Skip to content

Privacy policy

Last updated: 2026-07-28

This document explains what personal data we process, what for, and what you can require from us. It is written to be understood without a lawyer.

The short version: we use your data to provide the service and to bill you. We do not sell personal data, we do not share it for advertising, and we do not train artificial intelligence models on your content or on your visitors' data.

This service is provided by Jean Carlos Heli Mantilla Soles, tax ID 23.608.649-6, registered at Los Cóndores 2980, Iquique, Chile.

1. Who is responsible for what

Two things need separating, because the rules differ:

Your customer account data. Here we are the controller: we decide what we keep and what for.

Data of people who visit your showroom and leave an enquiry. Here you are the controller and we are the processor: we handle it solely on your instructions, to deliver it to you and store it for you. You decide what to do with it and you answer to that person.

2. Your account data

We process:
- Your name and email address.
- Your password, always stored hashed. Nobody on our team can read it.
- Your time zone and language, so dates and text display correctly.
- A record of your sign-ins, with date and IP address, for security.
- Your subscription status and billing history.

What for: to give you access, bill you, notify you about important account matters and detect unauthorised access.

Lawful basis: performance of the contract you have with us, and our legitimate interest in keeping the service secure.

3. What you upload

The panoramas, photos, plans, text and project data you load are stored so they can be shown in your showroom. We process them technically (compressing them and generating versions at different sizes) so they load quickly.

If identifiable people appear in that material, it is for you to hold their permission.

We do not review your content unless we receive a report or the law requires it.

4. Data of showroom visitors

When someone visits a showroom we process:
- Visit data: page viewed, date, device type, approximate country and where they arrived from. This feeds the statistics the showroom's owner sees.
- The enquiry the person voluntarily types into the form: name, phone, email and their message.

We do not use advertising cookies, we do not build behavioural profiles and we do not track anyone across different sites.

If you are a visitor and want to see, correct or delete what you left, start with the company that owns that showroom, as they decide about that data. If you get nowhere, write to us and we will help you reach them.

5. Payment data

We never see or store your card number. Payment is handled by an external gateway that receives those details directly.

All we get back is what we need to know you paid: a transaction identifier, the amount, the currency, the date and the status.

Depending on the country you subscribe from, payment is processed by Flow (Chile) or Lemon Squeezy (rest of the world). In Lemon Squeezy's case they act as merchant of record and issue the tax document, so they are also responsible for the billing details you give them.

6. Signing in with Google

You can sign in with your Google account instead of creating a password. If you do, Google gives us only your name, email address, profile picture and an account identifier.

We use that data solely to create your account, identify you at sign-in and show your name in the dashboard.

We never sell that information, we do not use it for advertising, we do not share it with third parties other than the providers needed to run the service, and we do not use it to train artificial intelligence models. We do not request access to your Gmail, your contacts or your Google files.

You can disconnect your Google account from your dashboard or from your Google account security settings. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

7. Cookies

We use the bare minimum:
- A session cookie, to keep you signed in. Without it the dashboard cannot work.
- A security cookie that protects forms.
- A language preference, if you pick one other than your browser's.

We use no advertising cookies and no third-party tracking, so you will not see a consent banner asking permission for something we do not do.

8. Who we share it with

Only the providers we need for the service to work, and each one sees no more than its own part:
- Hostinger: the server running the application and the database.
- Cloudflare: domain name resolution and storage of images and video.
- Resend: delivery of system email, such as verifying your account.
- Google: sign-in, if you choose to use it.
- Flow and Lemon Squeezy: payment processing.
- Telegram: only if you switch on notifications through that channel.

We may also hand over data where a competent authority legally requires it, and in that case we tell you unless the law forbids us from doing so.

If we ever sell the company, the data would pass to the buyer under the same obligations, and we would tell you beforehand.

9. Where it is stored and international transfers

The main server is in Brazil. Images and video are stored on Cloudflare's network, and some of our providers operate from the United States and Europe.

That means your data may leave your country. When it does, we rely on the appropriate legal transfer mechanisms, such as standard contractual clauses, and we choose providers with equivalent protection commitments.

10. How long we keep it

  • Account data and your content: while the account is open, and for up to thirty days after you close it.
  • Access and security logs: up to twelve months.
  • Billing records: the period tax law requires, which in Chile is six years.
  • Enquiries left by visitors: while the customer owning the showroom keeps them, or until they ask us to delete them.

Backups rotate on their own: deleted data may survive in a backup for a few more weeks before disappearing entirely.

11. Your rights

You can ask us at any time to:
- See what data of yours we hold.
- Correct anything that is wrong.
- Delete it.
- Take it away in a format you can use elsewhere.
- Stop processing it for a given purpose, or object to that processing.

Write to us and we do it. We do not charge for this and we will not ask you for a reason. We may ask you to confirm your identity, because handing your data to whoever claims to be you without checking would be worse.

If you believe we did not answer properly, you can complain to the data protection authority that covers you.

12. Security

We encrypt traffic with HTTPS, store passwords with a hashing algorithm built for the job, rate-limit sign-in attempts, and the administration panel uses a second factor.

Even so, no system is infallible. If a breach occurs that puts you at risk, we tell you and notify the authority within the deadlines the law sets.

13. Minors and changes

The service is not aimed at minors and we do not knowingly collect data from minors. If we learn we hold a minor's data, we delete it.

If we change this policy materially, we email you before the change takes effect and update the date in the header.

How to reach us

For any question about these documents, or to exercise your rights over your data, write to us at privacidad@viewroom3d.com. We reply within the deadlines the law sets and, in any case, as soon as we can.