Privacy policy

This policy explains which personal data ViewNexo processes, what for, who we share it with and how you can exercise your rights. It covers viewnexo.com, the dashboards, the virtual tours published with ViewNexo and the ViewNexo 360 app, under Ecuador's Organic Law on Personal Data Protection (LOPDP).

In short

  • We keep your account and business data so the service works, and nothing else.
  • Requests a customer sends from a tour belong to the business that receives them; we only store them on its behalf.
  • We do not sell data or use it for third-party advertising. Tours, dashboards and the app carry no third-party tracking tools; the viewnexo.com site measures its visits with Google.
  • You can ask for a copy, a correction or the deletion of your data by emailing us.
  • If you delete your account, we delete your organization and its files.

Who is responsible

ViewNexo is a product of MisterProSoft, based in Ecuador. For any privacy question write to ceo@misterprosoft.com.

When a business uses ViewNexo to receive messages and requests from its customers (for example from a virtual tour), that business is the controller of that data and ViewNexo acts as its processor: we store and process it on the business's behalf and following its instructions.

Which data we process

  • User account: name, email, password (stored hashed, never as plain text) and preferred language.
  • Business data: name, address, phone, WhatsApp, opening hours, social links, product and service catalog, and the 360° photos and other images you upload.
  • Visitor requests: when someone asks for information, a quote or a booking from a tour, we store their name, email or phone, the message and the product or service of interest. They are only sent if the person agrees to be contacted.
  • viewnexo.com contact form: name, email, phone or business (if given) and your message.
  • ViewNexo 360 app: your personal account data and the photos you capture with your phone camera to create 360° images.
  • Technical and security data: IP address and browser or device type of signed-in sessions, and activity logs in the dashboards to prevent abuse.
  • Tour statistics: visits, scenes viewed and points tapped, tied to a random session identifier, device type, language and referring page. They do not identify the person.

What we use them for

  • Creating and maintaining your account, verifying your email and letting you sign in.
  • Publishing businesses' tours, catalogs and pages.
  • Delivering to each business the requests and messages of its customers.
  • Answering whoever writes to us through the contact form, by email or on WhatsApp.
  • Showing each business statistics about its tours.
  • Keeping the service secure, preventing fraud and meeting legal obligations.

The legal bases are the performance of the service contract you accept when signing up, your consent (for example when sending a request or the contact form), our legitimate interest in keeping the service secure, and compliance with legal obligations. We do not sell personal data or use it for third-party advertising.

Who we share them with

  • The business you write to: it receives the requests you send from its tour.
  • Providers that help us operate: the email delivery service (Resend, in the United States), which receives the recipient address and the content of verification and contact emails. The platform, database and images are hosted on servers operated by MisterProSoft.
  • Authorities, only when a law or a valid order requires it.

When a provider processes data outside Ecuador, we do so with adequate safeguards under the LOPDP and only with the data needed to provide the service.

AI assistant

Some businesses enable an artificial-intelligence assistant in their tours, and owners can use an assistant in their dashboard. The messages you write to that assistant, together with the business's public information (catalog, hours, tour scenes), are sent to Anthropic (Claude), in the United States, solely to generate the answer. Anthropic does not use these conversations to train its models.

ViewNexo stores the conversations with a business's assistant to show that business insights (frequent questions, products asked about, requests created); they are deleted together with the business or the organization. Do not type sensitive data into the chat: to contact the business with your details, use the request form or WhatsApp.

Cookies and browser storage

  • A secure session cookie (httpOnly) to keep you signed in to the dashboards.
  • A cookie with the language you chose.
  • A random identifier in the browser's session storage to count visits to a tour; it is cleared when you close the tab.

On the informational pages of viewnexo.com (home, pricing, industries, tutorial and blog) we use Google Tag Manager and Google's measurement tools to know how many people visit them and which pages they view. When you arrive we ask whether you accept that measurement: only if you accept does Google store its own cookies in your browser; if you decline, no cookies are stored and Google receives only identifier-free signals that a page was viewed. In both cases Google receives technical data such as your IP address, device type and the page visited, which it processes on its servers, including outside Ecuador. You can change your answer at any time from “Cookie preferences” at the foot of the page; your choice is kept for 180 days in a first-party cookie.

Virtual tours, business pages, tours embedded on other sites, the dashboards and the ViewNexo 360 app do not load these tools or any other third-party tracking.

How long we keep them

  • Account and business data, while the account is active. If you ask us to delete it, we delete the organization, its files and the accounts that belonged only to it. In the ViewNexo 360 app you can delete your account and photos from the app itself.
  • Tours you delete go to a trash and are permanently deleted, with their images, after 30 days.
  • Email verification codes expire after 15 minutes and are deleted within 24 hours.
  • Visitor requests, until the business deletes them or closes its account.
  • Contact form messages, for as long as needed to answer the enquiry.
  • Backups are kept for at most 14 days.

Your rights

You can ask to access your data, correct or update it, delete it, object to its processing, request its portability or the suspension of processing, and withdraw your consent at any time. Write to ceo@misterprosoft.com with your request; we will answer within the terms set by the LOPDP. If your request concerns a request you sent to a business, you can also contact that business directly.

Security

We use encrypted connections (HTTPS), hashed passwords, isolation of each organization's data, role-based access control, lockout after failed sign-in attempts and daily backups. No system is infallible: if we detect a breach affecting your data, we will notify you and report it to the authority as the law requires.

Minors

ViewNexo is intended for businesses and people over 18. We do not knowingly collect data from minors.

Changes to this policy

If we change this policy we will publish the new version on this page with its date. If the change is significant, we will let you know by email or in your dashboard.