Privacy Policy

Last updated: March 21, 2026

1. Information We Collect

We collect information you provide directly to us when you create an account, upload content, or communicate with us. This may include:

  • Account information (name, email, profile picture).
  • Content you upload (360ยบ images, tour metadata, hotspots).
  • Communication history with our support team.

2. How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve our Service.
  • Process transactions and send related information.
  • Send you technical notices, updates, and support messages.
  • Respond to your comments and questions.
  • Monitor and analyze trends, usage, and activities.

3. Public Tours and Marketing

Please be aware that any virtual tour you set to "Public" is accessible to anyone. We may use these public tours, along with your company name and logo (if provided), for our own marketing and promotional activities to showcase the capabilities of Vistura.

4. Data Security & Storage (Supabase)

We use Supabase as our primary database and backend-as-a-service provider. Supabase provides a secure, scalable, and GDPR-compliant infrastructure.

  • Encryption at Rest: All data stored in our Supabase databases is encrypted at rest using AES-256 encryption.
  • Encryption in Transit: All data transferred between your browser and our servers is encrypted using TLS 1.2 or higher.
  • Data Location: Our primary database instances are hosted in secure data centers located within the European Union (EU) to ensure strict adherence to European data protection laws.
  • Row Level Security (RLS): We employ strict Row Level Security policies in Supabase, ensuring that users can only access their own data. Your virtual tours, images, and personal details are isolated from other users.

5. Payment Processing (Stripe)

We use Stripe for payment, analytics, and other business services. Stripe collects and processes personal data, including identifying information about the devices that connect to its services. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection. You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy.

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have various rights in relation to your personal data, including:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): You can request that we delete your data.
  • Right to Data Portability: You can request to receive your data in a structured, commonly used format.

To exercise any of these rights, please contact us at privacy@vistura.app or through your account settings.

7. Cookies

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

8. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.