Privacy Policy
We are committed to protecting your personal information and being transparent about how we collect, use, and share it.
Last updated: September 18, 2026
This policy applies to LUXOS LLC DBA VISTOURA (“Vistoura,” “we,” or “us”), a photography, videography, drone, and virtual tour production company.
1. Information We Collect
Personal Information
When you create an account, book a service, or contact us, we may collect the following personal information:
- Identity information: Full name, email address, phone number, and company name
- Account credentials: Username and encrypted password
- Billing information: Billing address and payment details processed securely through Stripe (we do not store full credit card numbers)
- Service details: Property addresses, project descriptions, scheduling preferences, and deliverable requirements
- Communications: Messages, support tickets, and correspondence with our team
Usage Data
We automatically collect certain information when you visit or use our platform, including:
- IP address, browser type and version, operating system, and device identifiers
- Pages visited, time spent on pages, click patterns, and referring URLs
- Date and time of access, session duration, and interaction data
- Geographic location data (city/region level, derived from IP address)
Cookies and Similar Technologies
We use cookies, web beacons, and similar tracking technologies to collect usage data, remember your preferences, and improve your experience. See Section 6 for detailed information about our cookie practices.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service delivery: To process bookings, match you with qualified operators, coordinate scheduling, and deliver visual content
- Account management: To create and maintain your account, authenticate your identity, and manage your preferences
- Payment processing: To process transactions, send invoices, and manage billing through our payment processor, Stripe
- Communication: To send booking confirmations, status updates, delivery notifications, and respond to support inquiries. SMS requires separate, recorded permission for the selected message type; a service request or purchase alone is not SMS consent.
- Platform improvement: To analyze usage patterns, troubleshoot issues, and enhance our services, features, and user experience
- Marketing: To send promotional emails, newsletters, and offers (with your consent, and you may opt out at any time)
- Legal compliance: To comply with applicable laws, regulations, and legal processes
- Safety and security: To detect, prevent, and address fraud, abuse, and security issues
3. Information Sharing
We do not sell your personal information. We may share your information with the following categories of recipients:
- Operators: We share relevant project details (property address, service requirements, scheduling information) with the drone operators and visual professionals assigned to your project
- Payment processors: Stripe processes all payment transactions on our behalf. Your payment information is transmitted directly to Stripe and is subject to their privacy policy
- Cloud and storage providers: We use Dropbox and other cloud storage services to store and deliver visual content
- Analytics providers: We use Google Analytics and similar tools to understand platform usage and improve our services
- Business partners: We may share aggregated or de-identified information with partners for industry analysis and marketing. This does not include mobile numbers, SMS opt-in data, or text messaging consent.
- Legal requirements: We may disclose information when required by law, court order, or governmental request, or when necessary to protect the rights, property, or safety of Vistoura, our users, or others
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
Mobile information and SMS consent
Mobile information, including phone numbers, SMS opt-in data, and text messaging consent, will not be sold or shared with third parties or affiliates for marketing or promotional purposes. The sharing categories above do not authorize sharing SMS opt-in data or consent for another party's marketing.
We use messaging service providers, including CloudTalk and mobile carriers, to deliver the messages you request and process opt-outs on our behalf. They may process information needed to provide those services, not to market their own products to you.
Consumers opt in through our contact form, booking form, or personalized quote confirmation. Each presents a phone field and separate, optional, unchecked service-text and marketing-text boxes. Forms can be submitted with neither box checked. We record the date, time, page, IP address information, phone number, disclosure, and selected message types for every opt-in. Consent records and suppression records are retained as needed to honor your preferences and meet compliance obligations.
Service texts concern your requested services or projects, including inquiries, quotes, scheduling, shoot confirmations, day-of logistics, project updates, and delivery notices with client-workspace links. Only a separate marketing opt-in permits occasional services and offers texts. Reply STOP to opt out or HELP for help. Consultation bookings and general Terms acceptance do not create SMS consent. See the SMS Messaging Terms.
4. Data Security
We implement industry-standard technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure password hashing and storage
- Regular security assessments and vulnerability testing
- Access controls and role-based permissions for internal systems
- Monitoring and logging of system access and activities
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly notifying affected users in the event of a data breach in accordance with applicable law.
5. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Right to access: You may request a copy of the personal information we hold about you
- Right to correction: You may request that we correct inaccurate or incomplete personal information
- Right to deletion: You may request that we delete your personal information, subject to certain legal exceptions
- Right to portability: You may request a copy of your data in a structured, commonly used, and machine-readable format
- Right to opt out: You may opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly
- Right to restrict processing: You may request that we limit the processing of your personal information in certain circumstances
To exercise any of these rights, please contact us at support@vistoura.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.
7. Third-Party Services
Our platform integrates with the following third-party services, each of which has its own privacy policy:
- Stripe: Handles all payment processing. Your payment information is transmitted directly to Stripe and is subject to Stripe’s Privacy Policy.
- Google: We use Google Analytics for usage analysis, Google Maps for location services, and Google OAuth for optional sign-in. These services are governed by Google’s Privacy Policy.
- Dropbox: Used for storing and delivering visual content and project files. Governed by Dropbox’s Privacy Policy.
We encourage you to review the privacy policies of these third-party services to understand how they handle your data.
8. Children’s Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@vistoura.com and we will take steps to delete such information from our systems.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:
- Update the “Last updated” date at the top of this page
- Send an email notification to registered users for significant changes
- Display a prominent notice on our platform when applicable
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes constitutes acceptance of the updated policy.
10. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We aim to respond to all inquiries within 5 business days. For data access or deletion requests, we will respond within 30 days as required by applicable law.
Have questions about our privacy practices?

