Privacy Policy | OOMOS - 360° Virtual Tour Platform

1. Introduction

Welcome to Oomos ("we," "us," "our"). We are committed to protecting your privacy and being transparent about how we collect, use, and share your information.

Data Processor Role: Oomos acts as a Data Processor for the information uploaded by our users regarding their end-viewers. Users are responsible for ensuring they have the necessary rights to collect and display content to their clients.

This Privacy Policy explains what information we collect when you use the Oomos platform and services (the "Service"), how we use and protect that information, and your rights regarding your personal data.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

Oomos does not sell your personal data.

2. Information We Collect

We collect information in the following categories:

2.1 Personal Information

When you create an account or interact with the Service, we may collect:

Account information: Name, email address, and password.
Billing information: Payment-related data is collected and processed by our third-party payment provider (Paddle). We do not directly store your credit card number or full payment details on our servers.
Profile information: Any additional details you choose to add to your profile, such as a company name or profile picture.

2.2 Uploaded Content

When you use the Service, you may upload content including:

360° panoramic images and photographs.
Media files (audio, images) used in virtual tours.
Tour configurations, hotspot data, and customization settings.

You are solely responsible for the content you upload. If you share a tour via a public link or embed code, that content may be publicly accessible to anyone with the link.

2.3 Usage Data

We automatically collect certain information when you access or use the Service, including:

Log data: IP address, browser type, operating system, referring URLs, and timestamps.
Device information: Device type, screen resolution, and unique device identifiers.
Analytics data: Pages visited, features used, tour views, engagement metrics, and session duration.

2.4 Cookies & Tracking Technologies

We use cookies and similar tracking technologies to collect and store information. For more details, see Section 9 — Cookies Policy below.

3. How We Use Your Information

We use the information we collect for the following purposes:

Provide and operate the Service: To create and manage your account, host your virtual tours, and enable sharing and embedding features.
Process payments: To facilitate subscription billing through our third-party payment provider, Paddle. We do not directly handle or store payment card information.
Improve the platform: To analyze usage patterns, identify issues, and enhance features, performance, and user experience.
Analytics and insights: To provide tour view tracking, engagement analytics, and performance metrics to tour creators.
Communicate with you: To send account-related notifications, respond to support requests, and provide updates about the Service. We may also send promotional communications, which you can opt out of at any time.
Ensure security: To detect and prevent fraud, abuse, and unauthorized access to the Service.
Comply with legal obligations: To meet applicable legal, regulatory, or compliance requirements.

4. Legal Basis for Processing

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction that requires a legal basis for processing personal data, we rely on the following:

Contract performance: Processing is necessary to fulfill our contract with you — for example, to provide the Service, manage your account, and process your subscription.
Consent: Where you have given explicit consent — for example, to receive marketing emails or to enable optional cookies. You may withdraw your consent at any time.
Legitimate interests: Processing is necessary for our legitimate business interests — for example, to improve the Service, ensure security, and analyze usage patterns — provided these interests are not overridden by your rights and freedoms.
Legal obligation: Processing is necessary to comply with applicable laws and regulations.

5. Sharing of Information

We do not sell your personal data. We may share your information only in the following circumstances:

Payment processors: We use Paddle as our payment provider. When you subscribe to a paid plan, Paddle processes your payment information in accordance with their own privacy policy. We encourage you to review Paddle's Privacy Policy.
Hosting and infrastructure providers: We use third-party cloud hosting services to store and serve your virtual tours and data. These providers are bound by data processing agreements.
Analytics providers: We use analytics tools to understand how users interact with the Service. These tools collect anonymized or pseudonymized data.
Legal obligations: We may disclose your information if required to do so by law, regulation, legal process, or governmental request.
Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6. Data Storage & Security

Your data is stored on secure, industry-standard cloud servers. We implement reasonable technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:

Encryption of data in transit (TLS/SSL).
Secure authentication mechanisms.
Access controls and role-based permissions for internal systems.
Regular security reviews and monitoring.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

Account data: Retained while your account is active and for a reasonable period after account closure to comply with legal obligations, resolve disputes, and enforce agreements.
Uploaded content: Virtual tours, images, and media are retained while your account is active. Upon account deletion, this content will be permanently deleted from our servers within a reasonable timeframe.
Usage data: Aggregated and anonymized usage data may be retained indefinitely for analytics and improvement purposes.
Billing records: Retained as required by applicable tax and accounting laws.

After account closure, we will delete or anonymize your personal data, unless retention is required by law.

8. Your Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request that we update or correct inaccurate or incomplete data.
Deletion: Request that we delete your personal data. You can also request full account deletion, which will remove your account and associated content from our systems.
Data portability: Request a copy of your data in a structured, machine-readable format.
Restriction: Request that we limit the processing of your personal data in certain circumstances.
Objection: Object to the processing of your data based on legitimate interests or for direct marketing purposes.
Withdraw consent: Where processing is based on consent, you may withdraw your consent at any time.
Opt-out of communications: Unsubscribe from marketing emails at any time by clicking the unsubscribe link in the email or by contacting us.

To exercise any of these rights, please contact us at contact@oomos.com. We will respond to your request within a reasonable timeframe, and no later than required by applicable law.

9. Cookies Policy

Cookies are small text files placed on your device when you visit a website. We use the following types of cookies:

Essential cookies: Required for the Service to function properly. These include cookies for authentication, session management, and security. These cannot be disabled.
Analytics cookies: Help us understand how users interact with the Service, which pages are most popular, and how users navigate through the platform. This data is used to improve the user experience. Specifically, we use Google Analytics for performance monitoring.
Preference cookies: Remember your settings and preferences, such as language or display options.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Service.

10. Third-Party Services

The Service integrates with or relies on certain third-party services. These services have their own privacy policies, and we encourage you to review them:

Paddle: Handles subscription billing and payment processing. Paddle acts as the Merchant of Record for transactions. Paddle Privacy Policy.
Cloud hosting providers: We use third-party infrastructure to host and deliver virtual tours and platform data.
Analytics tools: We use analytics services to monitor performance and understand user behavior.

Oomos is not responsible for the privacy practices of third-party services. We recommend reviewing their respective privacy policies before providing them with your information.

11. International Data Transfers

Oomos operates globally, and your data may be processed and stored in countries other than your country of residence. These countries may have different data protection laws than your jurisdiction.

When we transfer personal data internationally, we take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy and applicable data protection laws, including:

Standard Contractual Clauses (SCCs) approved by the European Commission.
Data processing agreements with our service providers.
Ensuring that recipients provide an adequate level of data protection.

12. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to promptly delete that information.

If you believe that a child under 18 has provided us with personal information, please contact us at contact@oomos.com so we can take appropriate action.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

Update the "Effective Date" at the top of this page.
Notify you via email or through a prominent notice within the Service, where appropriate.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Service after changes to this policy constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: contact@oomos.com
Website: https://oomos.com

If you are located in the EEA and believe that your data protection rights have not been adequately addressed, you have the right to lodge a complaint with your local data protection supervisory authority.