Privacy Policy
In effect from 5 November 2026. This policy explains what personal data Vistura collects, why, who receives it, how long it is kept and how you can use your rights. It covers the website vistura.app, the Vistura app and Vistura Capture, the free tools, and the tours that agents publish with Vistura.
1. Who is responsible
Vistura is run by the sole trader established in Portugal identified in the Legal notice.
- Name: Available on request from legal@vistura.app
- Tax number: Available on request from legal@vistura.app
- Address: Available on request from legal@vistura.app
- Privacy questions and requests: privacy@vistura.app
- Everything else: support@vistura.app
Vistura has not appointed a data protection officer, because the law does not require one for a business of its size and kind. Write to privacy@vistura.app about anything in this policy.
2. Two roles: our data and our customers' data
Vistura handles personal data in two different roles:
- Vistura decides (controller) for the data of people who visit our website, create a Vistura account, buy a plan, use the free tools or write to us. This policy describes that data.
- Vistura works for the agent (processor) for the data of people who look at an agent's tour and send the agent a message, book a viewing or are counted in the agent's statistics. The agent, or the agency, decides what to do with that data, and Vistura handles it only on their behalf, under the Data Processing Agreement. If you contacted an agent through a tour, the agent is the one to ask about your data. Section 5 explains what happens when you look at a tour.
3. What we collect, why, and on what legal basis
| What | Why | Legal basis (GDPR art. 6(1)) |
|---|---|---|
| Account: email address, name, password (stored only as a hash by our sign-in provider), or the name, email and photo that Google or Apple share when you sign in with them | To create and run your account and sign you in | Contract (b) |
| Profile and public page: username, name, photo, banner, bio, contact details and the logo and colours you add | To show your details on your tours and, if you turn it on, on your public profile page | Contract (b) |
| Tours: 360 photos, floor plans, videos, narration audio, texts, property details and addresses you add, and the settings of each tour | To store, edit and publish your tours | Contract (b) |
| Teams: the team's name, its members' emails and roles, and invitations | To let an agency work as a team | Contract (b) |
| Billing: plan, subscription status, billing country, tax number if you give one, and the payment history | To charge for plans, issue invoices and meet tax law. Card details go straight to Stripe and never reach Vistura | Contract (b); legal obligation (c) for invoices and tax records |
| Service emails: confirmations, enquiry alerts, billing and security messages | To run the service you use | Contract (b) |
| Onboarding emails: a welcome email, a tip on day 3 if you have no tour yet, and a "what to do first" email when you buy a plan | To help you get started. You can switch the tips off in Settings | Legitimate interest (f) in helping customers use what they signed up for |
| News and offers by email: only if you ticked the box at sign-up or turned it on in Settings | To tell you about new features and offers. Every email has a one-click unsubscribe link | Consent (a) |
| How you found Vistura: the campaign tags in the link you arrived from (utm), the referring website's name and the page you landed on, saved on your account when you sign up | To know which channels bring customers | Legitimate interest (f) in measuring our marketing. Kept on your device before sign-up only with your consent (section 8) |
| Website statistics and advertising measurement: pages viewed, the free tool steps (a photo opened, a result ready, a download), sign-ups and purchases, through Google Analytics, Google Ads and Meta | To understand how the website is used and measure our ads | Consent (a), given in the cookie banner (section 8) |
| Product use inside the app: what you do in the editor and the dashboard (for example opening the example tour, choosing which photos you start from, a photo uploaded or not, creating a tour, publishing it, an error). Kept on our own servers, without cookies, as the kind of action and when it first and last happened | To fix problems and improve the product, for example to see where new accounts get stuck | Legitimate interest (f) in a working, improving service |
| Bot protection: Cloudflare Turnstile checks that the sign-up form is used by a person | To stop fake accounts and abuse | Legitimate interest (f) in security |
| Security and server logs: IP address, browser, time and the request made, kept briefly | To keep the service secure and find faults | Legitimate interest (f) in security |
| Support: what you write to us and our replies | To answer you | Contract (b) or legitimate interest (f) |
| Reports about a tour: the reason, your message, the page and, if you give it, your email, plus a keyed hash of your IP address to limit abuse | To review the tour and, if you asked, reply to you. We never tell the agent who reported | Legitimate interest (f) in keeping illegal or harmful content off Vistura |
We do not sell personal data, and we do not make decisions about you that are based only on automated processing and have legal or similarly significant effects.
You do not have to give us personal data, but without an email address we cannot create an account, and without billing details we cannot sell a plan.
4. Public tours and showcasing Vistura
A tour you publish as public can be seen by anyone, and search engines may list it. A tour shared by link only can be seen by anyone who has the link. A private tour can only be seen by you and the people you give access to.
To show what Vistura can do, we may use public tours made with Vistura, and the name and logo of the agent or agency shown on them, as examples in our own marketing: on vistura.app (for example a list of agencies that use Vistura), in our help pages, social media posts, presentations and emails.
- We only use tours that are public. We never use private tours or tours shared by link only, and never leads, visitor statistics or anything that is not already public on the tour.
- What a tour shows about the agent (for example their name, photo or phone number) is personal data. We use it on the basis of our legitimate interest (GDPR art. 6(1)(f)) in showing real work made with Vistura, and the agent's licence to us in the Terms of Service.
- You can say no at any time. Write to privacy@vistura.app and we stop using your tours, name and logo in new materials and remove them from our website and our own social media pages within 14 days. Material already printed or sent cannot be recalled.
5. People who look at a tour
When you open a tour that an agent published with Vistura:
- No cookie and nothing stored on your device to count you. Vistura counts visits for the agent's statistics with a hash of your IP address, browser, the tour and the day, mixed with a secret key. It changes every day, so nobody can follow you from one day to the next, and your IP address itself is not stored. We keep which site you came from (only its name, not the full address), the campaign tags of the link, your country, the type of device, which rooms you looked at and for how long, and in which directions you looked in each room and whether you zoomed in (added up with other visitors' per tour, room and day, never kept as one visit). The agent's own visits and known bots are not counted.
- If you send the agent a message or book a viewing, what you write goes to the agent, who decides what to do with it. Vistura stores it for the agent as their processor (section 2), and keeps a keyed hash of your IP address to stop spam. Each agent chooses how long their leads are kept.
- No Google Analytics, advertising tags or cookie banner run on tours, embedded tours or agents' profile pages. Visitors of agents' tours are never tracked for Vistura's own marketing.
6. Who receives personal data
- Providers that work for us, under contracts that only let them use the data to provide their service to Vistura: hosting, database and sign-in, file storage and backups, and email delivery. The full, current list, with where each one processes data, is on the Sub-processors page.
- Stripe processes payments. It receives the details needed for a payment and decides, as a controller, what it must keep for fraud prevention and financial law (Stripe's privacy policy).
- Google and Meta receive website statistics and advertising measurement only if you accept them in the cookie banner. They may combine it with data they already have about you, under their own policies (Google, Meta).
- Cloudflare runs the Turnstile check on the sign-up form.
- Address and map services: when you type a property's address in the editor, the text is sent to Photon (Komoot) to suggest addresses, and the property's coordinates are sent to the OpenStreetMap Overpass service to list what is nearby. No account detail is sent with them.
- Your team: if you work in a team, its admins can see the team's tours, leads and statistics.
- Anyone, for what you publish: public tours and public profile pages.
- Authorities, when the law requires it, and professional advisers (for example an accountant or a lawyer) under a duty of confidentiality.
7. Transfers outside the European Economic Area
Some of our providers process data in the United States. These transfers are protected by the European Commission's Standard Contractual Clauses or by the provider's certification under the EU-US Data Privacy Framework. The Sub-processors page says which safeguard applies to each provider. Write to privacy@vistura.app for a copy of the safeguards.
8. Cookies and similar technologies
| Kind | What it does | Needs your consent |
|---|---|---|
| Necessary | Keeps you signed in, remembers your cookie choice and your language, protects the sign-up form (Cloudflare Turnstile), and lets the free tools remember their settings in your browser | No: the service cannot work without them |
| Statistics | Google Analytics: which pages and free tools are used, and how people reach Vistura | Yes |
| Marketing | Google Ads and the Meta Pixel: whether our ads led to a sign-up or a purchase, and the advertising click identifiers (gclid, fbclid) | Yes |
With your consent to statistics or marketing cookies, we also remember on your device, for up to 90 days, how you first and last arrived at Vistura (the campaign tags of the link, the referring website's name and the landing page), so a later sign-up can be linked to the campaign that brought you.
Nothing that needs consent runs before you accept it in the banner. You can change your choice at any time under "Cookie preferences" at the bottom of the home page; withdrawing consent deletes what was stored. None of these technologies run on tours, embedded tours or agents' profile pages.
9. Free tools
Every free tool at vistura.app/tools opens and processes your photos, and anything you type into it (room measurements, a link, a phone number or contact details for a QR code, your location or the location of a home), in your browser, on your device. You do not need an account to use them.
- Your photos are not uploaded: no photo, file name, file size or metadata (such as a GPS position) is sent to Vistura or to anyone else. What you type into a tool, and a location you let it read from your device or a photo, is not sent either.
- Some tools remember your settings, a logo, a QR code's details or a list of rooms in this browser's storage, so they are there next time. This stays on your device; clearing this site's data in your browser removes it.
- If you accept statistics cookies, Google Analytics counts which tool was used and its steps (a photo opened, a result ready, a download), never anything about the photo itself or what you typed.
- A photo reaches Vistura only if you choose to start a tour with it; it is then handled as an account's tour (section 3).
10. How long we keep data
| Data | How long |
|---|---|
| Account, profile, tours and team data | While the account exists. When you delete your account, it is deleted at once from the live service, and from the encrypted backups within 30 days |
| A team whose plan ends | Locked after the grace period, then deleted 30 days later, as explained by email before it happens |
| Leads (as the agent's processor) | For the period each agent chooses, and deleted with the agent's account |
| Tour visits (raw records for statistics) | 25 months |
| Invoices and billing records | For as long as tax and accounting law requires |
| Reports about a tour | Up to 2 years, or longer if needed for a legal claim |
| Support emails | Up to 3 years after the last message |
| How you found Vistura, on your device (with consent) | Up to 90 days |
| Security and server logs | A short time, as set by our hosting providers, usually days |
11. Your rights
Under the GDPR you can ask us to:
- give you a copy of your personal data (access), and receive it in a format another service can read (portability). Settings in the app also lets you download your data yourself;
- correct data that is wrong;
- delete your data. You can delete your account yourself in Settings;
- restrict how we use your data while a question is being resolved;
- object to uses based on our legitimate interest, including showcasing your public tours (section 4) and the onboarding emails;
- withdraw your consent at any time, for marketing emails (the link in each email, or Settings) and for cookies ("Cookie preferences"), without affecting what was done before.
Write to privacy@vistura.app. We answer within one month, and may ask you to confirm your identity first. If a request concerns a lead you sent to an agent, we pass it to that agent, who is responsible for it.
You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live or work or where you think the problem happened. We would be grateful for the chance to sort it out with you first.
12. Security
All traffic is encrypted (HTTPS). Data is encrypted at rest by our hosting providers. Each account can only reach its own data: the database refuses anything else, and plan and billing details can only be changed by our server. Passwords are never stored by Vistura. Backups are encrypted, and restoring them is tested every month. If a breach puts your data at risk, we will tell you and the authority as the law requires.
13. Children
Vistura is a tool for professionals. It is not meant for anyone under 16, and we do not knowingly collect their data. If you think a child has given us personal data, write to privacy@vistura.app and we will delete it.
14. Changes to this policy
When we change this policy, we publish the new version here with its date. If a change matters for how we use your data, we also tell account holders by email before it takes effect.