How we protect your data

Built-in protection

• Individual sign-in. Each person signs in with their own account.
• Access you control. Owners decide who joins and exactly what each person can see and do. Permissions are enforced on our servers, not just in the app.
• Encryption. Connections to VistaCrew cloud services and payment pages are encrypted. Google encrypts stored database records by default. See Google’s Firestore documentation. Email and exported files use the security controls of your chosen app or destination.
• Secure cloud infrastructure. Your workplace records are stored in Google Cloud Firestore.
• Protected on the phone. Data saved for offline use stays in the app's protected storage, and changes made offline sync safely when you reconnect.
• A record of changes. The Activity Log shows who changed what, and when.

Your records stay yours

Your organization owns and controls the records it enters. Archive former employees to preserve their history. Each signed-in user can delete their own login in the app. Workplace records stay with a company that remains in use. Company deletion removes workplace records, and customers can also ask support to delete records after identity and authority checks. Records required by law may remain.

What we never do

• We never sell your information.
• We do not use personal information for third-party advertising.
• We do not track users across other companies' apps or websites.

Service providers

We use service providers for hosting, data storage, notifications, payments, email, diagnostics, and limited product analytics. Our Privacy Policy names these providers and describes how they handle information. For questions, email support@vistacrew.app.

Report a security issue

Email support@vistacrew.app with "Security" in the subject line. We treat security reports as a top priority. Please give us a chance to fix the problem before sharing details publicly.

More detail is in our Privacy Policy.