How TourIQ handles data.

Who this policy covers

This Privacy Policy applies to TourIQ websites and applications, including the buyer tour, agent account tools, admin tools, support tools, signup, login, SMS verification, and related workflows. It covers buyers, agents, admins, owners, support staff, marketing staff, and website visitors.

Information we collect

• Account and identity data: name, email address, role, password hash, verification status, phone number, SMS verification status, profile photo, brokerage or team name, subscription tier, role grants, and account settings.
• Authentication and security data: session cookies, device/session records, user agent, IP address, approximate city/region/country when security geolocation is enabled, login attempts, rate-limit events, 2FA events, recovery-code state, and security audit metadata.
• SMS and email verification data: phone numbers, email addresses, OTP challenge metadata, expiry/attempt state, and delivery-provider responses needed to send or verify codes. TourIQ stores OTP hashes, not raw reusable codes.
• Public agent profile data: agent name, brokerage, verified phone number, email, public profile photo, bio, tour-guide voice settings, and other information shown to buyers on published tours.
• Listing and tour data: property addresses, MLS IDs, prices, bedrooms, bathrooms, square footage, descriptions, listing photos, station scripts, generated tour stations, QR tokens, tour status, and agent notes entered in the listing workflow.
• Buyer tour analytics: anonymous tour session IDs, an anonymous device identifier stored locally in your browser to recognise return visits, scan source, listing IDs, selected tabs, station selections, audio play/progress/completion and replay events, station played seconds, user agent, scan start/end time, duration, and device type when available. These identifiers are anonymous and are not linked to your identity unless you choose to submit your contact details.
• Lead and contact data: buyer lead name, email, phone, whether the buyer has an agent, messages, marketing opt-in status, support requests, ticket messages, attachments, staff conversations, and staff call metadata.
• Uploaded content: profile photos, support attachments, admin media workspace files, rich-document images, and related file metadata such as name, MIME type, size, and owner.
• Agent voice data: if an agent chooses to clone their voice, the voice recording they submit, the spoken and checkbox consent captured with it, the resulting synthetic voice profile, and per-listing voice settings. Voice cloning is always optional and initiated by the agent.
• Billing and subscription data: selected plan, subscription status, Stripe customer/subscription/charge identifiers, plan limits, period dates, and related billing metadata. Payments are processed by Stripe; TourIQ never stores full payment card numbers.
• Cookies and preferences: necessary session/security cookies, anonymous telemetry cookies and local browser storage for anonymous tour identifiers, cookie-consent records, appearance/theme settings, language and display-currency preference cookies, and optional analytics/advertising/marketing consent choices.

How we use information

• To create and manage accounts, authenticate users, enforce role-based access, verify email addresses and phone numbers, send SMS OTPs, and provide 2FA.
• To publish and display guided property tours, show public agent contact details to buyers, render uploaded profile photos, generate QR experiences, and route buyer questions to the right agent or support channel.
• To operate security controls such as rate limits, session/device limits, login monitoring, admin security dashboards, approximate geolocation, recovery codes, and audit trails.
• To measure tour usage through scan/session analytics, station engagement, lead counts, and dashboard metrics so agents and admins can understand whether a tour is working.
• To provide support, handle staff communications, maintain media/admin workspaces, respond to inquiries, and troubleshoot listing, account, and billing issues.
• To generate or package AI-assisted listing/tour content, audio narration, and narrative-engine outputs when an agent uses those workflows.
• To send account, verification, support, transactional, and consented marketing communications.
• To improve TourIQ, prevent abuse, debug errors, estimate provider costs, maintain subscriptions, and comply with legal or platform obligations.

Communications and consent

• Operational messages: by creating an account or using TourIQ, you agree to receive account, security, verification, support, and service or lifecycle notifications by email, and by SMS where you have provided and verified a phone number or enabled SMS two-factor authentication. These messages are needed to operate the service and are not marketing.
• Two-factor messages: enabling SMS two-factor authentication opts you in to receive login security codes by SMS. Owner and admin accounts use authenticator-app two-factor instead.
• Marketing messages: promotional messages such as new-listing alerts, product news, and offers — by email and, where offered and separately opted into, by SMS — are sent only if you opt in, for example through a marketing checkbox at signup or on a tour. You can withdraw marketing consent at any time using the unsubscribe link in those emails or by contacting TourIQ. Marketing email includes one-click unsubscribe headers.
• Consent records: TourIQ keeps a record of when and how marketing consent was granted or withdrawn (for example at registration, on a signup form, or via unsubscribe) so your current choice is always respected and provable.

Service providers and subprocessors

TourIQ uses trusted providers to operate the product. Depending on the feature used, data may be processed by DigitalOcean (application hosting, managed PostgreSQL, and Spaces object storage with CDN delivery for uploaded media), Stripe for subscription payments and billing, Twilio for SMS, SMTP.com for outbound email delivery, Postmark for inbound support email, Bright Data Scraping Browser for realtor.ca lookup, OpenRouter and model providers for AI-assisted generation, ElevenLabs for audio narration, translation voice-over, and agent voice cloning, MapTiler for map tiles, and MaxMind for approximate security geolocation. We share only what is needed for the service to work, and payment card details go directly to Stripe.

Public and shared information

• Published tours may show the listing address, property information, station content, photos, the listing agent's name, brokerage, verified phone number, email address, bio, and uploaded profile photo.
• Buyer lead forms and support messages are shared with the appropriate TourIQ users or staff needed to respond.
• Admin and owner users can view operational records such as users, signup requests, support tickets, security events, media workspace items, subscriptions, and analytics according to their role.

AI, realtor.ca, and listing data

TourIQ may process listing text, structured property facts, photos, agent notes, and tour-generation prompts through internal services and provider APIs to produce station drafts, scripts, audio, translations, and delivery packages. Realtor.ca lookups are used to retrieve publicly visible listing data for agent workflows. Agents are responsible for confirming that listing information, marketing claims, and generated content are accurate before publishing.

Agent voice cloning

Voice cloning is optional and available only to the agent recording their own voice. The agent records a consent script aloud and confirms a written consent statement; the recording is retained as the consent record. The synthetic voice narrates only that agent's own listings, and the agent can delete a cloned voice from the account voice studio at any time, which removes it from narration going forward. Voice recordings and cloning are processed by ElevenLabs.

Cookies and tracking choices

Necessary cookies keep users signed in, secure sessions, remember cookie choices, and support anonymous tour telemetry. Preference cookies remember your chosen interface language and display currency; converted prices are estimates and billing stays in USD. Optional analytics, advertising, and marketing cookies are controlled through the cookie banner. Some browser storage is also used for UI preferences such as appearance settings and the buyer tour's language choice, and the tour app may cache pages and assets on your device so tours keep working offline. TourIQ does not use third-party advertising trackers today; the banner controls what may be enabled if that changes.

Retention and deletion

TourIQ keeps account, listing, billing, security, support, and analytics records for as long as needed to operate the service, comply with legal obligations, prevent fraud, resolve disputes, and maintain audit trails. Users may ask for correction or deletion, subject to operational, legal, security, and backup constraints. Deleted or removed profile photos are no longer served by TourIQ after removal from active storage.

Security

TourIQ uses first-party database sessions, hashed passwords, encrypted or protected 2FA secrets, hashed OTP/recovery-code records, rate limits, device-session controls, role-based access, security logs, and admin review tools. No online service can guarantee absolute security, so users should keep passwords, authenticator apps, phone numbers, and devices secure.

Your choices and rights

• You may update account identity, profile photo, email, phone, and security settings from the account page where available.
• You may choose cookie preferences in the cookie banner, and change your interface language and display currency from the site menus at any time.
• You may opt in or out of marketing where the product offers that choice, including one-click unsubscribe in marketing email.
• Agents may delete cloned voices from the account voice studio and manage signed-in devices from the account page.
• You may contact TourIQ to request access, correction, deletion, or portability of personal information, subject to identity verification and legal limits.

Canada, the United States, and cross-border processing

TourIQ is built for Canadian real estate workflows but may use service providers in Canada, the United States, and other jurisdictions. Information may be processed or stored outside your province, state, or country and may be subject to local laws where providers operate.

Children

TourIQ is not designed for children. Users must be old enough to enter binding agreements or use TourIQ with appropriate authorization.

Changes to this policy

TourIQ may update this Privacy Policy as the service evolves or new providers are added. The Last updated date will change when material updates are made.