← Inicio

Privacy Policy

Last updated: 10 de abril de 2026

At Viupik, we are committed to protecting your privacy. This policy describes how we collect, use, store, and protect your personal data when you use our platform.

1. Data Controller

The data controller for your personal data is VIUPIK VISUALS, S.L., Spanish Tax ID B44678738, with registered office at Pico de los Artilleros 1, 4ºB, 28030 Madrid, Spain (hereinafter "Viupik," "we," or "us"). You can contact us regarding data protection at cuenta@viupik.com.

2. Data We Collect

We collect the following types of personal data:

  • Registration data: first name, last name, email address, password (encrypted), phone number (optional), preferred language.
  • Company data: company name, company type, team size, role in the company.
  • Captured lead data: name, email, phone, job title, LinkedIn profile, company, interests and concerns about properties.
  • Usage data: actions performed on the platform, AI tools used, credits consumed, projects created.
  • Presentation analytics data: anonymous session identifier, sections visited, scroll depth, time spent, CTA clicks.
  • Payment data: processed directly by Stripe. Viupik does not store credit card numbers or banking data.
  • Generated content: uploaded images, AI-generated renders, documents, presentation content.

3. Purpose of Processing

We process your personal data for the following purposes:

  • Service delivery: managing your account, processing payments, generating AI content, storing your projects and presentations.
  • Communications: sending you notifications about your account, service updates, and relevant information about your projects.
  • Service improvement: analyzing platform usage to improve our tools and user experience.
  • Legal compliance: fulfilling our legal obligations, including tax and commercial regulations.

4. Legal Basis for Processing

The processing of your data is based on:

  • Contract performance: processing is necessary to provide you the contracted services (Art. 6.1.b GDPR).
  • Consent: for sending commercial communications and capturing leads on public presentations (Art. 6.1.a GDPR).
  • Legitimate interest: for improving our services and platform security (Art. 6.1.f GDPR).
  • Legal obligation: for compliance with tax and commercial obligations (Art. 6.1.c GDPR).

5. Data Sharing with Third Parties

We share your data with the following service providers, necessary for the platform's operation:

  • Render (USA): Hosting provider for the backend server and platform API.
  • MongoDB Atlas (USA): Managed database service storing account information, projects, leads, and content. Deployment region: United States.
  • OpenAI (USA): Image and text processing through artificial intelligence (GPT-4o, DALL-E, gpt-image-1). Images and texts you submit to our AI tools are transmitted to OpenAI's servers for processing.
  • Google (USA): Google Maps for property locations, Google Gemini for image analysis, Google Calendar for meeting scheduling, and Gmail / Google SMTP for sending transactional emails (account verification, invitations, notifications).
  • Dropbox (USA): Storage of images, renders, and documents from your projects.
  • Stripe (USA): Secure payment processing and subscription management.
  • Deepgram (USA): Audio transcription for the meeting recording service.
  • Airtable (USA): Synchronization and tracking of the status of special 3D-render projects (Replikas).
  • Discord (USA): Real-time technical support channel.

6. International Transfers

Most of our providers, including the primary hosting infrastructure (Render) and database (MongoDB Atlas, United States region), are located in the United States. Therefore, your data is transferred outside the European Economic Area (EEA). Such transfers are carried out under (i) the Standard Contractual Clauses (SCCs) approved by the European Commission through Implementing Decision (EU) 2021/914 and/or (ii) the EU-US Data Privacy Framework adequacy decision (adopted on 10 July 2023) with respect to providers certified under that framework. We additionally implement supplementary technical measures (encryption in transit and at rest, role-based access control) to guarantee a level of protection equivalent to that required by the GDPR.

7. Data Retention

We retain your personal data for the following periods:

  • Account data: while your account remains active and for a maximum of 3 years after cancellation, unless a longer legal retention obligation applies.
  • Generated content (renders, presentations): while your account is active. After cancellation, content will be deleted within 90 days.
  • Lead data: while the relationship with the responsible real estate agent exists and up to 2 years after last contact.
  • Analytics data: retained in anonymized form indefinitely.
  • Billing data: according to applicable tax obligations (generally 5 years).

8. Your Rights

Under the GDPR and applicable legislation, you have the following rights:

  • Right of access: obtain confirmation of whether we process your data and access it.
  • Right to rectification: correct inaccurate data or complete incomplete data.
  • Right to erasure: request deletion of your data when it is no longer necessary.
  • Right to restriction of processing: request that processing be restricted in certain cases.
  • Right to data portability: receive your data in a structured, commonly used, and machine-readable format.
  • Right to object: object to the processing of your data in certain circumstances.

To exercise any of these rights, contact us at cuenta@viupik.com. We will respond within a maximum of 30 days.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the competent supervisory authority in your country of residence.

9. Additional Rights for California Residents (CCPA)

If you reside in California, you have the following additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know: request information about the categories and specific data we collect about you.
  • Right to deletion: request the deletion of your personal data.
  • Right to opt-out of sale: Viupik does not sell its users' personal data to third parties.
  • Right to non-discrimination: you will not receive different treatment for exercising your privacy rights.

10. Children

Viupik is not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If we discover that we have collected data from a minor, we will delete it immediately.

11. Security

We implement appropriate technical and organizational measures to protect your personal data, including password encryption, HTTPS connections, role-based access control, and regular backups.

12. Changes to this Policy

We reserve the right to update this policy. We will notify you of significant changes via email or platform notice. The date of last update is indicated at the beginning of this document.

13. Contact

For privacy and data protection inquiries: cuenta@viupik.com.