Privacy Policy

Last updated: August 12, 2026

This Privacy Policy explains how See360 ("See360", "we", "us") collects, uses, and shares information when you use our website and services (the "Service"). By using the Service, you agree to this Policy.

1. Information we collect

• Account information — dealership name, your name, email, password (stored hashed), and role.
• Inventory data — the vehicle/boat listings, specifications, images, and video you upload or that we import from the inventory feeds you connect.
• Usage & viewer analytics — how you use the dashboard, and anonymous/aggregated interactions with your embedded viewers (e.g. views, spins, hotspot clicks) to power your analytics.
• Payment information — subscription and billing details are processed by our payment processor (Stripe). We do not store your full card number; we receive limited billing metadata (e.g. plan, status, last four digits, expiry).
• Device & log data — IP address, browser type, and log/diagnostic data collected automatically for security and reliability.
• Communications — messages you send us and your email preferences.

2. How we use information

• Provide, operate, secure, and improve the Service, including generating 360° frames, panoramas, and galleries and delivering embeddable viewers.
• Process subscriptions, trials, billing, and renewals.
• Send transactional messages (verification, receipts, service and security notices) and, if you opt in, marketing emails.
• Provide analytics to you, prevent fraud and abuse, and comply with legal obligations.

3. Legal bases (EEA/UK)

Where the GDPR/UK GDPR applies, we process personal data to perform our contract with you, for our legitimate interests (operating and securing the Service), to comply with legal obligations, and with your consent (e.g. marketing).

4. How we share information & subprocessors

We do not sell your personal information. We share it with service providers who process it on our behalf under contract, including (list to be confirmed):

• Stripe — payment processing and subscription billing.
• Resend — transactional and (if opted-in) marketing email delivery.
• Cloudflare — content delivery and media storage (R2).
• Railway — application hosting and database.
• Vercel — website/frontend hosting.
• Anthropic — AI features (e.g. plain-English import rules). Only the data needed for the feature is sent.

We may also disclose information to comply with law, enforce our Terms, protect rights and safety, or in connection with a merger, acquisition, or sale of assets. Your embedded viewers are, by design, publicly accessible on the websites where you place them.

5. Cookies & tracking

We use essential cookies to keep you signed in and to secure the Service, and limited analytics to understand usage. See our Cookie Policy for details and choices.

6. Data retention

We retain account and inventory data for as long as your account is active and as needed to provide the Service. After account closure we may retain data for a limited period to comply with legal, tax, and security obligations, then delete or anonymize it. Verification and password-reset tokens are short-lived.

7. Security

We use industry-standard measures including encryption in transit, hashed passwords, access controls, and tenant isolation. No system is perfectly secure; we cannot guarantee absolute security.

8. Your rights & choices

Depending on your location (including under GDPR/UK GDPR and the CCPA/CPRA), you may have rights to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. You can update account details in-product, unsubscribe from marketing emails via the link in each email, and contact us to exercise other rights. We will not discriminate against you for exercising your rights. To make a request, email [email protected]; we may verify your identity first.

9. International transfers

We and our providers may process data in the United States and other countries. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

10. Children

The Service is for businesses and is not directed to individuals under 18. We do not knowingly collect personal information from children.

11. Changes

We may update this Policy. Material changes will be posted here with a new "Last updated" date and, where appropriate, notified to you. Your continued use after the effective date constitutes acceptance.

12. Contact

Privacy questions or requests: [email protected]. See360, California, USA.