Privacy
Privacy policy
VIRTAVUE lets real-estate agencies and showrooms share immersive tours with their clients through links that expire. This page explains what information we handle while we do that, why we handle it, and the choices you have.
Last updated
Who this policy covers
This policy applies to the VIRTAVUE website and application, and to the public pages a business opens when it sends you a VIRTAVUE link. In this policy, "we" means VIRTAVUE.
There are three groups of people it covers:
- Account holders: people who sign up and work inside a VIRTAVUE workspace, such as agency owners, brokers, staff and showroom owners.
- Clients of those businesses: people whose details a business records in its own workspace, for example as a buyer, tenant or lead.
- Link visitors: anyone who opens a property or showroom tour through a link a business sent. Visitors never need an account.
Who is responsible for your information
For account information, such as your name, e-mail address and sign-in activity, we decide how that information is used and we are responsible for it.
A business decides what it records about its own clients, properties, agreements, invoices and products. It enters that information into its workspace, and we store and process it on the business's behalf and under its instructions. If you are a client of a business that uses VIRTAVUE, contact that business first about your information. We will help it respond.
What we collect
When you create or use an account, we collect:
- Your name, e-mail address and password. We never store the password itself; we store only a one-way hash of it.
- The workspace you belong to, your role in it and the permissions that role grants.
- Your acceptance of our terms and this policy at sign-up, and the date you gave it.
- Security records for important actions in a workspace, which can include the time, the action, your IP address and your browser type.
A business can put these into its own workspace:
- Listings, prices, addresses and descriptions of properties.
- Photos, 360° images and videos, floor plans, 3D models and documents.
- Client records: names, phone numbers, e-mail addresses, notes, interests, follow-ups and interaction history.
- Agreements, invoices and payment records that the business manages for its own clients.
- Showroom catalogues, including products, colours, sizes, prices, availability and a business WhatsApp number.
When you open a shared link as a visitor, we record that the link was opened and roughly how many separate browser sessions opened it. We do not store your raw IP address or your full browser identifier. To detect abuse, we may keep a scrambled code. That code is different for each link, changes every day and is deleted within 30 days. It cannot be used to follow you across links or businesses.
How we use information
- To provide the service: running workspaces, showing tours, creating and expiring links, and sending the e-mails the service depends on, such as account verification and password resets.
- To keep accounts and data secure: sign-in protection, rate limits, malware scanning of uploads and security records.
- To show a business how its own links perform. This covers how often a link was opened, roughly how many sessions opened it and whether it was reshared from the tour page.
- To manage your subscription: the plan your workspace is on and its limits.
- To meet legal obligations and to resolve disputes.
We do not sell personal information. We do not use it for advertising, and we do not build profiles of link visitors. When a link was sent to a named client, a business may see that the link was opened. It is never told that the named person was the one who opened it, because a link can be forwarded.
Shared links and tours
- Every link expires exactly 24 hours after it is created. A business can revoke a link before that, and it stops working at once.
- A link shows only the information approved for public display: for a property, its city or district but never the street, building or exact location, and none of the business's internal notes, client details or agent contact information.
- If a property is unpublished, archived or taken off the market, every link to it stops working on the next request.
- Anyone who has a link can open it until it expires, so share links only with people you intend to see them.
Showroom visits
When you browse a showroom tour, the items you choose stay only in your browser's memory. They are never saved to our servers and they disappear when you refresh or close the page.
If you create a PDF of your selection, it is created on your own device. If you then send it to the showroom through WhatsApp, the message goes through WhatsApp under its own terms and privacy policy, and we do not receive a copy.
Photos, videos and files
Uploaded files are stored privately. They are shown to people only through short-lived links, created after we have checked that the viewer is allowed to see the file. Uploaded files are checked for malware before they are accepted.
When we create versions of an image for display, such as resized copies, thumbnails and watermarked copies, we remove embedded metadata, including any GPS location recorded by the camera. Original files stay private to the workspace that uploaded them.
Payments
We do not take card payments through the website, and we never store card numbers or security codes. Subscriptions are paid outside the platform, and a plan is activated once payment is confirmed. Invoices and payment records that a business keeps for its own clients belong to that business's workspace.
How long we keep information
- Account information is kept while your account is active and for a reasonable period afterwards, for security and legal reasons.
- Workspace content is kept until the business deletes it or closes its workspace. A business can also permanently anonymise a client it has deleted.
- Detailed link-visit records are kept for 30 days after the link expires. Totals may be kept for longer.
- Deleted files stop being available immediately and are permanently removed after seven days.
- Security records are kept according to our audit-retention practice.
How we protect information
Every workspace is kept separate from every other. Access inside a workspace follows the roles and permissions the business assigns, and those rules are checked on our servers every time, not only in the page you see. Passwords are hashed, link secrets are stored only in scrambled form, and connections are encrypted.
No system is perfectly secure. If we become aware of a breach that affects your information, we will notify the people and authorities we are required to notify.
Your choices and rights
Depending on where you live, you may have the right to ask us to show you, correct, delete or stop using the personal information we hold about you, or to receive a copy of it. You can update most account details yourself inside the application.
If a business holds your information as one of its clients, send your request to that business first. It controls that information, and we will support it in responding.
Children
VIRTAVUE is a business tool and is not intended for anyone under 18. We do not knowingly create accounts for children.
Changes to this policy
We may update this policy as the service changes. When we do, we will change the date at the top of this page. If a change is significant, we will let account holders know before it takes effect.
Contact us
If you have a question about this policy or about your information, use the contact page.