Privacy Policy

Last updated 13 October 2026

This policy explains what personal information PanoFox ("we", "us") collects when you use panofox.com, the PanoFox web app, the PanoFox Capture iPhone app and published tours, why we collect it, who processes it for us, and the choices you have. Questions: privacy@panofox.com.

1. Who is responsible

For account and billing information, PanoFox is the controller. For the content our customers capture and publish (photos, panoramas, tours, and anything visible in them), the customer is the controller and PanoFox processes it on the customer's behalf, under the customer's instructions and our Terms of Service. If you appear in, or own a space shown in, a customer's tour, contact that customer first; we will help them respond.

2. What we collect

Account details: your name, work email, company or team name, mobile phone number and password (stored only as a one-way hash). If you sign in with Google, we receive your name, email address and Google account identifier.
Communication choices: whether you agreed to marketing email and to text messages, the exact wording you were shown, when, and the IP address and browser you used, so that we can prove your choice.
Content you capture and upload: photos, video frames, depth data from the iPhone's LiDAR scanner, capture metadata (such as camera settings and orientation), property and project details, notes, and the panoramas, tours and AI-staged images made from them.
Billing information: plan, subscription status and invoices. Card details are entered on Stripe's pages and processed by Stripe; we never see or store full card numbers.
Technical information: IP address, browser and device type, and request logs, used to run and secure the service. Paired iPhones get a device token so they can upload.
Support messages you send us.

Visitors who only view a published tour or the public site are not asked for personal information. We do not use advertising or analytics trackers, and the site loads no third-party scripts, fonts or tracking pixels.

3. Why we use it

To provide the service you signed up for: create your account, process captures into tours, host and publish them, and support you (performance of our contract with you).
To keep the service secure and working: sign-in protection, rate limits, fraud and abuse prevention, backups and troubleshooting (our legitimate interests).
To bill you and meet tax and accounting obligations (contract and legal obligation).
To send account, security and billing emails, which are part of the service.
To send marketing email or text messages, only if you opted in (consent). You can withdraw consent at any time; see the Messaging terms.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use your content to train AI models. AI staging runs on our own software, on machines we operate or rent; your images are not sent to third-party AI services.

4. Who processes it for us

We use a small number of service providers, each only for the purpose listed:

DigitalOcean (United States): servers and storage that host the service and your data.
Stripe: subscription billing and payments.
Google: only if you choose to sign in with Google.
Our text message delivery provider: only if you opted in to texts, and only to send them.
Compute providers: we may process captures and staging on rented machines. They receive only the files needed for a job, for the duration of the job.

We may also disclose information when required by law, to protect the rights and safety of our users or the public, or as part of a merger or sale of the business, in which case this policy continues to apply.

5. Mobile numbers and text messaging

We do not sell, rent or share your mobile number or your text message opt-in with third parties or affiliates for their marketing purposes. Text messaging opt-in data and consent are not shared with any third party, except our delivery provider for the sole purpose of sending the messages you asked for.

6. Cookies

The web app sets two strictly necessary cookies after you sign in: a session cookie that keeps you signed in, and a security cookie that protects your actions against cross-site request forgery. A short-lived cookie is also used during Google sign-in. We do not use advertising or analytics cookies, so there is nothing to opt out of.

7. Security

Data is encrypted in transit (HTTPS). Each customer's files are encrypted at rest with that customer's own key. Databases and storage are not reachable from the internet. Passwords are stored as one-way hashes. Access by our staff is limited, requires multi-factor authentication for administrators, and is logged. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach as the law requires.

8. How long we keep it

Account and content data: for as long as the account is active.
When an account is deleted, there is a 30-day grace period in which it can be restored. After that, its data and files are purged and its encryption keys are destroyed, which makes any remaining encrypted copies, including those in backups, unreadable. Backups expire on a rolling schedule.
Consent records: for as long as we may need to prove a choice, and at least as long as we rely on it.
Billing records: as long as tax and accounting law requires.
Server logs: for a limited period, for security and troubleshooting.

9. Your rights

Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you may have the right to access your personal information, correct it, delete it, receive a copy in a portable format, object to or restrict certain uses, and withdraw consent. Account Owners can export their organization's data. To make a request, email privacy@panofox.com; we will verify your identity and respond within the time the law requires. We will not treat you differently for exercising your rights. You may also complain to your local data protection authority.

10. International transfers

The service is hosted in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States. Where the law requires, we rely on appropriate safeguards such as standard contractual clauses.

11. Children

PanoFox is a business service and is not directed to children under 16. We do not knowingly collect their personal information; if you believe we have, contact us and we will delete it.

12. Changes

We will post any changes on this page and update the date above. If a change is significant, we will tell account Owners by email before it takes effect.

13. Contact

Privacy questions and requests: privacy@panofox.com. Everything else: support@panofox.com.