PandaTour 360Privacy Policy
Last updated 2 August 2026. This policy explains what PandaTour 360 collects, why, who else sees it, and how to have it removed. It covers the PandaTour 360 website, the editor and every published tour. Using the service is also subject to our Terms of Use.
Who we are
PandaTour 360 is run under the name PandaTour360 from Poland. We are the controller of the data described in this policy. There is no support desk to route you through: for anything in it — including requests to see, correct or delete your data — write to info@pandatour360.com and a person answers.
Two roles
For the people who hold a PandaTour 360 account, we decide what is collected and why. We are the data controller, and this policy is the whole answer.
For the people who send an enquiry through a published tour, we do not decide anything. The tour owner does. We store the enquiry and show it to them; they choose what to do with it. In that relationship they are the controller and we act on their instructions.
If you sent an enquiry and want it removed, the fastest route is the business whose tour you were looking at. Write to us as well and we will pass it on and act on their instruction.
What PandaTour 360 does
PandaTour 360 turns 360° photographs into a virtual tour you can send as a link or embed in your own site. You upload panoramas, join them with hotspots, add a floor plan and a logo, and publish. Visitors open the tour in a browser, with no account and nothing to install. Paid plans add lead capture and analytics; the plans themselves are described on the pricing page.
If you publish tours, some duties are yours
A published tour can collect names, email addresses and phone numbers from your visitors. That data is yours, and so are the duties that come with it: telling visitors who you are, having a lawful reason to contact them, answering their requests, and keeping what you collect no longer than you need it.
PandaTour 360 gives you the tools and the storage, but it cannot carry those duties for you. Note that the ?leads=0 link parameter hides the enquiry form from visitors — it is link presentation, not a server-side block. If you need the form truly switched off for a tour, ask us.
Information we collect
What we do not collect
- Card numbers, bank details or anything else that identifies a payment instrument. Stripe handles those and we never see them.
- Your location, GPS coordinates or device contacts.
- Data bought from brokers, scraped from elsewhere, or received from advertising networks.
- Special categories of data — health, beliefs, biometrics — which we neither ask for nor want.
We do not sell or rent what we hold, and we do not use it to train machine-learning models.
What we do collect
Account data
Name, email address, hashed password or Google account identifier
To create and run your account, sign you in, and contact you about the service.
Legal basis: Performance of a contract
Tour content
Panoramas and their previews, floor plans, logos, scene and hotspot titles, descriptions
To store and publish the tours you build. Files sit in private storage and are served through short-lived signed links.
Legal basis: Performance of a contract
Enquiries from tour visitors
Name, email address, phone number, message
To pass an enquiry to the owner of the tour it was sent from. For this data we act on the tour owner's behalf — see “Two roles” above.
Legal basis: Legitimate interest of the tour owner
Messages from the contact form
Name, email address, company, message
To answer what you asked us.
Legal basis: Legitimate interest
Payment data
Stripe customer and subscription identifiers, plan, status, renewal date
To run your subscription and show you its state. Card numbers never reach us — Stripe collects and stores them.
Legal basis: Performance of a contract
Abuse prevention
A one-way fingerprint of your IP address — the address itself is never written down
To stop automated flooding of the enquiry and contact forms and of the sign-in page. The fingerprint is hashed with a secret, so it cannot be turned back into an address, and it is discarded within the hour.
Legal basis: Legitimate interest
Usage data
A view count per tour, incremented once per browser session; aggregate page views on this marketing site and in the app
To show tour owners how often a tour was opened, to see which pages of the site people read, and which parts of the app they use.
Legal basis: Legitimate interest
How we use your information
- To run the service — storing your panoramas, rendering tours, serving the links you share.
- To run your account — signing you in, showing your plan, sending service email such as password resets and billing notices.
- To take payment — running your subscription through Stripe and keeping the records tax law requires.
- To keep it working — diagnosing faults, blocking automated abuse, protecting accounts.
- To improve it — from aggregate counts of what gets used, never from reading your tour content.
- To answer you — replying to the contact form and to support email.
- To comply with the law — where a legal obligation or a valid order leaves us no choice.
We do not profile you for advertising, we do not run behavioural ads anywhere in PandaTour 360, and we do not make decisions about you by automated means.
Cookies and browser storage
We set no advertising cookies, no advertising pixels and no cross-site trackers. There is no Google Analytics anywhere in PandaTour 360. What we do use is limited to making the product work:
| What | Kind | Why | How to refuse |
|---|---|---|---|
| Supabase session | Cookie | Keeps you signed in between page loads. | Strictly necessary — refusing it means no account. Sign out, or clear cookies for the site. |
| View-counted flag | Session storage | One flag in a tour visitor's browser so a single visit is counted once. It never leaves the browser. | Disappears when the tab closes; clear site data to remove it sooner. |
| Editor layout | Local storage | Remembers how you arranged the scene graph in the editor. Yours, local, never sent to us. | Clear site data for the app; the editor falls back to its default layout. |
On this marketing site and in the signed-in app we also use Vercel Analytics to count page views and measure performance. It is cookieless: no personal profiles, no cross-site tracking, and the counts are not tied to your account. Published tours do not load this script at all — the only thing counted there is the per-tour view total their owner sees.
Fonts are served from our own domain, so no request goes to Google when a page loads.
Third-party data processors
Only the services we need to run PandaTour 360. Each one processes data on our instructions under a contract, and none of them gets it for their own purposes.
| Service | What it does | Their policy |
|---|---|---|
| Supabase | Database, authentication and file storage. Hosts everything in §3. | Privacy policy |
| Stripe | Subscription payments. Collects and stores card details directly; we never see them. | Privacy policy |
| Optional sign-in. Used only if you choose “Continue with Google”, and only for your name, email address and account identifier. | Privacy policy | |
| Vercel | Application hosting and privacy-friendly analytics on this marketing site and in the app. Processes requests and keeps short-lived server logs. | Privacy policy |
Beyond these, we disclose data only where the law requires it, and to a buyer if the business is ever sold — in which case this policy travels with it and you will be told before anything changes.
Data retention
| Data | Kept for |
|---|---|
| Account data | For as long as the account exists. Deleting the account removes it. |
| Tour content | For as long as the tour exists. Delete a tour and its scenes, hotspots and enquiries go with it. |
| Enquiries | Until the tour owner deletes them or deletes the tour. |
| Payment records | As long as tax and accounting law requires, even after an account closes. |
| Contact-form messages | While we deal with what you asked, then removed. |
| Abuse-prevention fingerprints | At most one hour, then deleted automatically. |
| Server logs | Kept briefly by our host for operations and security. |
When a retention period ends, data is deleted from the live systems. Backups roll over on their own schedule, so a copy can survive a short while after deletion; it is not restored into the service.
Your rights
If you are in the EEA or the UK (GDPR)
You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. Where we rely on legitimate interest, you can object and we will stop unless we have grounds that override yours. You can also complain to the data protection authority where you live, or to the Polish one — the President of the Personal Data Protection Office (UODO) — since that is where we are established.
If you are in California (CCPA/CPRA)
You can ask what categories of personal information we collect and why, ask for a copy, ask us to correct or delete it, and not be treated worse for asking. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of.
How to exercise them
Some of it you can do yourself: if you signed up with a password you can change your name and password in profile settings, and Stripe’s billing portal shows and manages everything about your subscription. For anything else write to info@pandatour360.com from the address on the account and we will answer within one month.
International data transfers
The database and the panorama files live in the European Union. Payments run through Stripe and sign-in through Google, both of which may process data outside the EU. Where that happens, the transfer relies on the safeguards those companies publish — Standard Contractual Clauses and equivalent mechanisms — described in the policies linked in §6.
Children
PandaTour 360 is a tool for businesses and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has sent us data, write to info@pandatour360.com and we will delete it.
Security
Traffic runs over HTTPS. Passwords are hashed by Supabase and never stored in readable form. Every table is protected by row-level security, so one account cannot read another’s tours, scenes or enquiries. Panorama files sit in a private bucket and are reachable only through links that expire. Card data never touches our servers: Stripe collects it directly under its PCI compliance.
No system is perfect, and we will not pretend otherwise. If a breach ever puts your data at risk we will tell you and the relevant authority as the law requires.
Changes to this policy
When this policy changes we update the date at the top, and for anything material we tell account holders by email before it takes effect. Continuing to use PandaTour 360 after a change means the current version applies to you. This policy is governed by the law of Poland, and by the GDPR as it applies there.
Contact
Questions about a specific tour belong with the business that published it. Everything else — privacy questions, requests about your data, complaints — goes to info@pandatour360.com, and we answer within one month. See also our contact page and our Terms of Use.