Privacy Policy

Last updated: 16 August 2026

This page explains what Jawla stores when you use it to build a tour, who else sees that data, and how to have it deleted.

What we store

Building a tour and running your account means we store four things: the photographs you upload of a property's interior, a coarse capture location worked out from those photos' EXIF data, the email address on your account, and the 3D room assets Jawla generates from your photos.

How long we keep it, and deleting it

You can delete a listing, its photos and its generated tour at any time from your account — that removes them immediately. If you want everything we hold about your account removed as well, send a written request to support@rondtour.com; we'll remove it and confirm back to you.

Who else sees it

Each of these providers processes data under its own privacy policy; we only send them what's listed above.

• World Labs — Receives the photos you upload for a room, to generate its 3D model. It's the only sub-processor that sees the actual photos.
• Cloudflare — Hosts Jawla and stores your photos, generated 3D assets and account data — there's no separate database vendor.
• Stripe — Processes payments for credit packs and subscriptions. Sees your billing details, not your property photos.
• Resend — Sends account emails — sign-in links and tour-ready notifications. Sees your email address, not your property photos.

Photographing someone's home

Your photos may show the inside of someone's home. Uploading and publishing them is your responsibility, not ours — before you photograph a property and turn it into a public tour, make sure you have the owner's or occupier's permission to do both.

Contact

Questions about this policy, or a deletion request, go to support@rondtour.com.

Who is responsible for your data

The data controller for this service is [PENDING — to be completed before the EU brand launches] (registered company name and address). Until that is published here, treat support@rondtour.com as the contact for anything in this policy, including the requests described below.

What we rely on to process it

We process your photographs, the coarse capture location in them and the 3D rooms we generate in order to provide the service you asked us for — that is performance of our contract with you. The same applies to your email address for account and sign-in messages, and to billing data for payments.

We rely on our legitimate interests for a narrow set of things around that: keeping the service secure, preventing abuse, and keeping the records a business has to keep. Where we ever need something that has no other basis, we will ask you for consent and you can withdraw it at any time.

Sending photographs outside the EEA

This is the transfer to be aware of: the photographs you upload of a property's interior are sent to World Labs, which processes them in the United States. Nothing else you give us leaves the EEA for that purpose — Cloudflare hosts the storage and the app, Stripe sees billing data, Resend sees your email address.

That transfer is made under the European Commission's Standard Contractual Clauses, together with the technical measures described above. The signed data processing agreement covering it is [PENDING — to be completed before the EU brand launches]; a copy is available on request from support@rondtour.com.

Your rights

Ask at support@rondtour.com. We will answer within one month; if a request is genuinely complex we may extend that and will tell you why within the first month. Exercising any of these costs nothing.

• Access — a copy of what we hold about you.
• Rectification — correction of anything inaccurate.
• Erasure — deletion of your data, which you can also do yourself for any listing at any time.
• Restriction — a pause on processing while a dispute is resolved.
• Portability — your data in a machine-readable form, or sent to another provider.
• Objection — to processing we base on our legitimate interests.
• Withdrawal of consent — wherever we relied on consent, without affecting what came before.

Complaining about how we handled it

If you think we have got this wrong, tell us first at support@rondtour.com — most things are faster to fix directly. You do not have to, and it does not affect your right to complain to a supervisory authority: the data protection authority of the EU or EEA country where you live, work, or where you believe the problem happened. In the United Kingdom that is the Information Commissioner's Office.