Privacy Policy

Generic draft — must be validated by a lawyer before publication. This text was drafted from standard templates, without a real legal review. The information in brackets (legal name, registration number, address, host) must be completed and verified before going live.

Data collected

For service users (agents, concierges, owners): identity, email, phone, professional information, billing data. For end visitors (tour guests): name, email or phone, and possibly qualification information (budget, stay dates…) voluntarily shared via a contact form during or after the tour.

Purposes

This data is used to provide the service (account management, guided tours, mini-CRM, billing), provide support, and — with appropriate consent — send service-related communications (appointment reminders, post-tour follow-ups).

Retention period

Data is kept for the duration of the contractual relationship, then archived for the period required by legal obligations (accounting, in particular), before deletion or anonymization.

Subprocessors

VistaVisit relies on the following providers to operate the service:

Supabase — Database, authentication, storage of 360° panoramas
Stripe — Payment and billing processing
LiveKit Cloud — Live video conferencing during tours
Resend — Sending transactional emails (confirmations, reminders)
Twilio / Wati — Sending WhatsApp reminders
Google Places — Address autocomplete in forms
Vercel — Application hosting

Your rights

In accordance with GDPR, you have the right to access, rectify, erase, restrict, and port your data, as well as a right to object. To exercise these rights, contact contact@vistavisit.com. You may also lodge a complaint with the CNIL (or the competent data protection authority in your country).

Cookies

The website only uses cookies strictly necessary for the service to function (authentication session). No advertising or third-party tracking cookies are currently used.