Last updated 9 October 2026
Privacy policy
This policy explains what MiCasaTour does with personal data on the website, in the dashboard, in the scanner app, and when someone walks through a tour. It is written for the GDPR. The service is aimed at businesses.
Who we are
MiCasaTour makes walkable 3D tours of homes for agencies, photographers and developers. For account, billing and website data, we are the controller. Write to support@micasatour.com for privacy requests. The public site is www.micasatour.com and the dashboard is app.micasatour.com.
Our registered company name, office address and tax number are not published on this page yet. Ask for them at the same address, and we will send them.
Two roles
When you create an account, buy credits or write to us, we decide why that data is used. We are the controller.
When you upload a scan or a floor plan, store a private address or a client name, create a personal link, or receive an enquiry from a tour, you decide why that data is used. You are the controller and we process it for you, on the instructions in the Terms of service.
Account and billing
To run your account we keep:
- Your name, email address and the way you sign in (password, magic link, Google or Apple). Passwords are stored by our login provider in a form that is not the password itself.
- Business name, business type, country, VAT ID and billing address.
- Language, logo and brand colour.
- Scanner app device name and when that device last signed in.
- Credit balance, purchases and the credit ledger.
- A Stripe customer id. Card numbers are handled by Stripe. We do not store them.
Tours and properties
We store the scans and sales-plan PDFs you upload, the tour title, listing reference, client name, private address, and the edits you publish. The private address is kept off the public tour and off the preview card that appears when a link is shared.
People who open a tour
A public tour does not use cookies, local storage or a fingerprint, and we do not store the visitor’s IP address. One page load is one visit. Nothing connects two visits from the same browser. We keep coarse figures only: phone, tablet or computer; the browser’s language; the country reported by the network; the domain of the site they came from; and how they moved through the rooms. We use this so you can see which rooms hold attention, and so we can see whether the player works. We do not use it for advertising.
A visit is tied to a named person in only two cases, both started by you or by the visitor:
- You created a personal link and labelled it, often with a person’s name, and they opened it. We record that the link was opened.
- They sent the enquiry form and ticked the box to share that visit with you. The form can include a name, an email, a phone number, a message and preferred viewing dates. You choose whether the form is shown.
Why we use data
- To provide the service you asked for: account, processing, hosting, sharing and support. The basis is the contract.
- To issue invoices and keep tax records. The basis is a legal obligation.
- To keep the service secure, to limit the free tour to one per company, and to understand whether the player works from the coarse visit data above. The basis is legitimate interest. You can object, as described under Your rights.
- To send service emails about your account, tours and credits. You can turn off the ones that are not required to run the service. We do not send a marketing list.
We do not sell personal data.
How long we keep it
- Your account is kept until you delete it. Deletion happens 30 days after you ask, and you can cancel during that time. Tours stop working as soon as you ask.
- After the account is deleted we keep a marker that the free tour was used: the VAT number and, for a company email, the email domain. Addresses at public mail providers are not kept this way. The marker exists so the free tour cannot be claimed again. The rest of the account is deleted.
- Invoices and payment records are kept for as long as tax law requires, including at Stripe.
- A scan that is never processed is deleted 90 days after upload.
- After hosting ends, the original scan is deleted after 90 days and the tour after 12 months, unless you renew.
- Raw visit events are deleted after 90 days. A summary of each visit is kept for 25 months. Daily totals stay with the tour.
- Enquiries are kept until you delete them, and for no longer than 24 months.
Your rights
You can ask for access, correction, export, deletion, restriction, or to object to a use based on legitimate interest. You can also complain to a supervisory authority. In Settings you can export your data as JSON and delete the account. You can also write to support@micasatour.com.
In Spain the authority is the Agencia Española de Protección de Datos, www.aepd.es. In Denmark it is Datatilsynet, www.datatilsynet.dk. You can also contact the authority where you live.
If a person asks you about an enquiry or a personal link, that request is yours to answer, because you are the controller. Deleting the link or the enquiry in the dashboard removes the personal association. We will help where the dashboard does not already do it.
Children
The service is for businesses. It is not directed at children, and we do not knowingly create accounts for them.
Changes
If this policy changes, we will post the new text on this page and change the date above.