Privacy Policy

1. Information We Collect

Account Information

When you register, we collect your email address and any display name you choose. This is stored securely by Supabase, our authentication and database provider.

Tour Content

When you upload panoramic images and build tours, those files are stored in Cloudflare R2 object storage. Tour metadata — scene names, hotspot data, navigation settings — is stored in our database.

Payment Information

Payments are processed by Stripe. We never receive or store your full credit card number. Stripe securely transmits a customer identifier and subscription status to us only.

Usage Information

We may collect basic, non-identifiable usage metrics (pages visited, features used) to help us improve the product. This data is not linked to individual users.

Support Communications

If you contact us or submit a support question, we retain that communication to assist you and improve our documentation.

2. How We Use Your Information

• To create and maintain your account
• To store and serve your virtual tour content
• To process subscription payments and send billing receipts
• To send transactional emails (email confirmation, password reset)
• To respond to support requests
• To improve and develop new features

We do not use your data for advertising and we do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

We rely on the following trusted providers to operate this service:

• Supabase — Authentication, database, and row-level security (supabase.com)
• Stripe — Subscription and payment processing (stripe.com)
• Cloudflare — CDN, object storage (R2), and serverless Worker functions (cloudflare.com)

Each provider has their own privacy policy and processes your data only as necessary to provide their services to us.

4. Data Retention

• Account data is retained until you delete your account.
• Tour files and metadata are retained while your account is active. Published tours on the Free plan are removed after 3 days; your editor data remains.
• Payment records are retained as required by applicable financial regulations (typically 7 years).

You may request deletion of your account and all associated data at any time by contacting us at the address below.

5. Your Rights

Depending on your jurisdiction, you may have rights under GDPR (EU/EEA) or CCPA (California), including:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information
• Deletion: Request erasure of your personal data
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain processing activities

To exercise any of these rights, email us at vantage360support@gmail.com. We will respond within 30 days.

6. Cookies & Local Storage

We use essential cookies and browser local storage to keep you signed in and remember preferences such as theme and editor settings. We do not use advertising or cross-site tracking cookies.

7. Security

All data in transit is encrypted with HTTPS/TLS. Database access is secured via Supabase's row-level security policies. Cloudflare's infrastructure provides additional DDoS protection and edge security.

8. Children's Privacy

Vantage 360 Tours is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the revised policy on this page with an updated date. Continued use of the service after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions or data requests: