Last updated 22 September 2026
dotpano helps virtual tour creators keep track of their portfolio: what is due for renewal, what has gone offline, and what is being hosted without a paying client. This page says what we hold about you, why, and how to get rid of it.
dotpano is operated by Techwedia Ltd, 915 High Road, London N12 8QJ, England (company number 16377191). For anything in this policy, write to info@dotpano.com. We are the data controller for the information described here.
| What | Why | Kept |
|---|---|---|
| Your email address and name | To create your account, sign you in, and contact you about the service | Until you delete the account |
| A password, stored only as a salted hash | To check it is you signing in. We never store or see the password itself | Until you delete the account |
| Your portfolio records: tours, clients, agreements, charges and term dates | They are what the product is for | Until you delete them, or the account |
| Whether you agreed to marketing email, and when | To prove we had your permission before sending anything, and to stop the moment you withdraw it. The date you agreed and the date you unsubscribed are kept separately, because they are different facts | Until you delete the account |
| An unsubscribe token | A random value in the link at the bottom of every marketing email, so one press stops them without needing you to sign in. It does nothing else: it opens no account and reads nothing | Until you delete the account |
| Session tokens | To keep you signed in. Only a hash of each is stored | 30 days, or until you sign out |
| Visit counts: screen name, referring host, device size | To see which parts of the product get used | 90 days |
| What you type or say to the assistant on dotpano.com, if you start a conversation | To answer your question, and so we can check the answers it gives and correct them | 90 days, held by ElevenLabs |
| Preferences in your browser or app: theme, guest mode, currency | So the app looks and behaves the way you left it | On your device until you clear it |
We do not run advertising, we do not profile you, and we do not sell anything about you to anyone.
We keep a simple count of which screens get opened, so we can tell what is useful. It runs on our own server, sends nothing to a third party, and sets no cookie. For each visit we record the screen name, the host of the site that linked you here, and whether the window was phone, tablet or desktop sized. Nothing about your portfolio, your clients or your account is included.
To count people rather than page loads without identifying anyone, a visitor key is made by hashing your address and browser together with a secret that is thrown away and replaced every night. That means the key cannot be reversed to an address and cannot be linked from one day to the next. Raw addresses are never stored, and counts older than 90 days are deleted.
We also offer Google Analytics, and it runs only if you agree. The first time you visit we ask; nothing is fetched from Google and no cookie is set unless you choose Allow, and choosing Decline is remembered so we do not ask again. If you do agree, Google sets its own cookies and receives your visit, acting as our processor under their terms; we have switched off the settings that would let them use it for advertising audiences. You can change your mind by clearing the site's storage in your browser, which makes us ask again. The count described above runs either way and still sets no cookie.
Inside the app we send Google the name of the screen and never the address of the page. That is deliberate rather than incidental: a link we email you to set a new password carries a one-time token in its address, and an address is the one thing an analytics tag normally reports. So Google is told “tours” or “renewals”, exactly what our own counter is told, and never the address bar. Nothing about your portfolio, your clients or your account is included either way. The dotpano app for Mac does not run Google Analytics at all.
If your browser sends Do Not Track or Global Privacy Control, nothing is recorded at all.
The site has an assistant in the corner that answers questions about dotpano, by text or by voice. It is an AI rather than a person, and it is run for us by ElevenLabs.
Nothing reaches ElevenLabs until you start a conversation. The assistant is served from this site, so opening a page does not contact them. When you choose Type or Talk and accept the notice it shows, what you type goes to ElevenLabs so the assistant can answer, and so does the sound of your voice if you talk. Like any connection, that one carries your IP address. Nothing else is added: every visitor is given the same label rather than an identifier of their own, and nothing about your dotpano account is sent.
ElevenLabs keeps the transcript, and the recording of a spoken conversation, for 90 days, so that we can read back what the assistant said and fix it where it was wrong. It is not added to your dotpano account and is not used for marketing. The microphone is used only if you choose Talk, and your browser asks you first.
Please do not give the assistant a password, card details or a pairing code. It cannot use them and never needs them. For anything about your own account, write to hello@dotpano.com.
When you record a client, their name and email address are your data about your customer, held so that dotpano can prepare a renewal email for you to send. We process it on your instructions and do nothing else with it. You are responsible for having a lawful basis to hold your own clients' details, and we will delete them on your request.
Renewal messages are composed in the app and handed to your own mail application. dotpano does not send mail on your behalf, does not keep a copy, and never sees the reply.
There are two kinds and they follow different rules.
Service email is sent because of something you did: a password reset you asked for, a payment that failed, a trial about to end, an alert about your own portfolio. You cannot unsubscribe from these, because they are the account working. The alerts about your portfolio are the exception you do control — the notification preferences in Settings switch those off.
Marketing email is us choosing to write to you: product news, a hand getting started, a note that your workspace is still here. None of it is sent unless you agreed to it. The box at sign-up is not ticked for you, and there is a switch in Settings under Account. Every marketing message carries a one-click unsubscribe, which works without signing in and takes effect immediately. Unsubscribing from marketing never stops service email.
dotpano sets no cookies of its own. It stores a small number of preferences in your browser's local storage: your theme, whether you chose guest mode, and your session token if you signed in. These are needed for the service to work and are not used to track you. On dotpano.com, the assistant keeps one entry of its own, recording that you have seen its notice so it does not ask again, and one more records your answer to the analytics question.
Google Analytics does set cookies, and only after you allow it. They are Google's rather than ours, they are not set at all if you decline or simply never answer, and they are the only cookies this site can cause. Everything else above is local storage, which is never sent anywhere.
Fonts are served from this site rather than a third party, so no font provider learns you visited.
dotpano is built to connect to Matterport, Realsee, Stripe and Xero on your instruction. When those connections are live, we hold the access tokens those services issue so we can read your tours and prepare draft invoices. Tokens are stored encrypted, we never ask for your password to any of them, and disconnecting stops the access. As of the date above, these connections are not yet enabled.
dotpano tour importer is an extension for Google Chrome, and it exists because Realsee will not let our server ask for your tours on your behalf. It runs on your own computer, in your own browser, and only on your own Realsee dashboard. It can also read a Matterport dashboard, and Chrome asks your permission for that site the first time you press the button on one; decline and nothing is read.
When you open that dashboard and press the button, it reads the list of tours the page is already showing you and sends those records to your dotpano workspace: the tour's name, its address, its link, the platform's own identifier for it, the date hosting started and the date it runs out, and whether the platform reports it as live. That is the whole of what leaves your browser, and it goes only to dotpano. It does not read any other site, it does not watch what you browse, it does not see or store your password to either platform, and it sends nothing to anyone else.
On your device it keeps one thing: a token that lets it write to your workspace and do nothing else. It is not a sign-in — it cannot read your portfolio, reach your billing, or delete your account — and removing the extension, or unpairing it in dotpano, ends its access. There is no advertising, no analytics and no tracking of any kind in the extension.
Under UK and EU data protection law you may ask us for a copy of what we hold, ask us to correct it, ask us to delete it, object to how we use it, or ask for it in a portable form. Write to info@dotpano.com and we will respond within one month.
You can delete your account yourself at any time from Settings → Account. Doing so removes the account and the records belonging to it. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.
Data is stored on our hosting provider's servers in Singapore. Conversations with the assistant on dotpano.com are the exception: they are handled by ElevenLabs in the United States. We keep what is listed above for as long as your account exists. When you delete the account, the account and its records are removed; ordinary server logs and backups may retain traces for a short period before they age out.
dotpano is a business tool and is not intended for anyone under 16.
If this policy changes in a way that matters, we will say so in the app before the change takes effect. The date at the top always reflects the current version.