How Vestari handles your data.

Your comps live in your vault.

Every comp Vestari pulls from your WhatsApp lands in your encrypted database row — tied to your account, keyed by your user ID. Nobody else on Vestari can see it. Not other dealers, not our staff during normal operation. It’s your archive.

How dealer network benchmarks actually work.

By default your WhatsApp comps join an anonymized benchmark pool that other Vestari dealers can search under “Network benchmarks.” When another dealer finds one of yours they see the price, brand, reference, dial, kit, and photo. They do not see your name, your phone number, your WhatsApp handle, your group name, or a way to contact you. That’s the trade: your identity stays private, your prices help calibrate the market.

You can turn contribution off at any time in Settings. Flip the toggle and no new comps go into the pool from that moment on. Existing pool contributions stay until you delete your account, which wipes every comp we hold on you.

We do not sell your data. We do not syndicate to a public feed. Only signed-in Vestari dealers can search the benchmark pool, and identity is stripped every time.

We only see what you see.

Vestari links to WhatsApp the same way WhatsApp Web does — read only, with your explicit scan of the QR. We index the groups you flip on. Family threads and DMs stay off. If you leave a group, new messages stop flowing.

What we store, exactly.

• — Parsed comp fields: brand, reference, model, dial color, case size, case material, kit, condition, price, currency, group name, timestamp.
• — The raw message body (encrypted at rest, AES-256-GCM) so free-text search works — “wimbledon,” “tropical,” “b&p 2019,” whatever you type.
• — The sender name and phone number of the dealer who posted the comp, encrypted at rest. You see them on your own comps so you can DM back. Other dealers never see them.
• — The photo, when present, so you can see the piece.

The WhatsApp bridge only pulls from groups you toggled on. To stay linked, WhatsApp’s protocol requires our worker to hold your session keys and enough contact metadata to authenticate your device — that metadata stays on the worker and is never exposed to other dealers or used for anything else.

Encryption, in one paragraph.

At rest: AES-256-GCM on the sensitive fields (dealer names, phone numbers, locations, and raw message bodies). In transit: TLS 1.3. Hosted on US infrastructure that’s SOC 2 Type II certified (Vercel for the app, Turso for the database). Vestari itself is a young company and does not yet hold its own SOC 2 report — we are transparent about that.

Delete your account, anytime.

One button in Settings wipes your account, every comp we hold on you (including your past contributions to the benchmark pool), your saved alerts, your Add-to-Inventory list, and your WhatsApp bridge. We don’t retain shadow copies. If you delete it, it’s gone. CSV export is on our roadmap and not shipped yet — if you need a copy of your archive before deleting, email legal@lumetrade.app and we’ll get it to you.

Read-only. Always.

Vestari cannot send messages, react, forward, or open your personal chats. Ever. The bridge is one direction: WhatsApp → your vault. Nothing goes the other way.