Privacy Policy

1. What we collect

Account data: name, email, password (hashed), brokerage name, phone, and the brand assets you upload (logo, headshot). Listing content: photos, addresses, prices, and descriptions you submit to generate materials. Billing: payments are processed by Stripe — we never see or store full card numbers. Usage basics: standard logs (IP, browser, pages) to keep the service secure and working, and — when you sign up — how you first found us (the referring site or campaign link).

2. How we use it

To run TourKit: generate your marketing materials, render them in your branding, operate your subscription, send service emails (password resets, invites, receipts), and improve reliability. We do not sell your personal information.

3. Who processes data for us

We use trusted infrastructure providers to deliver the service: Supabase (database & authentication), Render (hosting), Cloudflare (storage & networking), Stripe (payments), Resend (sending service emails), Anthropic (AI caption generation — listing details only, not your account data; the free listing description tool also sends the details you type into it), and Google Analytics (aggregate site usage — see Cookies). Each processes data only to provide their service to us.

4. Cookies

Essential: a session cookie keeps you logged in and remembers how you first arrived at the site. Analytics: we use Google Analytics to understand which pages are useful. It sets first-party cookies (such as _ga); we turn off Google's advertising features and ad personalization. Visitors in the UK, EU, and Switzerland are asked first, and analytics stays off unless you accept. You can also block it with Google's opt-out browser add-on. We don't use advertising cookies and don't sell your data. Our free browser-based tools (like the photo resizer and Fair Housing checker) run on your device — what you paste or upload into them isn't sent to us.

5. Retention & deletion

We keep your content while your account is active so your kits stay downloadable. If you close your account or ask us to, we delete your account data and stored content within 30 days, except minimal records we must keep for tax/legal purposes.

6. Your rights

You can access, correct, export, or delete your data — most of it directly in the app, or by emailing us. We'll respond to verified requests within 30 days.

7. Security

Data is encrypted in transit (HTTPS) and at rest with our providers, access is restricted by per-tenant isolation, and payment data is handled entirely by Stripe.

8. Changes & contact

If this policy changes materially we'll post the update here with a new date. Questions or requests: [email protected].