Privacy policy.
What we collect, why, who sees it, how long we keep it, and how to have it deleted. Plain language.
Last updated September 2026
Who this covers
VOLUME Virtual ("VOLUME", "we") operates volumevirtual.com and the related tour hosting service. This policy applies to visitors of the marketing site, agents and hosts with a VOLUME account, and members of buyers or hosts who submit a booking form on a public tour URL.
What we collect
Account data. Name, email, hashed password (or OAuth token), organization name, public handle, optional logo/tagline, webhook URL, and billing details (via Stripe — we never see the raw card).
Content you upload. Walkthrough videos, generated 3D reconstructions (.ply files), poster frames, tour metadata (address, area, vertical, status).
Tour visitor events. When someone views a public tour URL we record the timestamp, an anonymous session id, the referring URL, coarse device type (mobile/tablet/desktop), and a country/city derived from IP via Vercel edge headers. We do not store the raw IP address. We do not use third-party ad cookies.
Lead submissions. When a buyer or guest fills the book-a-showing form on a tour, we collect their name, email, optional phone, message, and dwell time so the tour owner can respond.
Who sees it (sub-processors)
We use these providers to run the service. Each processes only the data needed for its role, under a written data-processing agreement (DPA) with us.
· Supabase — auth, database, primary storage (US region).
· Vercel — hosting, Blob storage for videos + tours, edge analytics (US region).
· MakeSplat — Gaussian-splat reconstruction. Your walkthrough video is transmitted to their infrastructure to generate the .ply.
· Cloudflare R2 — MakeSplat's upload target for the source video during reconstruction.
· Stripe — payment processing. Card numbers never touch our servers.
· Resend — transactional email (invite links, lead notifications, password reset).
· Sentry — error monitoring. Session replays are privacy-masked (no input text, no media captured).
· PostHog — product analytics. First-party cookies only; no cross-site tracking.
How long we keep it
Raw walkthrough videos: 60 days after successful reconstruction, then permanently deleted from Blob. If reconstruction fails, the source stays until you request deletion or you re-upload.
Tour .ply files: kept while hosting is active on the tour, plus 90 days after subscription lapse — so a reactivating customer gets their tours back. Then deleted.
Tour view + dwell events: retained for 24 months for the analytics dashboard, then aggregated + the row-level detail deleted.
Lead submissions: retained for as long as the receiving workspace is active, plus 12 months after account closure, then deleted.
Account records + invoices: retained for 7 years after closure to meet CRA / IRS record-keeping obligations.
Where it lives
Our primary Supabase database is hosted in Canada (ca-central-1). Vercel edge and Blob storage are US-multi-region. MakeSplat processes in the US. We currently sell to Canada and the United States only.
Your rights
Under Canadian PIPEDA and equivalent US state laws you have the right to ask what data we hold about you, correct it, or have it deleted. Email hello@volumevirtual.com from the address on file and we will action the request within 30 days. Deletion is immediate for account + tours; sub-processor propagation (Stripe, Resend, Sentry, PostHog) may take a further 30 days.
For subscriptions we retain invoice records as noted above for tax compliance — this is required by law and not something we can delete on request.
Security
All traffic is HTTPS. Passwords are hashed by Supabase. Database access is row-level-security enforced — one workspace cannot see another's data even at the API level. Card data is handled by Stripe (PCI-DSS Level 1). Sensitive environment variables are encrypted at rest on Vercel.
DMCA / takedown
If a published tour infringes your rights (unauthorized property footage, copyrighted material in view), email hello@volumevirtual.com with the tour URL and a statement of your relationship to the material. We remove verified takedown requests within 48 hours.
Changes to this policy
We'll email active account owners at least 14 days before any material change and update the "last updated" date at the top of this page. Continued use after a change constitutes acceptance.
Questions about this policy? Email hello@volumevirtual.com.