Privacy Policy
Last updated: 8 September 2026
PLANS YAZAMOT AND INTERNET (2010), a sole proprietorship of Sharon Cohen registered in Israel, trading as Plans 360 operates Plans 360. This policy explains what data we collect, why, and your rights — under Israel's Protection of Privacy Law (incl. Amendment 13) and the GDPR for users in the EU.
1. What we collect
Account: name, email, organization name, password (hashed), language. Content: the scan files and photos you upload, the tours built from them, property details and branding you enter. Usage: access logs, IP address, browser type, aggregate tour view statistics (viewers are not identified). Enquiries: messages sent through tour forms (leads) — delivered to the tour owner.
2. Why we use it
To provide the service (processing and hosting tours), manage your account and subscription, send operational messages (verification, archive reminders, tour ready), secure and improve the system. We do not sell personal data and do not use your content for advertising.
3. Legal bases (GDPR)
Performance of a contract (providing the service), legitimate interests (security, abuse prevention, improvement), legal obligations (billing and tax), and consent — e.g. for non-operational emails.
4. Processors
Vercel (application and file hosting, US/EU), Neon (database, Frankfurt), Paddle (payments and invoicing — an independent controller for payment data), Resend (email delivery), and where needed cloud processing infrastructure (AWS, Frankfurt) for building tours. All are contractually bound to data protection.
5. Retention
Account data — while the account is active and up to 30 days after deletion. Raw source files — up to 30 days after a successful build. Tour outputs — as long as the tour exists (including in the archive). Billing records — 7 years as required by law.
6. Your rights
Access, rectification, erasure, portability, restriction and objection — write to office@plans360.app and we respond within 30 days. EU users may also contact their supervisory authority.
7. Security
Encryption in transit (HTTPS) and at rest, hashed passwords, full isolation between organizations, unguessable tour links, backups and access control. In case of a security incident we notify affected users and authorities as required by law.
8. Cookies
We use strictly necessary cookies only (sign-in session, preferences). No advertising cookies. If analytics are added they run only with consent.
9. Tour viewers
Opening a tour requires no registration. Aggregate view data is collected for the tour owner. The "schedule a visit" form passes the entered details directly to the tour owner, who is responsible for handling them.
10. Contact
PLANS YAZAMOT AND INTERNET (2010), a sole proprietorship of Sharon Cohen registered in Israel, trading as Plans 360 · office@plans360.app · plans360.app. We update this policy as needed and show the date at the top of the page.