Privacy Policy

Last updated: September 17, 2026

Visual Property Agent (“we”, “us”) provides photo enhancement and video tour tools for real estate professionals at visualpropertyagent.com (the “Service”). This policy explains what we collect, why, and what happens to your photos.

Who we are. The Service is operated by MADE IN SERENITY, a French limited liability company (SARL) with share capital of €5,000, registered office 42 rue de Paris, 78600 Maisons-Laffitte, France, registered with the Versailles Trade and Companies Register under number 849 494 588. MADE IN SERENITY is the data controller for the personal data described here. Because we are established in France, the EU General Data Protection Regulation (GDPR) applies to everything we do with personal data, wherever you are located. Privacy contact: [email protected].

1. Your photos and videos

Browser-side processing. Cropping, exposure, color, sharpening and quick video assembly (Standard and Cinematic tours) run entirely in your web browser. Those photos are not uploaded to us.

Server-side processing. AI upscaling, HD listing reels and Realistic 3D tours are rendered on our render server. For these features your photos are transmitted over an encrypted (TLS) connection.

Original photos and the public disclosure record. To help you meet image-disclosure rules such as California AB 723 (Business & Professions Code § 10140.8), each server-side job creates a public disclosure page at a unique link on visualpropertyagent.com. Before rendering you confirm that the photos are unaltered originals and that you understand they will be published on that page. The page is accessible to anyone who has the link or QR code and shows: the original photos you uploaded, the property address you entered, the name on your account as the person who confirmed the originals, your DRE licence number if you chose to provide it, the capture date, camera make and model and editing-software tag read from each file, a SHA-256 fingerprint of each file, and a description of what our tools changed. We keep the original photos and this page for 30 days on the free plan and 12 months on paid plans, counted from the creation of the job; the originals are then deleted and the page shows only an archive notice with the file fingerprints. You can ask us to remove a disclosure page earlier by emailing [email protected] — bear in mind that a listing still being advertised may need that link to stay live.

Finished videos are stored so you can download them from your account; you can delete them at any time from My Videos, and we delete them automatically 30 days after your membership ends.

People in photos. Please do not upload photos in which people can be identified (occupants, family pictures, reflections). If you appear in a photo published on a disclosure page and want it removed, write to [email protected].

We do not use your photos to train AI models. Apart from the public disclosure page described above, we share them only with the infrastructure providers that host the Service and run our render server on our behalf. If you have not opted out, we may also display images and videos you generate in our own marketing, as set out in section 2 of our Terms of Service; you can opt out at any time.

2. Account and billing information

When you create an account we collect your name, email address, username and password (stored hashed). If you buy a paid plan, payment is processed by Stripe; we never see or store your full card number. We keep records of your plan, invoices and usage counts (for example how many renders you used this month).

3. Usage data and cookies

We use Google Analytics to understand how the Service is used (pages visited, features used, approximate location, device type). Analytics and marketing cookies are only set after you consent through our cookie banner; strictly necessary cookies (login session, cookie preferences) are always set. You can change your choice at any time via the cookie settings link in the footer. Details of each cookie are in our Cookie Policy.

Some resources are loaded by your browser directly from third parties, which therefore receive your IP address: our web fonts from Google Fonts, and — when you use the in-browser 3D preview — the open-source software library from jsDelivr and the depth model files from Hugging Face. These set no cookies.

Our server and security tools keep technical logs (IP address, browser, requests) for a limited period to keep the Service secure and to investigate incidents.

4. Email

We send transactional emails (account, billing, “your render is ready”). If you opt in, we also send occasional product tips and updates; every such email has an unsubscribe link.

5. Why we use your data (legal bases)

To perform our contract with you (GDPR art. 6(1)(b)): creating and running your account, rendering your photos and videos, creating the disclosure page you request, billing, support and transactional email.
To comply with the law (art. 6(1)(c)): keeping invoices and accounting records, answering lawful requests from authorities.
With your consent (art. 6(1)(a)): analytics and marketing cookies, and product emails sent to free accounts. You can withdraw consent at any time; this does not affect what was done before.
For our legitimate interests (art. 6(1)(f)): keeping the Service secure and preventing abuse, understanding aggregate usage, informing existing customers about our own similar services, contacting real estate professionals about the Service (section 8), and showing results in our marketing under the opt-out licence in our Terms. You can object at any time (section 10).

We do not make decisions about you by purely automated means that produce legal or similarly significant effects. Creating an account and buying a plan require the data marked as mandatory; without it we cannot provide the Service.

6. Who we share data with

Only service providers needed to run the Service, each acting on our instructions:

Hostinger International Ltd (Cyprus) — website hosting, file storage, and the render server located in a United States data centre, where your photos and videos are processed;
Vast.ai, Inc. (United States) — rented GPU servers on which our GPU-based renders (such as Realistic 3D tours) are computed from your photos;
Stripe — payment processing;
Google — Google Analytics (with your consent), and Gmail for some individual correspondence;
Brevo (Sendinblue SAS, France) — delivery of transactional and opted-in product emails;
our bank, accountant and legal advisers, for invoices and accounting records;
public authorities where the law requires it.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

7. Transfers outside the European Union

Our customers are mainly in the United States and part of our infrastructure (the render server, the GPU servers, Stripe, Google) is located there, so personal data is processed in the United States. Where a provider is certified under the EU–US Data Privacy Framework we rely on that adequacy decision; otherwise we rely on the European Commission’s Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards at the address above.

8. If we contacted you without your having an account

We sometimes contact real estate professionals individually about the Service. In that case we hold only professional contact details — name, brokerage, business address, professional email or phone, and the public listing that prompted the contact — taken from public professional sources such as state licensing registers, brokerage websites and public listings. The legal basis is our legitimate interest in presenting a business tool to professionals it is designed for. We keep these details for no more than three years after our last contact. You can object at any time by replying “stop” or writing to [email protected]: we will stop contacting you and keep only the minimum needed to make sure we do not contact you again.

9. Affiliates

If you join our affiliate programme we process your name, email, website, referral and commission records, and the payout details you give us (for example a PayPal or Wise address), in order to run the programme and pay you. Payout records are kept with our accounting records.

10. Your rights

You can access, correct, export or delete your account data at any time from your account page or by emailing [email protected]. Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, to withdraw consent, and to give instructions about what happens to it after your death. You always have the right to object to direct marketing. We will respond within one month.

If you believe we have not handled your data properly, you can lodge a complaint with the French data protection authority, the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr), or with the authority of your own country.

Residents of California (CCPA/CPRA) and of other US states with privacy laws have the right to know what we hold, to request correction and deletion, and to opt out of any sale or sharing of personal information — we do neither. We honour Global Privacy Control signals, and we will not treat you differently for exercising these rights.

11. Data retention and security

Account data: while your account is active, then deleted within 90 days of account deletion.
Invoices and accounting records: 10 years, as required by French law.
Original photos and disclosure pages: 30 days (free plan) or 12 months (paid plans) from the job; file fingerprints are kept afterwards as a record.
Finished videos: until you delete them, or 30 days after your membership ends.
Prospect contact details: up to three years after our last contact.
Cookies: as listed in the Cookie Policy.

All traffic is encrypted; access to the render server is restricted to authenticated jobs.

12. Children

The Service is for professionals and is not directed at anyone under 18.

13. Changes and contact

We will post any changes here and update the date above. Questions: [email protected], or by post to MADE IN SERENITY, 42 rue de Paris, 78600 Maisons-Laffitte, France.