Data Compliance

Last updated: June 23, 2026

1. 1. Data we process & why

   We process the minimum data needed to run the service:

   • Account (email, password hash) — to create and secure your account (legal basis: contract).
   • Listing details & property photos — to generate your video walkthroughs (contract).
   • Payment data — handled by Stripe; we store only a customer reference + subscription status (contract / legal obligation).
   • Technical & security logs — IP, browser, request logs (legitimate interest: security & reliability).

2. 2. Cookies we use

   We use a single essential cookie to keep you signed in (your authentication session). It is Secure and SameSite=Lax.

   We do not use analytics, advertising, or cross-site tracking cookies. Because the only cookie is strictly necessary to provide the service you requested, no separate cookie-consent banner is required — but you can clear it any time by logging out or clearing your browser data.

3. 3. Your rights under GDPR (EU / UK)

   If you are in the EU, EEA, or UK, you have the right to:

   • Access — get a copy of your personal data;
   • Rectification — correct inaccurate data;
   • Erasure — delete your data ("right to be forgotten");
   • Restriction & objection — limit or object to processing;
   • Portability — receive your data in a portable format;
   • Withdraw consent and lodge a complaint with your data protection authority.

4. 4. Your rights under CCPA / CPRA (California)

   If you are a California resident, you have the right to:

   • Know what personal information we collect and how we use it;
   • Delete your personal information;
   • Correct inaccurate information;
   • Opt out of sale/sharing — note we do not sell or share your personal information;
   • Non-discrimination for exercising your rights.

5. 5. How to exercise your rights

   Self-service — update your email/password in Settings, and permanently delete your account and all associated content via Settings → Delete account (this removes your listings, photos, and videos, and cancels any subscription).

   By request — for access, portability, or other requests, email [email protected]. We will verify your identity and respond within the timeframe required by law (generally 30 days under GDPR, 45 days under CCPA).

6. 6. Subprocessors & international transfers

   We share data only with the providers needed to run the service — Supabase, Stripe, muapi/Seedance (AI video generation), Trigger.dev, Resend, Railway, and Cloudflare — each acting as a processor. A full list is in our Privacy Policy.

   Our infrastructure is operated in the United States. Where data is transferred internationally, we rely on the providers' safeguards (such as Standard Contractual Clauses) for that transfer.

7. 7. Data retention

   We keep your data while your account is active. When you delete your account, we remove your listings, photos, and generated videos and cancel any active subscription. Limited records may be retained where required for legal, tax, or security purposes.

8. 8. Contact

   For any data or privacy request, contact us at [email protected]. See also our Privacy Policy and Terms of Service.