Privacy Policy

This Privacy Policy explains how Ocurus (“Ocurus,” “we,” “us,” or “our”) collects, uses, shares and protects personal information when you visit ocurus.com (the “Site”), create an account, or use our 360° virtual tour creation, hosting and sharing services (collectively, the “Services”). It also describes the choices and rights you have regarding your information.

By using the Site or the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Site or the Services. This Privacy Policy is incorporated into and subject to our Terms of Service.

Who we are

Ocurus is the operator of the Site and the Services and acts as the “data controller” of the personal information described in this policy, except where we act as a “data processor” on behalf of our customers (see “Tours and visitor data” below). If you have any questions about this policy or how we handle your information, you can reach us at [email protected].

Information we collect

We collect information in three ways: information you provide to us directly, information we collect automatically when you use the Services, and information we receive from third parties.

• Account information. When you register, we collect your name, email address, password and, optionally, a profile photo, company name, country and other profile details you choose to add.
• Billing information. If you subscribe to a paid plan, our payment processor collects your payment card or banking details and billing address. We store limited payment metadata (such as card brand and the last four digits) but do not store full card numbers on our own systems.
• Content you create. This includes the panoramas, images, tours, markers, hotspots, descriptions and other materials you upload or create using the Services (“Content”).
• Communications. If you contact support, submit a project request, subscribe to our newsletter or otherwise correspond with us, we keep a record of that communication.
• Usage and device data. We automatically collect information about how you interact with the Services, such as pages viewed, features used, referring URLs, approximate location derived from IP address, browser type, operating system, device information and timestamps.
• Cookies and similar technologies. We and our providers use cookies, local storage and similar technologies to keep you signed in, remember your preferences and understand how the Services are used. See “Cookies and tracking” below.

How we use your information

We use the information we collect to:

• provide, operate, maintain and improve the Site and the Services;
• create and manage your account and authenticate you;
• process payments, manage subscriptions and send billing-related messages;
• host, publish and deliver the tours and Content you create;
• provide analytics to you about how visitors interact with your tours;
• respond to your enquiries and provide customer support;
• send you service announcements, security alerts and, where permitted, marketing communications you can opt out of;
• detect, prevent and address fraud, abuse, security incidents and technical issues; and
• comply with our legal obligations and enforce our Terms of Service.

Legal bases for processing

If you are located in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases: to perform our contract with you (providing the Services); with your consent (for example, marketing emails or certain cookies); for our legitimate interests (such as securing and improving the Services), provided those interests are not overridden by your rights; and to comply with our legal obligations.

Cookies and tracking

We use cookies and similar technologies to operate and improve the Services. Strictly necessary cookies keep you signed in and secure; analytics cookies help us understand usage; and preference storage remembers your settings. You can control cookies through your browser settings, and where required we ask for your consent. For more detail, please read our Cookie Policy.

How we share your information

We do not sell your personal information. We share it only in the following circumstances:

• Service providers. We use trusted third parties to run the Services on our behalf, including cloud hosting and storage (Amazon Web Services), payment processing (Stripe), and email delivery. These providers process personal information only on our instructions and under appropriate confidentiality and security obligations.
• Publicly shared tours. Content you choose to publish or share publicly — including your public profile and any tours you make public — is, by design, visible to anyone with the link or through discovery pages.
• Legal and safety. We may disclose information where required by law, regulation, legal process or governmental request, or where necessary to protect the rights, property or safety of Ocurus, our users or the public.
• Business transfers. If Ocurus is involved in a merger, acquisition, financing or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.

Tours and visitor data

When we host tours on behalf of our customers and process data about the people who view those tours, we act as a data processor following the instructions of our customer (the tour creator). We aim to minimise the data collected from tour visitors. To provide visitor analytics we may store a randomly generated identifier in the visitor’s browser and record limited, largely anonymised metadata such as an anonymised IP address, approximate city and country, browser and device type. If you are a visitor and want to know how a particular tour creator uses your information, please refer to that creator’s own privacy policy.

Data retention

We retain personal information for as long as your account is active or as needed to provide the Services, and thereafter as necessary to comply with our legal obligations, resolve disputes and enforce our agreements. When you delete your account, we delete or de-identify your personal information and Content within a reasonable period, except where retention is required by law or for legitimate business purposes. Backups and cached copies may persist for a limited time.

Security

We use technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse or alteration, including encryption in transit, access controls and reputable infrastructure providers. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

International data transfers

Ocurus operates globally and may process and store your information in countries other than the one in which you live, including the United States. Where we transfer personal information across borders, we take steps to ensure it receives an adequate level of protection, such as relying on appropriate safeguards where required by applicable law.

Your privacy rights

Depending on where you live, you may have the right to access, correct, update, port or delete your personal information, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. If you are in California, you may have rights under the CCPA/CPRA, including the right to know what personal information we collect and to request its deletion; we do not sell personal information. To exercise any of these rights, contact us at [email protected]. You may also update much of your information directly in your account settings, and you can unsubscribe from marketing emails using the link in those emails. You have the right to lodge a complaint with your local data protection authority.

Children’s privacy

The Services are not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

Third-party links and services

The Site and tours may contain links to third-party websites or embed third-party content. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last revised” date above and, where appropriate, provide additional notice. Your continued use of the Site or the Services after an update constitutes your acceptance of the revised policy.

Contact us

If you have any questions, concerns or requests regarding this Privacy Policy or your personal information, please contact us at [email protected].