privacy.

who we are

panoload is operated by vizbase ltd, a company registered in latvia ("we", "us"). for the purposes of this policy and applicable data protection law, vizbase ltd is the data controller of your personal data.

data protection contact: hello@panoload.com.

what we collect

• account info — your email and name from sign-up (google oauth, magic link, or password).
• content you upload — panoramas, generated images, and shots. stored on vercel blob, accessible only to you.
• billing data — your stripe customer id and invoice history when you subscribe or top up. payment card details are handled directly by stripe; we never see them.
• technical data — basic request logs (ip address, user agent, timestamps) for security, debugging, and abuse prevention.
• session cookie — a single auth.js cookie to keep you signed in. no analytics or marketing trackers.

how we use it

• provide and operate the panoload service.
• process payments and manage your subscription, credits, and refunds.
• send transactional email (sign-in links, email verification, billing receipts).
• route your generation and upscale requests to ai providers (openai, freepik) on your behalf.
• investigate abuse, debug errors, and secure the service.
• comply with legal obligations (tax, accounting, lawful requests).

we don't sell your data. we don't train ai models on your panos or shots. we don't embed third-party advertising or analytics scripts.

legal basis (gdpr article 6)

• contract — to provide the service you signed up for.
• legitimate interests — to secure the service, prevent abuse, and improve performance.
• legal obligation — tax records, anti-fraud, and lawful requests.
• consent — only where explicitly asked. you can withdraw it at any time.

who else has access

we use these subprocessors to operate panoload. each processes only what they need to perform their function:

• stripe (us / ie) — payments, billing.
• vercel (us) — hosting, blob storage, request logs.
• neon (us / eu) — postgres database.
• resend (us) — transactional email.
• openai (us) — image-to-360 generation. images you submit are sent to openai per their api terms.
• freepik / magnific (es / eu) — upscaling. images you submit are sent to freepik per their api terms.
• google (us) — only if you sign in with google oauth (we receive your email and basic profile).

international transfers

some subprocessors are based outside the european economic area (mostly the us). we rely on the eu commission's standard contractual clauses (sccs) and/or adequacy decisions to ensure your data is protected to eu standards when it's transferred.

how long we keep it

• account data — until you delete your account.
• uploaded content — until you delete it or your account.
• billing records — up to 7 years to satisfy tax and accounting obligations.
• request logs — up to 30 days on vercel.

your rights

under gdpr you have the right to:

• access — request a copy of the personal data we hold about you.
• rectify — correct inaccurate or incomplete information.
• erase — delete your account and associated data ("right to be forgotten").
• restrict — limit how we process your data while a question is resolved.
• portability — receive your data in a machine-readable format.
• object — to processing based on legitimate interests.
• withdraw consent — where we rely on it.
• complain — to the latvian data state inspectorate (dvi.gov.lv) or your local supervisory authority.

email hello@panoload.com to exercise any of these. we respond within 30 days.

security

data is encrypted in transit (tls) and at rest using provider defaults. internal access is limited on a need-to-know basis. we don't store payment card details — stripe does. if a breach occurs that affects your data, we'll notify the relevant authorities and affected users without undue delay, as required by gdpr.

children

panoload is not intended for users under 16. we don't knowingly collect data from minors. if you believe a minor has signed up, contact us and we'll delete the account.

changes to this policy

we may update this policy. material changes will be posted here with a new "last updated" date. for substantial changes affecting your rights, we'll email active subscribers at least 14 days before they take effect.

contact

questions or requests: hello@panoload.com.

vizbase ltd · latvia · panoload.com