Privacy Policy

This policy covers Villenza at villenza.com, operated by Oppsol in India. We decide how the data described here is handled, which makes us the controller of it.

To ask anything about your data, or to have it deleted, email [email protected]. A person reads that address.

Account details: your name, your email address, a hashed password (never the password itself), and — if you sign in with Google — the Google account identifier and profile picture Google returns to us. A mobile number only if you choose to add one.

Your content: the photographs you upload, the videos and reels generated from them, listing names, brand-kit settings such as your logo and colours, and anything else you type into the app.

Billing details: which plan you are on, when it renews, and the payment records our payment provider sends back. We never see or store your full card number — Paddle handles the card and we only receive the outcome.

Usage records: sign-ins with the date, IP address and browser user-agent; which pages you opened; and an activity log of actions such as generating a video or executing a plan. We keep these for security, support and abuse prevention, and to see which parts of the product are actually used.

Support messages: anything you send us through the contact form or by email, including the name and email address you give there.

We do not collect special-category data, we do not buy data about you, and we do not run advertising trackers or third-party analytics pixels on the site.

To run the Service: store your library, generate video from your photographs, cut reels, apply your branding, and show you your own account.

To bill you and keep the records tax law requires us to keep.

To support you: to answer the message you sent and to work out what went wrong when a render fails.

To keep the Service secure and to detect abuse, shared accounts and attempts to work around plan limits.

To send you service email — receipts, render notifications, password resets and important changes. Marketing email only goes to people who asked for it, and every marketing message has a one-click unsubscribe that we honour.

Where we rely on a legal basis under GDPR-style law: performing our contract with you (running the Service and billing), our legitimate interests (security, abuse prevention, product improvement), your consent (marketing email, optional cookies), and legal obligation (tax and accounting records).

Generating a video means sending the photographs you selected, together with the text prompt describing the camera move, to an AI provider that runs the model. Generated video comes back to us and is stored in our storage bucket, under your account.

We use Replicate, Inc. (United States) to run the video models, and the same route to run the vision model that reads your photographs for the AI Listing Planner. Your photographs leave our systems for theirs for as long as a generation takes.

Your photographs and videos are not used to train AI models, by us or — to the extent their terms allow us to require it — by the providers we send them to.

If you would rather a particular property never went through an AI provider, do not upload it. There is no way to generate video without sending the photographs to the model.

MongoDB Atlas — the database holding accounts, listings and activity records.

Amazon Web Services (S3) — storage for your photographs, videos and reels.

Replicate, Inc. — runs the AI video and vision models, as described above.

Paddle.com Market Ltd — payments, as merchant of record; it holds your card and billing address, not us.

Resend — sends our transactional and marketing email.

Trigger.dev — runs the background jobs that generate video and cut reels.

Google LLC — only if you choose to sign in with Google, and only the sign-in itself.

Sentry — error reports from the app, which can include a URL and an account identifier.

Each of these is contracted to process data only on our instructions. Some are in the United States and elsewhere outside your country, so your data crosses borders; where the law requires a transfer mechanism, we rely on the standard contractual terms those providers offer.

Nobody, beyond the processors above. We do not sell personal data and we do not share it for anyone else's advertising.

People you invite into your workspace can see that workspace's listings, photographs and videos. That is the point of inviting them; do not invite someone you do not want to see your content.

We may disclose data where the law compels us to, or to protect our rights or someone's safety. We may transfer data as part of a sale or reorganisation of the business, in which case this policy continues to apply until you are told otherwise.

Your photographs, videos and listings stay in your account until you delete them, including after a plan ends. Deleting sends an item to trash, where it can be restored for 15 days before it is removed for good.

Account details are kept while your account exists. Ask us to close it and we erase your account and content, except where we must keep something longer.

Billing and tax records are kept for as long as accounting and tax law requires, which is typically several years, even after an account is closed.

Sign-in and activity records are kept while the account exists, because their whole purpose is to be able to answer "who did this, and when" later.

Support email is kept while it is useful for supporting you.

You can ask us for a copy of the personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Depending on where you live you may also have the right to withdraw consent, to opt out of any "sale" or "sharing" of personal information — we do neither — and not to be discriminated against for exercising a right.

Most of it you can do yourself: your name, email, phone and brand kit are editable in settings, and listings, videos and assets can be deleted from the app.

For anything else, email [email protected]. We will respond within 30 days. We may need to confirm who you are first, which we will do through the email address on the account.

If you think we have handled your data badly, tell us and we will try to fix it. You can also complain to your local data protection authority.

Passwords are stored hashed with bcrypt and are never recoverable in plain text, by us or by anyone else. Traffic to the site is encrypted in transit. Your files are stored in a private bucket and served through short-lived signed links, not public URLs.

No system is perfectly secure. If a breach affects your personal data we will tell you and the relevant authority as the law requires.

We set a session cookie when you sign in, and a short-lived cookie during a Google sign-in to protect against request forgery. Both are strictly necessary — without them you cannot stay signed in.

We store small preferences in your browser's own storage, such as whether you dismissed a prompt. That never leaves your device and we cannot read it.

We do not use advertising or cross-site tracking cookies.

The Service is for people working in property marketing and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, tell us and we will delete it.

We will update this page when what we do changes, and change the date at the top. If a change materially affects how we use your data we will tell you by email or in the app before it takes effect.