Last updated 31 August 2026

Privacy policy

Vista360 is an inspection-first property marketplace in Abuja, Nigeria. To inspect, verify and list a property — and to answer an enquiry about one — we have to hold some personal information. This page explains exactly what we hold, why, how long we keep it and how you can have it corrected or removed.

What we collect and why

Inspection invitations

What it is: Your name, phone number, WhatsApp number, email address, your relationship to the property, the property address, asking price and any description you give us.
Why we need it: So a Vista360 coordinator can contact you, schedule the physical inspection and prepare the property record.
How long we keep it: Kept while the property is in our pipeline or listed with us, and afterwards as part of our business record of the inspection.

Photographs and documents you upload

What it is: Photographs of the property and ownership or title paperwork you choose to send us with an invitation.
Why we need it: To verify the property before it can be published, and to record what was checked.
How long we keep it: Stored in private storage. They are never publicly readable, and are only opened by Vista360 staff who need them for verification.

Enquiries and viewing requests

What it is: Your name, phone number, email address and the message you send about a property.
Why we need it: So we can answer you and arrange a viewing.
How long we keep it: Kept as part of the enquiry record for the property.

Account details

What it is: Your email address, your name if you give it, and which sign-in method you used (email, Google, Apple or Microsoft).
Why we need it: To create and secure your account, your saved properties and your notifications.
How long we keep it: Kept while your account exists.

Security records

What it is: Sign-in attempts, two-step verification events, the IP address and browser description at the time.
Why we need it: To detect account attacks and to protect staff tools and customer data.
How long we keep it: IP address and browser description are automatically erased from security events after 90 days; the remaining event record is kept for up to 180 days.

Abuse protection counters

What it is: A one-way fingerprint of the requesting network — never a stored IP address — with a count of requests.
Why we need it: To stop spam and automated abuse of our enquiry and upload forms.
How long we keep it: Automatically deleted after 3 days.

360° tour interaction

What it is: Which scenes and points inside a virtual tour were opened, with no account identity.
Why we need it: To improve the tours themselves.
How long we keep it: Kept in aggregate; it is not linked to your name or contact details.

How we protect it

Photographs and documents are held in private storage. They are never publicly readable and are opened through short-lived, single-purpose links.
Access is enforced in the database itself, not just in the website. Each person only reaches the records their role requires.
Staff with access to customer records must pass two-step verification on every session before internal tools open.
Sensitive changes are recorded in an internal audit trail, and privileged deletions require dependency checks and explicit authorisation.

Who we share it with

We do not sell your personal information, and we do not pass your contact details to other agents or advertisers. We share only what is necessary with the service providers that run this platform on our behalf — hosting, the database and storage that hold the records, and email delivery — and with a Vista360 inspector or media specialist assigned to your property. We disclose information to a lawful authority only where we are legally required to.

Public property pages show only the property. They never show the exact private address before an arranged viewing, internal review notes, uploaded documents, or the contact details of the person who invited us.

Cookies and similar storage

We use only what the site needs to work: a sign-in session so you stay logged in and your saved properties and notifications load, and short-lived technical values that protect our forms from abuse. We do not run advertising or cross-site tracking cookies. Clearing your browser storage signs you out.

Your rights

Ask for a copy of your data

We will confirm what we hold about you and provide a copy of it.

Correct something that is wrong

If a phone number, address or property fact we hold is inaccurate, tell us and we will correct it.

Ask us to delete your data

We will delete what we are not required to keep as a record of a completed inspection, transaction or a legal obligation, and tell you plainly what we kept and why.

Withdraw an invitation

If you invited Vista360 to a property and change your mind, tell us and we will stop the process. A property is never published without a verified inspection and internal approval.

Object or complain

You can object to how we handle your data, and you may also complain to the Nigeria Data Protection Commission.

Make a data request Read the terms of use

Contact us about privacy

Use the contact details on our home page to reach the Vista360 team. If you are not satisfied with our response you may complain to the Nigeria Data Protection Commission.

If we change this policy we will update the date at the top of this page.