Privacy Policy

Vistra (“Vistra”, “we”, “us”, “our”), operated by [Vistra Pty Ltd] [ABN], is committed to protecting your privacy. This policy explains how we handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

Information we collect

• Account information — your name, email address, and password (stored hashed).
• Business & report content — businesses, branding, templates, reports, items, and images you create.
• Usage & device data — IP address, browser and device type, and pages visited, used for security and analytics.
• Communications — messages you send us via the contact form or email.

How we use your information

• To provide, maintain, and improve the Vistra service.
• To authenticate you and keep your account secure.
• To send service communications such as verification, sharing, and invite emails.
• To detect, prevent, and respond to fraud, abuse, and security incidents.
• To comply with our legal obligations.

Disclosure

We do not sell your personal information. We may disclose information to trusted service providers (for example hosting, email delivery, and analytics) who process it on our behalf under confidentiality obligations, and where required by law.

Storage and security

We take reasonable steps to protect your information using access controls, encryption in transit, audit logging, and soft-deletion. No method of transmission or storage is completely secure, but we work to protect your data and limit access to it.

Your rights

You may request access to, or correction of, the personal information we hold about you. To do so, contact us using the details below. You may also request deletion of your account, subject to legal retention obligations.

Cookies

We use cookies and similar technologies as described in our Cookie Policy.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.