Privacy Policy

Trident Tours is a Vobius Labs product based in Calgary, Alberta, Canada. We create interactive 3D walkthroughs of homes, vacation rentals, rental properties, new builds and renovations, and yachts and other vessels — on-site in the Calgary area, on-site elsewhere by schedule, or virtually from photos and video using our own software.

Trident Tours (Vobius Labs) is responsible for the personal information described in this policy and is the "controller" for the purposes of EU and UK data protection law. Questions or requests go to labs@vobius.com.

We collect only what we need to quote, book, capture, deliver and support your project:

• Contact details: your name, email address and, if you give it, your phone number and company.
• Property or vessel details: address or berth location, size, access instructions, gate or lockbox details, and listing links you share.
• Booking details: service, package, preferred dates and time windows, property time zone, add-ons, notes and your booking reference.
• Payment status: whether a booking or membership is paid, the amount and the Stripe reference. We never receive or store full card numbers.
• Media: photos, video, 3D scans and floor plans we capture on site, and any photos, video or documents you upload for a virtual build.
• Account data: login email, password (stored only as a secure hash by our authentication provider), profile details and membership plan.
• Messages: what you send us through the contact form, email or WhatsApp.
• Technical data: IP address, browser and device type and basic request logs, used to run and secure the site and to prevent abuse.

A 3D capture records everything visible in a space. That can include furniture, artwork, family photos, documents, screens and other belongings of the people who live or work there.

• Before capture, the client is responsible for clearing personal items, documents and valuables they don't want recorded, and for making sure no people or pets are in the spaces being captured.
• If the property is occupied by someone other than the client (for example a tenant or guest), the client must give proper notice and obtain any consent required by law or the lease before we arrive.
• On request, we will blur or remove faces, documents, licence plates, photographs and other identifying details from deliverables. Ask before delivery or within the correction period.

• To prepare quotes, hold capture slots, confirm bookings and take payment.
• To capture, process and build your 3D walkthrough, photos, video and floor plans.
• To host and deliver your files through a private delivery portal and your client dashboard.
• To send service emails: booking references, payment receipts, schedule changes and delivery notices.
• To answer your questions and provide support.
• To keep the service secure, prevent fraud and abuse, and meet legal, tax and accounting obligations.

We do not use your property media to train third-party AI models, and we do not send you marketing without your consent.

• Contract: to provide the services you book and manage your account.
• Legitimate interests: to secure the service, prevent abuse, improve our work and keep business records — balanced against your rights.
• Legal obligation: to keep tax and accounting records.
• Consent: for optional analytics or marketing, if we ever offer them. You can withdraw consent at any time.

We share information only with providers that help us run the service, under agreements that limit their use of it:

• Stripe — card payments and memberships. Stripe collects your card details directly; we never see card numbers.
• Lovable and Supabase — website hosting, database, authentication and private file storage.
• Our email delivery provider (Lovable's managed email service) — sends booking, payment and delivery emails.
• WhatsApp (Meta) — only if you choose to message us there.

We may also disclose information if required by law, to protect our rights or safety, or as part of a business transfer, in which case this policy continues to apply.

We do not sell, rent or trade your personal information, property details or media to anyone, and we do not share it with third parties for their own marketing.

Deliverables are stored in private storage. They are reached only through your delivery link or signed-in dashboard, and each file download uses a short-lived signed link. Files stay locked until the related booking is paid.

You control sharing. When you send your tour link to buyers or guests, embed it on a listing or website, or post it to a listing service, anyone with that link can view it. We can replace your delivery link if it has been shared too widely.

• Hosted tours: 12 months from delivery are included. You can extend hosting by a year (currently $149 CAD). When hosting ends the tour goes offline.
• Source captures (raw scans, photos and video used to build your tour): deleted within 90 days of delivery unless you ask us in writing to keep them longer.
• Billing and payment records: kept for up to 7 years to meet Canadian tax and accounting requirements.
• Booking records, messages and account data: kept while your account is active or as long as needed to provide service and resolve disputes, then deleted or anonymised.
• Security logs: kept for a short period, then deleted.

We're based in Canada, and our providers may store or process information in Canada, the United States and other countries. Where information leaves your country — including the EU or UK — we rely on our providers' safeguards, such as standard contractual clauses, and require them to protect it to a comparable standard.

Canada (PIPEDA) and Alberta (PIPA): you can ask to see the personal information we hold about you, ask us to correct it, and withdraw consent (subject to legal or contract limits). You may complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.

EU and UK (GDPR / UK GDPR): you also have the right to erasure, restriction, data portability and to object to processing based on legitimate interests, and the right to complain to your local data protection authority.

To make a request, email labs@vobius.com. We may need to verify your identity. We respond within 30 days, and tell you if we need more time where the law allows.

We currently use only strictly necessary cookies and local storage — for example, to keep you signed in and to remember your booking progress. These don't require consent.

We don't use advertising or analytics cookies today. If we add analytics, we will ask for your consent first where the law requires it, and update this policy.

Our services are for adults booking on behalf of themselves or a business. We don't knowingly collect information from children under 16. If you believe a child has given us information, contact us and we will delete it.

We protect information with encrypted connections, access controls that limit staff and clients to the records they're allowed to see, private file storage and signed download links. No system is perfectly secure.

If a breach creates a real risk of significant harm, we will notify affected people and the relevant regulators as required by Canadian law and, where applicable, GDPR.

We may update this policy as our services change. We'll post the new version here with a new "Last updated" date and, for significant changes, let account holders know by email.