aiview360.it Privacy Policy

Welcome to the aiview360.it privacy policy. This policy will help you understand what data we collect, why we collect it and what your rights are. It applies both to registered users of the platform and to visitors of the virtual tours and public booking pages published through the platform.

Data Controller

Now di Gazzotti Mattia
Via Montefiorino 7/B, Bologna, Italy
VAT no. IT03153161207
Email: info@aiview360.it — Certified email (PEC): mattia.gazzotti@pec.it

For some processing activities, described below, Now di Gazzotti Mattia acts not as controller but as data processor on behalf of its clients (real estate agencies, restaurants and other businesses that use the platform).

Data collected

Data provided by the registered user

We collect the data you provide when signing up and using the service:

• First and last name
• Email address
• Password (stored in encrypted form)
• Company name and VAT number (for business users)
• Address, city, province, postcode
• Tax code and SDI code
• Payment information (handled by PayPal)

Data of tour visitors and venue guests

When you visit a virtual tour or a public booking page published by one of our clients, the following may be collected:

• The messages you write to the tour's AI assistant and, if you use the voice feature, the transcription of what you say
• The data you enter to book a table (name, phone, number of people, any notes)
• The contact details you choose to leave in order to be contacted (name, email, phone)
• The opinions and feedback you choose to send at the end of the visit
• Tour browsing data (visit duration, rooms viewed, interactions), used for the client's statistics

For this data the data controller is the client who publishes the tour or the booking page (the agency or the restaurant), while Now di Gazzotti Mattia processes it on their behalf as data processor under Art. 28 GDPR. The specific notice is provided by the client on their own pages; for bookings it is available directly on the venue's booking page.

Data collected automatically

We automatically collect some data while you browse:

• Usage and browsing data
• Technical session cookies
• Display preferences (light/dark theme)
• Cookie preferences

Purposes of processing

• Registration and authentication — management of the user account and access to the platform
• Provision of the service — creation and management of virtual tours with Matterport® integration and, for restaurants, management of bookings, menus and events
• Artificial intelligence — chatbot and contextual voice assistant in the tours, automatic generation of descriptions and translations via OpenAI (server-side processing; the data is not used to train AI models)
• Booking management — collection and transmission to the venue of guests' booking requests, on behalf of the venue itself
• Payment management — processing of subscriptions and transactions via PayPal
• Communications — sending service emails (registration confirmation, account notifications, payment confirmations)
• Content display — integration of Matterport® virtual tours and Google Maps
• Tour statistics — aggregated measurement of tour visits (duration, rooms viewed) for the benefit of the client who publishes them, without advertising profiling

Third-party services

The data is hosted on servers located in the European Union. To provide the service we use the following providers:

Messages sent to the AI assistant are processed by OpenAI, based in the United States: the transfer is covered by the safeguards of the EU-US Data Privacy Framework and by the standard contractual clauses approved by the European Commission. Data sent to OpenAI is not used to train its models.

Cookie Policy

For detailed information on the use of cookies, see our Cookie Policy.

Legal basis for processing

• Consent (Art. 6(1)(a) GDPR) — for analytics, marketing and functional cookies and for sending booking and contact requests
• Performance of a contract (Art. 6(1)(b) GDPR) — for providing the service and managing the account
• Legitimate interest (Art. 6(1)(f) GDPR) — for necessary technical cookies, site security and aggregated tour statistics
• Legal obligation (Art. 6(1)(c) GDPR) — for tax and accounting obligations

User rights (GDPR)

Under Articles 15-22 of Regulation (EU) 2016/679, you have the right to:

• Access your personal data
• Request the correction of inaccurate data
• Request the erasure of your data
• Restrict the processing of your data
• Object to processing
• Request data portability
• Withdraw your consent at any time
• Lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it)

If you have an account, you can also do this yourself on the "Your data" page of the dashboard: you can download all your data at any time in a ZIP file (tables readable in Excel, a JSON file and the uploaded files) and you can request the deletion of your account. On request the account is suspended and the subscription cancelled; after 30 days we permanently delete the account, the company and all linked data (properties, tours, leads, conversations, files). During the 30 days you can still download the data or cancel the request.

To exercise your rights, contact us at info@aiview360.it. If your request concerns data collected by a venue or an agency through the platform (a booking, a contact request, a conversation with the assistant), you can contact that controller directly or us: we will forward the request and provide the necessary assistance.

Data retention

Personal data is kept for as long as needed to provide the service and to meet legal obligations. In particular:

• Account data and uploaded content (properties, tours, leads, conversations, files): until the account is deleted; after the deletion request they remain for 30 days, then they are permanently deleted
• Payments and billing data: 10 years (tax obligations), even after the account is deleted
• Venue guests' data (name and phone number from bookings): until the retention period set by the venue, at most 730 days from the last visit; when it expires, name and phone number are automatically anonymised every night, while aggregated data remains in the counts
• Conversations with the AI assistant and tour sessions: for the duration of the session and for the time needed for the client's statistics
• Contact requests (leads): until the request has been handled by the client who is the controller, and in any case according to their instructions
• Browsing data: 26 months (if analytics is active)
• Technical cookies: duration of the session

Security

We adopt appropriate technical and organisational security measures to protect personal data, including: password encryption (bcrypt), CSRF protection, HTTPS connection, separation of data by client, automatic anonymisation of guest data at the end of the retention period, and access to data limited to authorised staff.

Updates

This Privacy Policy may be subject to change. We recommend checking this page periodically. Substantial changes will be communicated through a notice on the site.