Privacy Policy
Effective Date: October 5, 2026 · Last Updated: October 5, 2026
1. Who we are
This policy describes how Slate360 LLC, an Arizona limited liability company ("Slate360", "we") handles personal information when you submit an inquiry, communicate with us, or view a deliverable. Slate360 captures spaces for contractors, architects, and owners of properties, venues, and businesses, and publishes directed 360 tours, 3D models, aerial imagery, and related deliverables on a link that does not require a login.
2. Information we collect
Inquiry form: name, company, email, phone, timing, a description of the project, a project location (address text, a map pin, or an outline), and an optional photo or PDF attachment. Communications: messages you send us and the replies we send. Site imagery: photographs, scans, and aerial imagery captured for a project. A capture can incidentally include people, vehicles, and neighboring property. Technical data: browser type, device type, IP address, and pages requested, as collected by our host and, when enabled, our analytics tool.
3. How we use information
We use this information to schedule and quote a project, to capture the site, to produce and host the deliverables, and to communicate with you about that work. We also use it to keep the service secure and to meet legal duties.
4. How we share information
We share deliverables with the client and with people the client sends a link to. We do not sell personal information. Service providers process information only to run the service: Vercel hosts the site and application; Supabase provides the database and sign-in; Cloudflare R2 stores files; Resend sends email; Google Maps provides the location map on the request form; PostHog provides product analytics when that service is enabled; Sentry receives error reports. We do not allow these providers to use the information for their own marketing.
5. Share links
Anyone with a share link can view the deliverable. No account is required. The client controls who receives the link. We can revoke a link, and a link can be set to expire. A revoked or expired link stops opening the deliverable.
6. Incidental capture
Site and aerial capture can include people, faces, license plates, vehicles, and neighboring property that are not the subject of the capture. If you are in a capture and want a person, face, or plate blurred or removed, email privacy@slate360.ai. Tell us the project or link and what to change. We will review the request and, where we can do so without destroying the client's record of the work, we will blur or remove it.
7. Cookies
We use a small set of cookies. We do not use advertising cookies, and this site does not show a cookie banner. Sign-in. When someone logs in at /login, Supabase sets session cookies (names beginning with sb-) so the application can keep that person signed in. Related cookies include sb-branding (display preferences after sign-in), slate360_invite_token (an invite during sign-in), and sidebar_state (whether the signed-in sidebar is open). Share links. A password-protected share link can set an unlock cookie. These cookies only remember that the browser was allowed to open that link. Analytics. If product analytics is enabled, PostHog may set a first-party cookie and use local storage to count page views. It does not run on the public deliverable viewer path. It is not used to advertise to you. Maps. The request form loads Google Maps. Google may set or read cookies on Google domains to operate the map. Those are Google's cookies. You can block or delete cookies in your browser. Blocking session cookies will sign you out and keep login from sticking. Blocking third-party cookies can limit the map.
8. Retention
We keep request and project information for the engagement and for the hosting period of the deliverables, and longer if we need it for invoices, disputes, or a legal duty. When it is no longer needed we delete it or strip the identifiers. Share-link cookies last only for the access they record (the unlock cookies are short-lived; the guest cookie can last up to a year).
9. Security
We use access controls on the database, encrypted connections, and limited access for people who operate the service. No method of storage or transmission is perfectly secure.
10. Your choices and rights
You may ask us to access, correct, or delete personal information we hold about you. Email privacy@slate360.ai. We will respond within 30 days. We may need to keep a record the client has engaged us to host, or a record the law requires us to keep. You may also ask us to blur or remove incidental imagery, as described above.
11. Children
The site and the services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, email privacy@slate360.ai and we will delete it.
12. State privacy rights
Depending on the state where you live, you may have rights to know what personal information we hold, to correct it, to delete it, and to appeal a refusal. We do not sell personal information, and we do not share it for cross-context behavioral advertising. To use a state privacy right, email privacy@slate360.ai with the state you live in and the request. We will not discriminate against you for making a request.
13. Changes
We may update this policy by posting a new version and changing the date at the top. The new version applies from that date.
14. Contact
Privacy questions and requests: privacy@slate360.ai. Slate360 LLC.