Privacy Policy

Renderable Technologies OÜ is the company responsible for your personal data (the "data controller") under this Policy.

For privacy questions or requests, contact us at privacy@renderable.io.

Where a real estate agency ("Firm") uses Renderable under a business subscription, Renderable and the Firm may each be responsible for different parts of the data described below - for example, the Firm controls how it manages its brokers' accounts, while Renderable controls how scans are processed into tours.

This Policy applies to renderable.io, the Renderable mobile apps, our web dashboard, and our public tour viewer (together, the "Services"). It covers:

• Firm administrators - the agency that holds a Renderable subscription and manages brokers, billing, and listings.
• Brokers and agents - individual users who capture scans and manage tours through the app and dashboard.
• Tour viewers - buyers, sellers, and other members of the public who view an embedded 3D tour on a listing page. Most viewers browse without creating an account.
• Website visitors to renderable.io.

Creating an account on renderable.io also creates your account in the Renderable mobile app - after signing up on the website, you'll be directed to download the app to complete setup and start capturing scans. The information described in this Policy applies the same way regardless of whether you sign up through the website or the app.

Once a viewer leaves a Renderable tour to browse the rest of a property portal, that portal's own privacy policy applies, not this one.

Pilot program participants

Some Firms take part in Renderable's pilot program, which offers negotiated pricing and other benefits to early adopters in exchange for feedback and real-world testing. The identities and specific terms of pilot participants are covered by separate agreements between Renderable and each Firm, including non-disclosure agreements where applicable, and are not listed here. Participating in the pilot program does not change how personal data is handled under this Policy.

Account information (Firms and brokers)

Company name and business details, billing contact name and email, broker names, work email addresses and phone numbers, role and permissions within the Firm's account, and login credentials (passwords are stored hashed).

Scan and tour data

Photo and video frames captured during a scan, camera motion data used to align frames, the resulting 3D/360° panoramas and tour assets, and any floor-plan or room-dimension data generated during capture. Scans are of rooms and property interiors - brokers are instructed not to scan people, and Section 5 explains what happens if someone is incidentally captured.

Device and technical information

Device type and operating system, app version, camera and motion-sensor readings used to guide capture quality, IP address, and diagnostic or crash logs.

Usage information

Features used, scan counts, timestamps, and error logs, used to operate, secure, and improve the Services.

Payment information

Subscription tier and invoicing details. Full payment card details are collected and processed directly by our payment processor, Stripe - Renderable does not store full card numbers.

Information from tour viewers

Viewing a tour generally doesn't require an account. We may collect limited technical data (IP address, device/browser type, and which parts of a tour were viewed) to keep the viewer secure and working correctly. If a viewer submits an inquiry through a tour, we collect the name, email, and message they provide and share it with the relevant Firm or broker.

We use your information to:

• Create and administer Firm and broker accounts.
• Process scans into 3D tours and host them for viewing.
• Generate and serve the embed links used on property listings.
• Handle billing and manage subscriptions.
• Secure the Services and prevent misuse or fraud.
• Improve our app, capture pipeline, and support - including AI-assisted listing descriptions and an in-app buyer question-and-answer feature (see Section 12).
• Respond to inquiries submitted through a tour.
• Send service updates and, where you've agreed to receive them, marketing communications you can opt out of at any time.

We do not sell your personal data, and we do not use scan or tour imagery to train third-party AI models beyond what's needed to generate your tour.

To make this process transparent, here's what happens when a broker creates a tour:

1. Capture - the broker walks through a room using the Renderable app, which captures a sequence of frames guided by on-device motion sensors. Nothing leaves the device at this stage.
2. Upload - the captured frames are uploaded over an encrypted connection to Renderable's cloud infrastructure, linked to the broker's account and the specific listing.
3. Storage - uploaded frames and the resulting tour assets are stored using Google Cloud Platform infrastructure.
4. 3D reconstruction - the frames are processed by the KIRI Engine API to stitch them into a navigable 3D/360° model. Only the imagery needed to build the model is shared with this provider - account credentials are not.
5. Optional enhancement - on lower-end cameras, frames may be sharpened using an image-enhancement service before reconstruction.
6. Tour assembly - the reconstructed model is combined with any floor-plan data and stored as a completed tour linked to the listing.
7. Access link - a unique, non-guessable link is generated so the tour can be embedded on a property portal listing.
8. Viewing - when someone opens a listing containing the tour, it streams directly to their browser; no Renderable account is required to view it.
9. Deletion - when a Firm deletes a listing or cancels its subscription, the associated scan and tour data is deleted as described in Section 9.

We share personal data only with service providers who need it to run the Services, under contracts that require them to protect it appropriately. We do not share your data with anyone for their own marketing purposes.

Some of our service providers process data outside the country where you're located, including in the United States and China. Where we transfer personal data outside the European Economic Area, we rely on recognized safeguards such as the European Commission's Standard Contractual Clauses, or a provider's certification under the EU-US Data Privacy Framework, to ensure your data continues to receive an appropriate level of protection. You can request more information about these safeguards by contacting us.

We use technical and organizational measures appropriate to the risk, including:

• Encryption of data in transit between the app, dashboard, viewer, and our servers.
• Encryption of stored data at rest where supported by our infrastructure.
• Access controls limiting who can view personal data internally.
• Unique, non-guessable links for tours rather than publicly indexed pages.
• Hashed passwords and, where available, multi-factor authentication for accounts.

No system is completely secure. If we become aware of a data breach that poses a risk to you, we will notify the relevant authorities and affected individuals as required by law.

• Scan, tour, and listing data is kept for the life of the Firm's subscription and the associated listing. Once a listing is taken down or a subscription is canceled, this data is deleted within 30 days, except where we need to keep a copy to resolve a dispute or comply with the law.
• Account data is kept for the life of the account, then deleted within 30 days of closure, other than records we're required to retain for accounting or tax purposes.
• Billing records are retained for as long as required under applicable accounting and tax law.
• Viewer inquiries are kept only as long as needed for the Firm or broker to respond, then deleted or anonymized.
• Security and technical logs are typically kept for a limited period for security and debugging purposes, then deleted or aggregated.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your personal data, subject to our legal retention obligations.
• Restrict or object to certain processing, including direct marketing.
• Receive certain data in a portable, machine-readable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority. In Estonia, this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).

To exercise any of these rights, contact us at privacy@renderable.io. If a Firm controls the data in question - for example, as the employer of a broker - we may direct your request to that Firm or help them respond to it.

You can request deletion of your Renderable account and associated personal data at any time by emailing privacy@renderable.io from the email address associated with your account. We'll confirm your request and complete the deletion within 30 days, except for information we're required to retain for legal or accounting purposes.

Deleting a Firm's account also removes associated broker accounts and listing data, unless the Firm asks us to transfer ownership of specific listings first.

Our 3D reconstruction pipeline and our AI-assisted listing descriptions and in-app buyer question-and-answer feature involve automated processing of scan and tour data, but this processing produces content - a 3D model, a description, a chat answer - rather than legal or similarly significant decisions about individuals. We do not use these tools to make automated decisions that have legal or similarly significant effects on people, and we do not perform facial recognition or biometric identification on scan imagery.

Our web dashboard uses essential cookies needed for login sessions and security. We do not currently use third-party analytics or advertising cookies on the dashboard or public tour viewer. If this changes, we'll update this section and present a cookie choice before any non-essential cookies are set.

The Services are intended for business use by real estate professionals and for general property browsing by adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Policy from time to time. We'll post the updated version here with a new effective date, and for material changes we'll provide additional notice to Firm administrators.

Questions, requests, or complaints about this Policy or how we handle personal data can be sent to: