Privacy policy

Last updated: October 9, 2026

Virtuaaa is a service run by Visite Interactive. This page explains which data the service uses, why, for how long, and how to exercise your rights.

Data controller

Visite Interactive, represented by Hugo Mercier. Contact: [email protected].

Data we use

• Account: your email address and, if you choose a password, its fingerprint (scrypt hash with a random salt): the password itself is never stored. If you sign in with Google, Virtuaaa only receives your verified email address and your name, not your password or other Google data.
• Panoramas and tours: the photos you upload, the tour files computed from them, the titles and settings of your tours.
• Purchases: credits bought and used. Payment is handled by Stripe: Virtuaaa never sees your card number.
• Messages: what you write in the contact form (name, email address, message).
• Technical data: IP address and server logs, for security (limiting abuse) and for the service to work properly. When an account is created with the first free tour, an encrypted fingerprint of the IP address and browser is kept for 30 days, so that only one free tour is granted per device; the IP address and browser themselves are not stored in it. An account created with a password receives a code by email to confirm its address.

Why

• To provide the service: build, display and deliver your tours, manage your account and credits (performance of the contract).
• To keep sales accounting records (legal obligation).
• To protect the service against abuse and answer your messages (legitimate interest).

Virtuaaa does not sell your data and shows no advertising. Site traffic is measured without cookies and without any third-party service: for each page view, the date, the page, the site you came from and the country derived from your IP address (the address itself is not stored), then, when you leave the page, how long it stayed on screen, how far you scrolled, which parts of the page you saw, the time spent on each, whether you clicked through to the application and, on the home page, where you clicked (part of the page, position within that part, computer or phone screen). Nothing is stored in your browser. An anonymous identifier, recomputed every day, is only used to count the visitors of a single day.

Publishing on Google Maps (Street View)

If you, or the photographer who made your tour, choose to publish a tour on Google Maps, Virtuaaa asks for access to the Google account concerned with the Street View permission (plus the verified email address of that account, to show who gave the access). Virtuaaa uses this access only to publish, update or remove the 360° photos of the tours it created: your other Street View photos are never read or deleted, and no other Google data is accessed. The access is stored encrypted, is never shared or sold, is automatically withdrawn after 30 days without publication, and can be withdrawn at any time in Virtuaaa or at https://myaccount.google.com/permissions.

Virtuaaa's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

A single session cookie, required to stay signed in (90 days), and a temporary cookie during Google sign-in or authorization (15 minutes at most). Your chosen language is kept in your browser. No advertising cookies.

Service providers

• Hetzner Online GmbH (Germany): hosting of the application, accounts and tours.
• Modal Labs, Inc. (United States): computing that builds the tours. Panoramas are processed there for the duration of the build. This transfer outside the European Union is covered by Modal's data processing agreement, based on the European Commission's standard contractual clauses.
• Stripe: payment of credits.
• Google: sign-in with a Google account, and publication of tours on Google Maps (Street View), if you choose them.
• PlanetHoster: virtuaaa.com website and email.

Retention

• Account, panoramas and tours: while the account is active, then deleted three years after the last sign-in, or earlier on request.
• Purchase accounting records: ten years, as required by French law.
• Contact form messages: three years.
• Technical logs: a few weeks.

People visible in photos

You are responsible for the photos you upload and for the permissions of the people and places photographed. The editor offers face blurring before publication.

Your rights

You can request access to your data, its correction, deletion or export, or object to its processing, by writing to [email protected]. You can also contact your data protection authority (in France, the CNIL: www.cnil.fr).