Last updated 8 September 2026
dotpano helps virtual tour creators keep track of their portfolio: what is due for renewal, what has gone offline, and what is being hosted without a paying client. This page says what we hold about you, why, and how to get rid of it.
dotpano is operated by Techwedia Ltd, 915 High Road, London N12 8QJ, England (company number 16377191). For anything in this policy, write to info@dotpano.com. We are the data controller for the information described here.
| What | Why | Kept |
|---|---|---|
| Your email address and name | To create your account, sign you in, and contact you about the service | Until you delete the account |
| A password, stored only as a salted hash | To check it is you signing in. We never store or see the password itself | Until you delete the account |
| Your portfolio records: tours, clients, agreements, charges and term dates | They are what the product is for | Until you delete them, or the account |
| Session tokens | To keep you signed in. Only a hash of each is stored | 30 days, or until you sign out |
| Visit counts: screen name, referring host, device size | To see which parts of the product get used | 90 days |
| Preferences in your browser or app: theme, guest mode, currency | So the app looks and behaves the way you left it | On your device until you clear it |
We do not run advertising, we do not profile you, and we do not sell anything about you to anyone.
We keep a simple count of which screens get opened, so we can tell what is useful. It runs on our own server, sends nothing to a third party, and sets no cookie. For each visit we record the screen name, the host of the site that linked you here, and whether the window was phone, tablet or desktop sized. Nothing about your portfolio, your clients or your account is included.
To count people rather than page loads without identifying anyone, a visitor key is made by hashing your address and browser together with a secret that is thrown away and replaced every night. That means the key cannot be reversed to an address and cannot be linked from one day to the next. Raw addresses are never stored, and counts older than 90 days are deleted.
If your browser sends Do Not Track or Global Privacy Control, nothing is recorded at all.
When you record a client, their name and email address are your data about your customer, held so that dotpano can prepare a renewal email for you to send. We process it on your instructions and do nothing else with it. You are responsible for having a lawful basis to hold your own clients' details, and we will delete them on your request.
Renewal messages are composed in the app and handed to your own mail application. dotpano does not send mail on your behalf, does not keep a copy, and never sees the reply.
dotpano sets no cookies of its own. It stores a small number of preferences in your browser's local storage: your theme, whether you chose guest mode, and your session token if you signed in. These are needed for the service to work and are not used to track you.
Fonts are served from this site rather than a third party, so no font provider learns you visited.
dotpano is built to connect to Matterport, Realsee, Stripe and Xero on your instruction. When those connections are live, we hold the access tokens those services issue so we can read your tours and prepare draft invoices. Tokens are stored encrypted, we never ask for your password to any of them, and disconnecting stops the access. As of the date above, these connections are not yet enabled.
dotpano tour importer is an extension for Google Chrome, and it exists because Realsee will not let our server ask for your tours on your behalf. It runs on your own computer, in your own browser, and only on your own Realsee dashboard. It can also read a Matterport dashboard, and Chrome asks your permission for that site the first time you press the button on one; decline and nothing is read.
When you open that dashboard and press the button, it reads the list of tours the page is already showing you and sends those records to your dotpano workspace: the tour's name, its address, its link, the platform's own identifier for it, the date hosting started and the date it runs out, and whether the platform reports it as live. That is the whole of what leaves your browser, and it goes only to dotpano. It does not read any other site, it does not watch what you browse, it does not see or store your password to either platform, and it sends nothing to anyone else.
On your device it keeps one thing: a token that lets it write to your workspace and do nothing else. It is not a sign-in — it cannot read your portfolio, reach your billing, or delete your account — and removing the extension, or unpairing it in dotpano, ends its access. There is no advertising, no analytics and no tracking of any kind in the extension.
Under UK and EU data protection law you may ask us for a copy of what we hold, ask us to correct it, ask us to delete it, object to how we use it, or ask for it in a portable form. Write to info@dotpano.com and we will respond within one month.
You can delete your account yourself at any time from Settings → Account. Doing so removes the account and the records belonging to it. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.
Data is stored on our hosting provider's servers in Singapore. We keep what is listed above for as long as your account exists. When you delete the account, the account and its records are removed; ordinary server logs and backups may retain traces for a short period before they age out.
dotpano is a business tool and is not intended for anyone under 16.
If this policy changes in a way that matters, we will say so in the app before the change takes effect. The date at the top always reflects the current version.