Panoramr

Privacy Policy

Last updated: October 7, 2026

Introduction

Welcome to Panoramr’s privacy policy.

This privacy policy is issued by Admin Accelerator Ltd trading as Panoramr. In this Privacy Policy, references to "Panoramr" refer explicitly to Admin Accelerator Ltd and the Panoramr ecosystem.

Panoramr respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website or our platform (regardless of where you visit from) and tell you about your privacy rights and how the law protects you.

1. Important information and who we are

Purpose of this privacy policy

This privacy policy aims to give you information on how Panoramr collects and processes your personal data through your use of our website, including any data you may provide through our website when you subscribe to our services, upload virtual tours, or interact with our APIs.

Our website is not intended for children and we do not knowingly collect data relating to children.

It is important that you read this privacy policy together with any other privacy policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy policy supplements other notices and privacy policies and is not intended to override them.

Controller

Panoramr is the controller for our website data and responsible for your personal data (referred to as "Panoramr", "we", "us" or "our" in this privacy policy).

Contact Details

If you have any questions about this privacy policy or our privacy practices, please contact our data privacy manager in the following ways:

  • Full name of legal entity: Admin Accelerator Ltd trading as Panoramr
  • Company number: 14237476 (registered in England and Wales)
  • Registered office: Boho One, Bridge Street West, Middlesbrough, TS2 1AE
  • Email address:

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

2. The data we collect about you

Personal data, or personal information, means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

  • Identity Data includes first name, last name, username or similar identifier.
  • Contact Data includes billing address, email address and telephone numbers.
  • Financial Data includes bank account and payment card details (securely managed via Stripe).
  • Transaction Data includes details about payments to and from you and other details of products and subscriptions you have purchased from us. For a Vault it includes the country of your billing address, whether it counts as a business payment (it does when you gave a VAT number), any VAT number you gave and the version of the Terms you accepted.
  • Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform. When something goes wrong on our website, in our tour tool or on our servers, we record an error report so that we can fix it. A report holds what went wrong (the error message and where in our code it happened), the address of the page it happened on and of the last five pages you visited before it (without anything after a "?"), your browser type and version, the time, and your account number if you are signed in. It does not record what you type into forms, your password or the files you upload. A report is kept until 30 days after the fault is dealt with, and at most 180 days after the error was last seen. A copy of a report, without your account number, is kept as a private issue in our code repository on GitHub, where only our developers can see it.
  • Profile Data includes your username and password, purchases or orders made by you, tour engagement data, preferences, feedback and survey responses.
  • Usage Data includes information about how you use our website, virtual tours, and creator dashboard.
  • Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties.
  • Photo Location Data is the position that a phone or a camera writes into a photo. We read it when you upload the photo and keep it privately with the panorama: it is taken out of the photo's files before they are stored, it is shown only to you, and it is public only if you choose to use it as the panorama's map location. We use it to suggest the places near where the photo was taken when you link a post or a panorama to a place. Your phone's browser may not send it, and then there is none to keep.
  • Report Data is what you tell us when you report something: what it is about, why, and what you write; your name and email address if you give them (we need an address for some reports, and we use the one on your account if you are signed in); and, for a notice of copyright or a request about an intimate image or a person's privacy, the statements you make and your signature. From a visitor's IP address we keep only a hash made with a secret key, from which the address cannot be read back, and use it only to see that the same report is not sent twice in a day.
  • Immersive Telemetry Data includes spatial viewing metrics from end-users interacting with public 360 tours, processed anonymously.
  • Free Trial Data: on the free try-it page your panoramas are processed in your own browser and are not sent to us unless you choose to upload them. To build the page of a tour you download, the page sends us the names and sizes of your panoramas, which we use to answer and do not store. If you upload the tour to choose its design, we keep it in a guest account, without your name or email address, for a few days (the page says how many) and then delete it with its panoramas, unless you create an account, which then keeps it. A guest tour is private to the browser that uploaded it, and its panoramas are treated like any other upload. A tour kept in your browser (IndexedDB) on an earlier visit stays there until you import or discard it, or its days are up.

3. How is your personal data collected?

We use different methods to collect data from and about you including through:

  • Direct interactions. You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes data provided when you create an account, subscribe to a tier, upload assets, or contact support.
  • Automated technologies or interactions. As you interact with our website and virtual tours, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies.
  • Third parties or publicly available sources. We will receive personal data about you from various third parties, such as analytics providers (e.g., Google based outside the EU) and payment gateways (e.g., Stripe).

4. How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where we need to perform the contract we are about to enter into or have entered into with you (such as processing your tours or maintaining Vault storage).
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal obligation.

Marketing and Opting Out

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us.

5. Disclosures of your personal data

We may share your personal data with internal and external third parties, including companies that we work with to deliver our services (such as cloud hosting via DigitalOcean or Amazon Web Services, and payment processing via Stripe). We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

Place suggestions

When you ask for the places near where a photo was taken, or near where you are now, or you type the name of a place, our server asks the Photon service, which is run by komoot and built on OpenStreetMap data, for matching places. It is sent the words you typed and a position: rounded to about 10 metres to find the places near it, and to about a kilometre as the starting point of a typed search. It is not sent your name, your account, the photo or your IP address: our server makes the request, and names our contact address as the one asking. A position that your browser gives us for "Places near me now" reaches us only when you tap that button, and we do not store it.

Maps

When a page shows a map (a tour's map, the page of a place, the window where you place a pin, the map on a panorama or a post), your browser loads the map itself from Google Maps while our monthly allowance of Google's maps lasts, and otherwise from OpenFreeMap, which draws maps from OpenStreetMap data, or, on a device that cannot draw those maps, from OpenStreetMap's own map server. Like any site your browser fetches from, they receive your IP address and which part of the map is shown, and not your name or your account; Google handles what it receives under its own privacy policy. A tour's map is loaded only when you open it. Your browser asks our server which map to show, and our server counts the maps shown, without who you are.

When you search for a business on the Street View tab of a tour, our server sends the words you typed to Google Places, with our own key, and shows you the businesses it suggests.

Reports about content

A report is read by our administrators. The owner of what was reported is told what we decided and why, and is never told who reported it or what they wrote. Whoever reported is told, at the address they gave, that the report arrived and what we decided, and is not told who the owner is. Where a report is about something that may be illegal we may keep the content and pass the report and the content to the authorities and to organisations that deal with it, such as the National Crime Agency, the Internet Watch Foundation or the National Center for Missing & Exploited Children, and where we do we may not tell the owner.

6. International transfers

We may transfer your data outside the European Economic Area (EEA), particularly when hosting high-resolution 360 geometry on global content delivery networks. Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by utilizing approved safeguards such as specific contracts approved by the European Commission.

The Photon service and the map services named above (Google Maps, OpenFreeMap and OpenStreetMap) are third parties and outside our control, so what they do with the requests they receive is for their operators to say.

7. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

8. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. By law we have to keep basic information about our customers for six years after they cease being customers for tax and other regulatory purposes.

Files that are only in transit, such as the working copy of a panorama while it is being imported, are removed automatically, and within a day if an import is interrupted. When you delete your account, your tours and records are removed at once and the files we hold for you are removed from our storage by a background job, usually within minutes.

The places suggested for a position are kept for 24 hours, under a code that is made from the rounded position and a secret key and without who asked for them, so that asking again from the same spot does not ask Photon again. The address we look up for the page of a place is kept for 30 days.

A report's name and email address are removed 90 days after we decide it, and the hash of a visitor's address after 30 days. We keep the report, what was decided and why, without the name and address, for six years, to answer a challenge or a second look and to show what we did. A notice of copyright or a statement about an intimate image is kept as it was made, with its signature, for as long as we may need it to answer a legal claim.

What you pay for a Vault is kept as a payment record: its date, the price, the VAT, the country of your billing address, whether it counts as a business payment (it does when you gave a VAT number), any VAT number you gave and the version of the Terms you accepted. We keep it for six years after the purchase for tax and regulatory reasons, and it stays when you delete your account, without a link to the account. If you ask for the download of your tour's own design to start before the days in which you can cancel have passed, we keep the time, the words you agreed to, and the IP address and browser you used, with the record of the Vault, which is deleted with your account.

9. Your legal rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to Request access, Request correction, Request erasure, Object to processing, Request restriction of processing, Request transfer, and Withdraw consent.

10. Acceptance of this Policy

By using the Panoramr platform and services, you signify your acceptance of this Privacy Policy. If you do not agree to this policy, please do not use our Services. Your continued use of the Services following the posting of changes to this policy will be deemed your acceptance of those changes.

11. Contact Us

If you wish to exercise any of the rights set out above, please contact us at .

12. Glossary

Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience.

Performance of Contract means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.

Comply with a legal obligation means processing your personal data where it is necessary for compliance with a legal obligation that we are subject to.