Privacy policy
Make360 turns photos taken with your phone into 360° images and builds property tours with the floor plan. This page explains what the system keeps, why, with whom, for how long, and what you can delete.
What is collected
- The capture photos. Sent to the server to be stitched. Each photo goes with three angles — where the phone was pointing — which is what makes aligning them possible.
- The stitched panorama, the floor plans and the tours you create, with the position you mark for each room.
- The property's location, if you allow it. During the capture the app reads the device's position (latitude and longitude) and the name of the place (neighborhood and city), to show on the map where the property is. It goes with the 360 photo and you can correct or delete it in the property. It is optional: without permission the capture works the same, and the position can be marked by hand on the map. The location is only read with the app open, during the capture — never in the background. For a ready-made 360 photo you upload, the position recorded by the camera itself is used, if there is one.
- Your account, if you create one: email and an optional name. The password is kept by our authentication provider only as a cryptographic derivation; it cannot be read, only replaced.
- Your subscription: the plan, its status and expiry. Payment is made through Apple or Google, in your device's store, or through the website's payment platform. Make360 never receives or keeps your card number.
- A random device code, created by the app itself, used only to count the photos of the free plan. It is not the device's advertising identifier and cannot track you in other apps.
- The device's notification address, if you turn notifications on: it is how we tell you when a panorama is ready or when there is a problem with the subscription.
- Support tickets you open in the app: the subject, the messages exchanged and the device model, to understand the problem. They are kept while the account exists.
- When buying on the website: the email you provide to receive access, the name, phone number and CPF (Brazilian tax ID) required by the payment platform, and the answers to the questionnaire.
Who processes the data
For the service to work, some providers process data on our behalf, only for that: Amazon Web Services (image storage and processing, in Brazil), Supabase (accounts and sign-in), Apple and Google (stores, payments and delivery of notifications), RevenueCat (status of subscriptions bought in the stores), Cakto and Stripe (payments on the website), OpenStreetMap (the map images, loaded by the device when you open the property map) and the email sending service. Nothing is sold, rented or handed over to third parties for advertising.
Who sees what
A panorama, tour or catalog can only be opened through a signed address, created when you ask for the link. The address cannot be guessed and does not show up in search engines. Anyone who receives the link can open it — treat it as you would the image itself.
For how long
- Panoramas, floor plans and tours are kept while you keep them. Deleting them in the app removes them from the server, and the link stops working.
- The original capture photos are discarded after stitching, unless the diagnosis of a failure requires keeping them.
- Account data is kept while the account exists.
- If a paid subscription ends and is not renewed, the properties beyond the free plan go offline. After 90 days without a paid plan, the account and all its files are deleted — we warn you by email 15 and 3 days before.
- People who start a purchase on the website and don't complete it have their data deleted in 30 days.
Your rights
Under Brazil's data protection law (LGPD) you may request access, correction, deletion and portability of your data. You can delete the account yourself in the app, under General → Privacy and data → Delete account: this removes the account, the panoramas, the tours and the related links. For other requests, write to the contact below.
Security
Communication with the server is encrypted (HTTPS), passwords are never stored in plain text and public links are signed, so knowing the identifier of a job is not enough to open it.
No system is immune to failures. If there is an incident affecting your data, you will be notified.
Contact
Questions about privacy or requests about your data: pensarparaempreender@outlook.com.