Privacy Policy

1. What we collect

Account data: name, email, password (hashed), brokerage name, phone, and the brand assets you upload (logo, headshot). Listing content: photos, addresses, prices, and descriptions you submit to generate materials. Billing: payments are processed by Stripe — we never see or store full card numbers. Usage basics: standard logs (IP, browser, pages) to keep the service secure and working.

2. How we use it

To run TourKit: generate your marketing materials, render them in your branding, operate your subscription, send service emails (password resets, invites, receipts), and improve reliability. We do not sell your personal information.

3. Who processes data for us

We use trusted infrastructure providers to deliver the service: Supabase (database & authentication), Render (hosting), Cloudflare (storage & networking), Stripe (payments), and Anthropic (AI caption generation — listing details only, not your account data). Each processes data only to provide their service to us.

4. Cookies

We use a single essential session cookie to keep you logged in. No advertising or cross-site tracking cookies.

5. Retention & deletion

We keep your content while your account is active so your kits stay downloadable. If you close your account or ask us to, we delete your account data and stored content within 30 days, except minimal records we must keep for tax/legal purposes.

6. Your rights

You can access, correct, export, or delete your data — most of it directly in the app, or by emailing us. We'll respond to verified requests within 30 days.

7. Security

Data is encrypted in transit (HTTPS) and at rest with our providers, access is restricted by per-tenant isolation, and payment data is handled entirely by Stripe.

8. Changes & contact

If this policy changes materially we'll post the update here with a new date. Questions or requests: [email protected].