Privacy

Account data — your email and name when you sign up, plus an encrypted hash of your password.

Tour content — the panoramas, scene names, and hotspots you upload, stored in object storage (Cloudflare R2, Asia-Pacific).

Usage logs — request logs and basic analytics (page views, time on page) to keep the product reliable. No third-party tracking pixels.

We don't sell your data. We don't train AI models on your tours. We don't embed Google Analytics or Facebook pixels.

We host on a small set of trusted sub-processors, and we have a Data Processing Agreement (DPA) in place with each one:

• Google Cloud (region us-central1, Iowa, USA) — runs our application on Cloud Run and our self-managed PostgreSQL database on Compute Engine. Your account and tour metadata live here, in the United States.
• Cloudflare R2 — object storage for your panoramas, cubemaps, and depth maps, placed in the Asia-Pacific region.
• AcumbaMail (EU/Spain) — sends transactional email (password resets and account notices). It only ever sees your email address.

We don't use any other sub-processors.

You can export or delete your data yourself, at any time, from your account settings. The Danger Zone there lets you download a complete JSON export of your account, tours, scenes, and hotspots, or permanently delete your account and everything in it. We operate from the EU, so GDPR rights apply; India's DPDP Act grants similar export and erasure rights. If you'd rather we handle a request for you, email hello@deko360.com.

We use only strictly-necessary cookies — to keep you signed in and to protect the sign-in form. No analytics or marketing cookies.