Privacy Policy

Account data. Your email address, a hashed password (we never store the password itself), your plan, and the date the account was opened. If you sign in through a third-party identity provider, we receive your email address and a stable identifier from them and nothing else.

Property content. The photographs you upload, the room names, order and transitions you set, the areas, aspects, floor level and other facts you type, the messages you send to the route planner, the frames generated for each room, and the renders produced from them.

Billing data. Your plan, billing period, renewal date, the credits issued and consumed, and the invoices raised. Card numbers are entered on our payment provider's own page and are processed by them; we receive a token, the last four digits, the card brand and the expiry, and we never see or store a full card number.

Technical data. IP address, browser and device type, pages requested, timestamps, error reports and, if you accept optional analytics cookies, aggregate usage of screens inside the workspace.

Support data. The content of messages you send us and our replies.

We do not ask for, and ask you not to send us, special category data — anything revealing health, ethnicity, religion, political opinions, trade union membership, sex life or sexual orientation, or biometric or genetic data.

Photographs taken on a phone routinely carry GPS coordinates, the exact time they were taken and a device identifier in their EXIF metadata. For a photograph of somebody's home, those coordinates are the address.

On upload, and before the file is written to storage, we strip EXIF and other embedded metadata from every image, including GPS coordinates, camera serial numbers and timestamps. Only the pixels are kept. The stripping happens on our side and is not optional, so it cannot be forgotten or switched off.

We do not ask you for a property address, we do not derive one, and no address appears in a render unless you type one into an overlay yourself. If you do, that is your decision and your content.

This does not remove information that is visible in the photograph itself. A house number on a door or a street sign through a window will still be visible, in the same way it is visible in any photograph. Check what is in frame before you publish.

To perform our contract with you: creating and running your account, processing your photographs into frames and renders, keeping your properties available to re-open, metering credits, taking payment and issuing invoices, and providing support.

For our legitimate interests: keeping the service secure, preventing fraud and abuse, diagnosing faults, and understanding in aggregate which parts of the workspace people get stuck in so that we can fix them. We balance these against your interests and use the least data that answers the question.

With your consent: optional analytics cookies, and any marketing email you have specifically asked to receive. Consent can be withdrawn at any time, and withdrawing it is as easy as giving it.

To comply with legal obligations: keeping accounting and tax records, and responding to lawful requests from authorities.

We do not use your uploaded photographs, your generated frames, your renders, your room names or the text you type into the planner to train, fine-tune, evaluate or improve any machine learning model, whether operated by us or by anyone else.

Where a third-party model provider processes your content in order to produce your output, they act as our processor under a written contract that prohibits them from using that content for their own purposes, including model training, and requires them to delete it once processing is complete.

We do not sell your content, and we do not share it with anyone for advertising, profiling or dataset building.

Aggregate, non-identifying operational signals — how long a render took, whether it failed, how many rooms a typical property has — are used to run and improve the service. These contain no photographs, no text you wrote and nothing that identifies you or a property.

Hosting and application infrastructure, which stores your account, your properties and your files.

Model providers, which turn your approved frames into a render.

Our payment provider, which takes payment, holds the card details we never see, and tells us whether a payment succeeded.

Email delivery, for account and service messages.

Error and performance monitoring, which receives technical diagnostics.

Each supplier is engaged as a processor under a written agreement that limits them to acting on our instructions, requires appropriate security, and forbids using your data for their own purposes. We may also disclose data where we are legally required to, or to establish or defend legal claims.

Our service is offered worldwide and some of our processors operate infrastructure in other jurisdictions, so your personal data may be transferred internationally.

For transfers out of the United Kingdom we rely on adequacy regulations where they exist, and otherwise on the International Data Transfer Agreement or the UK Addendum to the European Commission's Standard Contractual Clauses. For transfers out of the European Economic Area we rely on adequacy decisions or the Standard Contractual Clauses.

We carry out a transfer risk assessment before relying on those clauses, and apply supplementary measures such as encryption in transit and at rest where the assessment calls for them.

You can ask us for a copy of the safeguards we use for a specific transfer by writing to support@hmsfulhamproperty.com.

Uploaded photographs, generated frames and renders are retained for 30 days from the date you last opened the property they belong to, so that you can re-render or re-export without uploading again. On plans that keep property files, that window restarts each time you open the property.

If you delete a property, or delete your account, the associated photographs, frames and renders are removed from active systems immediately and purged from encrypted backups within 30 days.

Account data is kept while your account is open, and for 90 days after closure so that an account closed by mistake can be restored. After that it is deleted or irreversibly anonymised.

Invoices and accounting records are kept for six years from the end of the financial year they relate to, because tax law requires it. These contain your name, email address, plan and amounts paid — never your photographs.

Support correspondence is kept for two years.

Security and access logs are kept for 12 months.

You have the right to ask us for a copy of the personal data we hold about you; to have inaccurate data corrected; to have data erased; to have our processing restricted while a dispute is resolved; to object to processing carried out for our legitimate interests, including any profiling; to receive the data you gave us in a portable, machine-readable format; and to withdraw consent where consent is what we relied on.

You will not be subject to a decision producing legal or similarly significant effects that is based solely on automated processing. Generating a walkthrough is not that kind of decision — it produces a file for you to review, and you decide whether to use it.

To exercise any of these, write to support@hmsfulhamproperty.com. We respond within one month. If a request is unusually complex we may extend that by two months and will tell you why within the first month. There is no charge, unless a request is manifestly unfounded or excessive.

We may ask you to confirm you control the account's email address before we act, because handing an account's contents to the wrong person would be the worse failure.

If you are in the United Kingdom or the European Economic Area you can complain to a supervisory authority. In the United Kingdom that is the Information Commissioner's Office, at ico.org.uk, telephone 0303 123 1113. We would rather you came to us first, but you do not have to.

If you are a resident of California, or of another state with a comprehensive consumer privacy law, you may request to know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties we disclose to; request deletion; request correction; and opt out of the sale or sharing of personal information and of targeted advertising.

We do not sell personal information and we do not share it for cross-context behavioural advertising. We do not use or disclose sensitive personal information for purposes other than providing the service.

We will not deny you service, charge you a different price or give you a lower quality of service because you exercised a privacy right.

Submit a request to support@hmsfulhamproperty.com. An authorised agent may submit on your behalf with written proof of authorisation. We will verify the request against the information already associated with your account.

Where a Global Privacy Control or similar browser-level opt-out signal is received, we treat it as a valid opt-out of any optional analytics for that browser.

All traffic to and from the service uses HTTPS. Stored files and databases are encrypted at rest. Passwords are stored only as salted hashes and cannot be recovered by us or read by our staff.

Access to production systems is limited to the small number of people who need it, is individually authenticated, requires multi-factor authentication and is logged.

Payment card details are entered directly with our payment provider on their infrastructure. Card data does not pass through, and is not stored on, our servers.

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and will tell you directly without undue delay where the risk to you is high.

No transmission or storage system is completely secure. Use a strong and unique password, and tell us immediately if you think somebody else has access to your account.

This service is not directed at children and is not intended for use by anyone under 18. You must be at least 18 years old to create an account.

We do not knowingly collect personal data from children. If we learn that we hold personal data from a person under 18, we close the account and delete the data.

If you believe a child has provided us with personal data, contact support@hmsfulhamproperty.com and we will act on it.

We use a small number of strictly necessary cookies to keep you signed in, to remember your cookie choice and to protect forms against cross-site request forgery. These do not require consent because the service cannot function without them.

Optional analytics cookies help us see which parts of the workspace people abandon. They are not set unless you choose to accept them on the banner, and the Reject and Accept controls on that banner are the same size, in the same place and take the same single action.

You can change your mind at any time by clearing this site's cookies in your browser, which brings the banner back.

The Cookie Policy sets out each cookie, its purpose and its lifetime.

We may update this policy to reflect changes to the service or to the law. The date this version took effect is shown at the top of the page.

Where a change materially affects how we handle your personal data, we will notify account holders by email at least 14 days before it takes effect, so that you can object, export your data or close your account first.

Continuing to use the service after a change takes effect means the updated policy applies to you.