Delete your account & data

This page explains how to request deletion of your data from Vistra, the field-reporting app developed by Shining Technologies. It applies to data held for the Vistra mobile apps and web app.

Automatic deletion: even if you never submit a request, if your account is inactive for 90 consecutive days, your account and associated data are automatically and permanently deleted. You don't need to do anything — the steps below are for when you want your data removed sooner.

How to request deletion

Choose either option — both reach the same team:

1. Use the form below — enter the email address associated with your Vistra account and submit.
2. Or email us at hello@vistra.report with the subject “Data deletion request”, from the email address on your account.

We will reply to verify the request is genuinely yours (to protect your account), then permanently delete your data. Requests are actioned within 30 days of verification.

What data is deleted

When your request is processed, we permanently delete the personal data associated with your account, including:

• Your account profile (name, email, and authentication credentials).
• Your reports and their content — text, photos, image annotations, captions, and locations.
• Your businesses, branding (logos, colours), folders, tags, and templates.
• Shares, share links, invites, and comments you created.
• Report version history and AI suggestion history.
• In-app notifications and registered device push tokens.
• Sessions, login records, and device/usage metadata tied to your account.

What we keep, and for how long

A limited amount of data is retained only where the law requires it or to protect against fraud and abuse. It is not used for any other purpose and is deleted when the retention period ends:

• Billing & transaction records — retained for up to 7 years to meet Australian tax and financial record-keeping obligations.
• Security & abuse logs — minimal records (e.g. IP addresses tied to security events) retained for up to 12 months, then deleted or anonymised.
• Backups — residual copies in encrypted backups are purged on our rolling backup cycle, within 90 days.

Once these periods elapse, the remaining data is permanently removed. The same deletion applies automatically after 90 consecutive days of account inactivity. If you have questions about a request, contact hello@vistra.report.