Privacy Policy

We collect information in the following categories:

• Account information: your name, email address, password hash, account plan, and account timestamps. If you sign in with Google, we also receive your Google account identifier and verified profile details.
• Tour content: project settings, panoramic images, floorplans, logos, tour metadata, and other files you upload. Images may include camera and location metadata, including GPS coordinates, altitude, heading, and capture time.
• Billing information: Stripe processes payment-card details. We receive billing identifiers, subscription or license status, plan, and transaction-related events, but we do not store complete card numbers.
• Support information: messages, the page from which feedback was sent, and any screenshots you choose to attach.
• Email preferences: an email address you submit for a product launch notification, whether you separately opt in to marketing emails, the signup source, campaign parameters, timestamps, and the consent language shown when you opted in.
• Website and device information: browser, device, network, performance, error diagnostics, and general usage information collected through our hosting providers. On the hosted website, this also includes page paths, product events, campaign parameters, advertising click identifiers, referring pages, and an internal account identifier for signed-in users.
• Application error diagnostics: error messages, stack traces, page paths without query parameters, browser and device details, and an internal account identifier for signed-in users. Error reporting does not record sessions, pageviews, clicks, or form input.
• Hosted-tour analytics: tour opens, scene views, hotspot clicks, dwell time, device class, referrer hostname, and a random per-tab session identifier. We use an IP address and user agent to create a one-way daily visitor hash for rate limiting and aggregate counts; we do not store the source IP address in tour analytics.

We use information to:

• provide, secure, maintain, and troubleshoot the Services;
• authenticate accounts and process subscriptions and desktop licenses;
• store, optimize, render, import, export, and publish tours at your direction;
• show creators aggregate engagement analytics for their hosted tours;
• respond to support requests and improve product reliability and usability;
• understand which campaigns lead to account creation, published tours, trials, and subscriptions, and measure advertising effectiveness;
• send product notifications you request and, only when you separately opt in, product updates and promotional offers by email;
• detect fraud, abuse, security incidents, and violations of our Terms; and
• comply with legal obligations and enforce our agreements.

We do not sell your personal information, use your tour content to advertise to you, or enable personalized advertising through our website measurement tools.

360Creator uses necessary browser storage for functions such as keeping you signed in and grouping activity during a single hosted-tour visit. Google sign-in and our service providers may use cookies or similar technologies under their own policies. You can clear browser storage or control cookies through your browser, although doing so may sign you out or prevent parts of the Services from working.

On the hosted website, we use Google Analytics, PostHog, and Vercel Analytics and Speed Insights to measure page visits, product events, performance, and campaign results. We store first- and last-touch campaign details in your browser for up to 90 days and may associate them with your account and conversion events after you sign in. We do not use this measurement in exported tours or the desktop application.

The desktop application keeps projects and application data on your device. Unless you deliberately use an online feature, that local content is not uploaded to us.

We disclose information only as needed in these circumstances:

• Service providers: vendors that provide hosting, storage, database, analytics, authentication, email, customer support, and payment processing, including Vercel, PostHog, Google, and Stripe.
• At your direction: people who visit a tour you publish can view its content. Anyone with access to a self-hosted export can use the files it contains.
• Legal and safety reasons: when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or enforce our agreements.
• Business transfers: in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality protections.

We do not disclose your private tour content to other customers.

We keep account and hosted-tour information while your account is active and as needed to provide the Services. Deleting a project removes its associated hosted content and tour analytics from active systems, subject to backup, security, legal, and operational retention periods.

Raw hosted-tour events are retained for up to 90 days. Aggregate daily tour statistics may be retained longer. Billing and transaction records may be kept as required for tax, accounting, fraud prevention, and legal compliance. Feedback and support records are kept as reasonably necessary to resolve issues and improve the Services. Product-notification requests are kept until the requested notice is sent or is no longer relevant. Marketing preferences are kept until you withdraw consent or ask us to delete them, subject to a limited suppression record needed to honor opt-out requests.

Browser campaign attribution expires after up to 90 days. Account-linked campaign attribution and conversion events are kept as reasonably necessary to analyze campaign performance, prevent duplicate reporting, maintain billing records, and comply with legal obligations. You may request deletion as described below, subject to records we must keep.

You can review and change certain account and project information in 360Creator, unpublish or delete projects, export eligible tours, and cancel a hosted subscription through the billing portal. To request access, correction, deletion, or a portable copy of personal information, email support@360creator.com from the address associated with your account.

Depending on where you live, local law may give you additional rights, including the right to object to or restrict certain processing and to appeal a denied request. We may need to verify your identity before completing a request. You may also use an authorized agent where applicable law permits.

You can withdraw marketing consent at any time by emailing support@360creator.com. Marketing emails will also include an unsubscribe method. Withdrawing from marketing does not cancel a product launch notification you separately requested.

You can limit website measurement using your browser’s cookie controls, privacy settings, or content-blocking tools. You can also clear cookies and local storage in your browser.

We use administrative, technical, and organizational safeguards designed to protect information, including hashed passwords, authenticated access controls, and restricted storage access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your credentials confidential and contact us if you suspect unauthorized account access.

We and our service providers may process information in the United States and other countries. Those countries may have data-protection laws different from the laws where you live. Where required, we use recognized safeguards for international transfers.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can take appropriate action.

We may update this policy to reflect changes to the Services, our practices, or the law. We will post the revised policy here and update the effective date. If a change materially affects your rights, we will provide additional notice when required.

For privacy questions or requests, contact AboveThought LLC at support@360creator.com.