Security & data
Your data. Yours to keep.
What happens to the captures your users make: where they are stored, who can see them, and how they leave with you.
Hosting
Regional hosting
Your data is stored and processed in one region, together with every sub-processor. EU data stays in Frankfurt. Ask us about other regions.
Privacy
Blurred by default
After upload, our servers blur private details automatically, in the same region. Your users can blur anything else themselves in the editor, and you can turn automatic blurring off if you don’t need it.
GDPR
DPA on request
For the captures in your product, you are the controller and we process them on your behalf. A data processing agreement (DPA) is available on request.
Visibility
Private by default
Every tour starts private. It becomes public only when someone in your product publishes it, and then it opens from its own link.
Access
Authenticated access
The iOS SDK checks the device with Apple App Attest. The Web SDK uses short-lived tokens your backend issues behind your own login. The Server API uses OAuth2 client credentials.
Exit
Your data leaves with you
Export everything at any time in documented formats: panoramas, floor plans, meshes, raw spatial data and your whole archive. It’s written into the contract.
Need the DPA or a security review?
Write to us and the engineers who built it will answer.

The next step
Want this in your app?
A 30-minute call to see where it fits.
30 min
Call
Your CTO
With our engineers
4 weeks
To integration