message files are erased by the automatic clean-up that follows.

Removing an account from Vistward deletes nothing in your Gmail mailbox. To revoke Vistward's access to your Google Account, open the page of third-party connections of your Google Account and remove Vistward.

• Third-party connections of your Google Account

Compliance with Google policy (Limited Use)

Vistward's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.

• Google API Services User Data Policy
• Google Workspace API User Data and Developer Policy

Zoom user data Vistward accesses

With Vistward Pro, you can create a Zoom meeting from the event editor. This only happens after you connect your Zoom account in Vistward ("Connecter Zoom"), and only for the meetings you create from Vistward. On Zoom's consent page, Vistward asks for three permissions on your Zoom account: meeting:write:meeting (create a meeting), meeting:update:meeting (update a meeting) and meeting:delete:meeting (delete a meeting). Vistward only updates or deletes the meetings it created itself. It does not read your other meetings, your recordings, your contacts, your chat, your profile or any other Zoom data.

• Sent to Zoom: the title of the event, its start time, its duration and its time zone, when you create the meeting and when you later change the time or the title. Nothing else about the event, its participants or your email is sent.
• Received from Zoom and kept: the meeting ID, the join link and the passcode. They are stored with the event in the local database on your computer, and written in the event and in the invitation you send, so that your guests can join.
• Received from Zoom and discarded: the host start link, which Vistward never keeps, shows or logs, and the rest of Zoom's answer.
• The access and refresh tokens Zoom issues to Vistward, kept in your system's secure vault (the keychain on Mac, Credential Manager on Windows, the Secret Service on Linux). They never appear in a file, a log or a diagnostic.

Zoom data: protection, sharing, retention and deletion

No Vistward server receives your Zoom data or your Zoom tokens: Vistward talks to Zoom directly from your computer, over encrypted connections (HTTPS). L'Atelier du Dev has no access to this data. It is not shared, sold, used for advertising or used to train artificial intelligence models.

Vistward deletes a Zoom meeting only when you remove its link from the event, delete or cancel the event, or close the editor without saving after creating the meeting. It never touches a meeting it did not create.

The tokens are kept until you disconnect. "Déconnecter" (Settings, Général, Réunions en ligne, Services connectés) erases them from your computer at once. Vistward has no server and no secret key, so it cannot withdraw the authorization at Zoom by itself: to do so, remove Vistward from your Zoom account in the Zoom App Marketplace (Manage, Added Apps, Vistward, Remove). After that, Vistward can no longer act on your Zoom account. The meetings already created stay in your Zoom account until you delete them there, and their IDs and links stay in your events, on your computer, until you remove the link or delete the event. We hold no Zoom data, so there is nothing to delete on our side.

• Zoom guide: adding, using and removing the app
• Zoom App Marketplace

Google Meet: a separate Google authorization

With Vistward Pro, you can also create a Google Meet link for an event. This uses a Google authorization of its own, separate from your Gmail account's, which you give with "Connecter Google pour Meet". Vistward asks for a single permission, https://www.googleapis.com/auth/meetings.space.created: create Google Meet meeting spaces, and see or change only the spaces Vistward created. Through this authorization, Vistward does not access your email address, your profile, your calendar or any other Google data.

• Sent to Google: nothing about the event, not even its title. The request that creates the space is empty.
• Received from Google and kept: the name of the space, its meeting link and its code, stored with the event on your computer and written in the event and in the invitation.
• The access and refresh tokens, kept in your system's secure vault, apart from those of your Gmail account.
• No Vistward server receives this data, and it is used only to add the meeting link you asked for. The commitments above apply to it: no sharing, no sale, no advertising, no artificial intelligence training, and the Limited Use requirements of the Google API Services User Data Policy.
• "Déconnecter" (Settings, Général, Réunions en ligne, Services connectés) erases the tokens from your computer and asks Google to revoke the authorization; if Google cannot be reached, Vistward says so, and you can remove Vistward from the third-party connections of your Google Account. Google offers no way to delete a meeting space: a space you no longer use simply stays unused.

• Third-party connections of your Google Account

Other email providers

For Microsoft accounts and other providers, Vistward applies the same rules: direct connection, data kept on your computer, no sharing. Passwords for other providers are kept in the system's secure vault and never sent over an unencrypted connection. How each provider processes your data is governed by its own privacy policy.

Pro licences and the Vistward account

The free edition contacts no server of L'Atelier du Dev. When you enter a licence key or start the Pro trial, the application sends our licence server: the key (none for a trial), a fingerprint of the computer, the system (macOS, Windows or Linux), its version and Vistward's. The fingerprint is computed on the computer from its system identifier, which it does not reveal; it limits a licence to three computers and a trial to one per computer. The application renews its licence by checking it at launch, at most once a day.

To buy or receive a licence, you create an account with an email address and a password (stored hashed). The account keeps your licences, the computers using them, your purchases and, for the licences you give out, the email address of the person receiving each one. That person is told by email.

Payment is handled by Stripe, which collects your payment details, your billing address and, where relevant, your VAT number, and issues the invoices. We never see your card number.

Service providers: Vercel (hosting of the website and the licence server, in Paris), Supabase (database of accounts and licences, hosted in the European Union), Stripe (payment and invoices) and Resend (sending the licence emails). They process this data on our behalf only.

Retention: the account and its licences as long as the account exists; a computer until you remove it; the fingerprint of a trial, to prevent a second trial on the same computer; purchases and invoices for ten years, as accounting law requires. You may ask to access or correct your data, or to delete your account, by writing to us. You may also complain to the CNIL.

Artificial intelligence

Vistward includes no artificial intelligence service. Your messages are sent to no model and no analysis service.

This website

This website loads no third-party script and uses no audience measurement tool. Your choice of light or dark theme is remembered in your browser. Only the account area sets a cookie, strictly necessary, that keeps you signed in; payment takes place on Stripe's page.

Your rights

Under the General Data Protection Regulation (GDPR) and French law, you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw a consent at any time (for Google, Microsoft or Zoom: by disconnecting in Vistward or removing Vistward from your account at the provider).

The data Vistward keeps on your computer is under your control: you can see it in the app, export it, and erase it by removing the account or the connection, or by uninstalling Vistward. For the data we hold (the Vistward account, licences and purchases), write to us: we answer within one month. You may also lodge a complaint with the CNIL (www.cnil.fr).

latelierdudev.contact@gmail.com

Changes to this policy

If we change this policy, the new version is published on this page with its date. A change in how Google data is used would only apply after your consent.

Contact us

A question, a request about your data: write to us.

latelierdudev.contact@gmail.com