Privacy Policy | Art Seasons 360

This Privacy Policy explains how Art Seasons collects, uses, discloses, retains, protects, and otherwise handles personal information in connection with Art Seasons 360, including our websites, mobile applications, account features, project editor, local preview, publishing tools, hosted tours, export tools, embed/share features, payment workflows, support communications, and related services.

In this Policy, “personal information” means information about an identifiable individual or similar terms under applicable privacy laws. This may include information you provide directly, information generated through use of the Service, information from devices and browsers, payment-related information handled by processors, and information contained in project materials such as property photographs or floor plan files when they identify or can reasonably be associated with a person.

By using the Service, you acknowledge this Policy. Where required by law, we will seek your consent for specific collection, use, disclosure, tracking, marketing, or other processing activities.

1. Scope

This Policy applies to personal information handled by us in connection with Art Seasons 360. It does not apply to third-party websites, app stores, payment processors, MLS systems, brokerages, real estate portals, social networks, customer-selected hosting providers, or other third parties that process information under their own policies.

If you use the Service on behalf of a client, property owner, brokerage, media agency, or employer, you may also be responsible for providing privacy notices and obtaining consents from individuals whose personal information appears in project materials or is otherwise processed through your use of the Service.

2. Who Is Responsible

Art Seasons is responsible for personal information we collect and process for our own business purposes, such as account management, service operation, support, billing, security, analytics, product improvement, and legal compliance. For some Customer Content, we may act as a service provider or processor on your behalf, depending on the context and applicable law.

Privacy inquiries may be directed to: privacy@artseasons.ca. Business address: Richmond Hill, Ontario, Canada.

3. Information We Collect

Category	Examples	Typical Source
Account and contact information	Name, email address, phone number, business name, role, login identifiers, account settings.	You, your organization, authentication provider.
Project and property information	Project name, project code, property address or MLS-related text, regions, scene names, floor plan labels, hotspots, info spots, descriptions, logos, virtual tour settings.	You and users acting under your account.
Media and files	360 photos, thumbnails, floor plans, nadir logos, info images, exported files, preview assets, support attachments.	You, your device, your camera workflow, your contractors.
Device and technical information	Device type, operating system, app version, browser type, IP address, approximate location derived from IP, crash logs, diagnostic data, timestamps, language, screen size.	Automatically through the Service and service providers.
Usage information	Feature usage, project creation events, publishing events, export events, update history, upload status, errors, performance metrics, support interactions.	Automatically through the Service.
Payment and transaction information	Purchase details, plan, project add-ons, renewal status, tax region, invoice records, payment status, last four digits or tokenized payment references if provided by processor.	Payment processors, app stores, you.
Communications	Emails, support requests, feedback, bug reports, legal notices, marketing preferences.	You and our communication tools.
Security and compliance information	Login events, access logs, fraud indicators, abuse reports, takedown records, consent records, legal requests.	Automatically, users, third parties, authorities.

4. Sources of Information

We collect information directly from you, automatically from your use of the Service, from your device or browser, from payment processors and app stores, from authentication providers, from your organization or invited users, from service providers, from publicly available sources where relevant to support or enforcement, and from third parties who contact us about abuse, copyright, privacy, payment, or legal issues.

5. Purposes for Use

We use personal information to provide and operate the Service; create and manage accounts; authenticate users; store local or hosted project records; process uploads, previews, publications, exports, embeds, and share links; generate thumbnails and hosted tour files; process payments and renewals; provide support; troubleshoot bugs; improve performance; secure the Service; prevent fraud and abuse; enforce Terms; comply with legal obligations; maintain business records; communicate service notices; and, where permitted, send marketing or product updates.

We may use aggregated, de-identified, or anonymized information for analytics, product planning, performance benchmarking, security, pricing analysis, capacity planning, and service improvement, provided it does not reasonably identify an individual.

6. Consent and Legal Bases

Where Canadian privacy law applies, we rely on meaningful consent unless another legal basis or exception is available. Consent may be express or implied depending on the sensitivity of the information, user expectations, and context. You may withdraw consent where legally available, but withdrawal may limit or prevent use of the Service.

Where U.S. state privacy laws apply, our processing may be based on providing requested services, performing a contract, detecting security incidents, preventing fraud, complying with law, internal analytics, quality assurance, product improvement, or other permitted business purposes. We do not knowingly sell personal information in the traditional sense. If future practices constitute “sale” or “sharing” under applicable law, we will provide required notices and choices.

7. Project Content and Property Media

Project media may contain personal information even when uploaded for real estate marketing. Examples include faces, family photos, personal documents, license plates, security devices, medication, financial papers, mail, school materials, religious items, health-related items, or other identifying details visible in photos or floor plans.

You are responsible for reviewing, blurring, removing, cropping, retouching, or excluding sensitive or unnecessary information before publication. You are also responsible for obtaining consent from property owners, tenants, occupants, photographers, brokers, agents, contractors, or other rights holders where required.

We may process project media to create previews, thumbnails, optimized assets, hosted output, exports, backups, support diagnostics, or security scans. We may retain technical copies for a limited period to operate the Service, recover from errors, enforce rights, or comply with law.

8. Payments

Payments may be processed by third-party payment processors or app stores. We generally do not store full payment card numbers. Payment providers may collect payment card details, billing address, tax information, device data, fraud signals, and transaction records under their own privacy policies. We receive information necessary to confirm payment status, fulfill purchases, issue invoices, process refunds, respond to disputes, and maintain accounting records.

9. Publishing, Hosting, Embeds, and Public Tours

When you publish a tour or share a public link, the published content may be accessible to anyone with the link and may be embedded on websites, shared with MLS systems, copied by viewers, cached by browsers, indexed by search engines, archived by third parties, screenshotted, or stored by platforms outside our control. Do not publish content unless you have the right to make it public.

Hosted tours may generate access logs such as IP address, browser type, referrer, timestamp, device information, and pages viewed. These logs help deliver content, secure the Service, monitor bandwidth, troubleshoot errors, prevent abuse, and analyze performance.

We may disclose personal information to service providers that help us operate the Service, including hosting providers, CDN providers, storage providers, database providers, payment processors, app stores, authentication providers, analytics providers, crash reporting providers, email providers, support tools, legal advisers, accountants, security vendors, and contractors.

We may disclose information to your organization, account owner, invited collaborators, or administrators; to viewers of published tours; to third-party platforms when you choose to embed, share, export, or publish content; to comply with law, subpoenas, court orders, or lawful requests; to protect rights, safety, security, and property; to investigate fraud or abuse; in connection with a merger, acquisition, financing, reorganization, or sale of assets; and with your consent or at your direction.

11. Cross-Border Processing

We may process and store information in Canada, the United States, and other countries where we or our service providers operate. Personal information may be subject to the laws and lawful access requests of those jurisdictions. When we transfer information, we use contractual, technical, and organizational safeguards appropriate to the nature of the information and applicable law.

12. Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining accounts, hosting published tours, supporting exports, resolving disputes, enforcing Terms, preventing fraud, complying with law, tax and accounting requirements, backup cycles, and legitimate business needs.

Local project files stored on your device may remain until you delete them or uninstall the app, subject to device and operating system behavior. Hosted projects may be retained while paid hosting is active and for a reasonable archival or deletion period afterward. Support records, invoices, transaction records, security logs, and legal records may be retained longer where necessary.

13. Security

We use reasonable safeguards designed to protect personal information against unauthorized access, disclosure, copying, use, modification, loss, or theft. Safeguards may include access controls, authentication, encryption in transit where appropriate, secure token storage practices, provider security controls, logging, monitoring, backups, and internal restrictions.

No method of transmission or storage is completely secure. You must protect your own devices, passwords, email accounts, authentication methods, exported files, and hosted credentials. You should not upload unnecessary sensitive personal information.

14. Your Choices and Rights

Depending on your location and relationship with us, you may have rights to access, correct, delete, export, restrict, object to, or withdraw consent regarding personal information. You may also have rights to complain to a privacy regulator. We may need to verify your identity and authority before fulfilling a request. Some information may be exempt from deletion or access due to legal, security, accounting, fraud prevention, backup, or contractual reasons.

You can make privacy requests by contacting privacy@artseasons.ca. If your request concerns Customer Content controlled by a real estate agent, brokerage, photographer, property owner, or other customer, we may direct you to that customer or process the request on their instructions.

15. Canadian Privacy Rights

For users in Canada, we aim to handle personal information consistently with the principles of accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access, and challenging compliance. You may request access to personal information we hold about you and ask that inaccuracies be corrected, subject to lawful limitations.

For Québec residents, where applicable, we will provide information about our privacy governance, cross-border transfers, automated processing where required, confidentiality incidents, and rights to access, correction, portability where in force, and withdrawal of consent. We will publish material updates to this Policy in a manner appropriate to reach affected individuals.

16. U.S. State Privacy Rights

Residents of certain U.S. states may have rights to know, access, correct, delete, obtain a portable copy of personal information, opt out of certain targeted advertising, sales, sharing, profiling, or sensitive data processing, and appeal denied requests. The availability and scope of these rights depends on the applicable state law and whether statutory thresholds apply to our business.

We do not knowingly process sensitive personal information for purposes that require an opt-out unless we provide the required notice and choice. We do not knowingly sell personal information of consumers under 16. If we introduce targeted advertising, cross-context behavioral advertising, or data sharing that triggers opt-out rights, we will update this Policy and provide applicable controls.

17. California Notice at Collection

This section applies where the California Consumer Privacy Act, as amended, applies to our handling of California residents’ personal information.

CCPA Category	Examples We May Collect	Purpose	Disclosed To
Identifiers	Name, email, phone, account ID, IP address, device identifiers.	Account, support, security, publishing, billing.	Service providers, payment processors, app stores, hosting providers.
Customer records information	Billing details, business contact information, transaction records.	Payments, tax, invoices, fraud prevention.	Payment processors, accounting providers, legal advisers.
Commercial information	Purchases, plans, renewals, project add-ons, payment status.	Fulfillment, support, analytics, records.	Service providers, app stores, payment processors.
Internet or network activity	Usage logs, app events, hosted tour access logs, crash reports.	Security, diagnostics, analytics, performance.	Hosting, analytics, crash reporting, security providers.
Geolocation	Approximate location inferred from IP; property address if entered by you.	Security, tax, project organization, publication.	Service providers as necessary.
Audio/visual information	Photos, 360 images, floor plan images, logos, support attachments.	Create, host, publish, export, support projects.	Hosting/storage providers; viewers if published.
Professional information	Business name, role, brokerage or company details if provided.	Account, invoices, customer support.	Service providers.
Inferences	Feature preferences, usage patterns, plan needs.	Improve service, support, product planning.	Service providers.

We use these categories for the purposes described in this Policy. We retain them as described in the retention section. We do not sell personal information in the traditional sense. We do not share personal information for cross-context behavioral advertising unless we provide required notice and opt-out controls. California residents may request access, deletion, correction, and information about disclosure practices, and may not be discriminated against for exercising rights.

18. Children

The Service is not directed to children under 13 and is not intended to collect personal information from children. If you believe a child has provided personal information to us, contact us and we will take appropriate steps. Users must not upload images of children or other minors in property media unless they have all required consents and a lawful purpose.

19. Cookies, Analytics, and Similar Technologies

Our websites, hosted tours, and web-based tools may use cookies, local storage, pixels, SDKs, logs, or similar technologies to keep users signed in, remember preferences, load tours, measure performance, understand usage, detect abuse, prevent fraud, and improve the Service. Mobile apps may use device identifiers, diagnostics, or SDK events for similar purposes.

You may be able to control cookies through browser settings or device settings. Blocking certain technologies may prevent account login, previews, payments, hosted tours, analytics opt-outs, or other features from working properly.

20. Marketing Communications

We may send service-related emails such as account notices, receipts, renewal notices, security alerts, support replies, and policy updates. These are not marketing messages and may be necessary to provide the Service. Where permitted, we may send product updates, offers, tutorials, or newsletters. You may unsubscribe from marketing communications using the instructions in the message or by contacting us.

21. App Stores and Mobile Permissions

The mobile app may request permissions such as photo library access, camera access, file access, storage access, network access, notifications, or other device capabilities depending on features used. You can manage permissions in your device settings. If you deny permissions, some features may not work.

Apple, Google, and other platform providers may collect information independently when you download, purchase, update, review, or use apps. Their privacy practices are governed by their own policies. App Store privacy labels must accurately reflect the app’s data practices; we will update them as the app changes.

22. AI Assistant

The AI Assistant feature may send user questions and project-related diagnostic information to cloud-based AI services in order to generate support responses.
Users should avoid submitting sensitive personal information, passwords, payment information, or confidential data through the AI Assistant.
AI-generated responses are provided for informational and support purposes only and may occasionally be inaccurate.

23. Changes to This Policy

We may update this Policy to reflect changes in our Service, data practices, providers, legal requirements, or business operations. The updated version will be posted with a new “Last Updated” date. Where required by law, we will provide additional notice or seek consent for material changes.

24. Contact

Privacy questions, access requests, correction requests, deletion requests, consent withdrawals, complaints, or appeal requests may be sent to: privacy@artseasons.ca. General legal inquiries may be sent to: legal@artseasons.ca. Business address: Richmond Hill, Ontario, Canada.