Privacy Notice
Last updated: September 18, 2026
1. Who we are
MyOpenHouseTour is operated by Vanessa Kwan, based in Walnut Creek, California, United States. For the purposes of data-protection law, the operator is the data controller for the personal data described in this notice.
2. Data we collect
- Account data — email address and login credentials when you create an account.
- Planner content — addresses you enter, saved routes, favorite houses, notes, and photos you upload.
- Support messages — feedback and messages you send us.
- Usage and device data — pages visited, approximate device and browser information, and IP address, used for security and to improve the Service.
Payment details (card numbers, billing address for tax) are collected directly by Paddle, our Merchant of Record, and are not stored by us.
3. How we use it and why (legal basis)
- Providing the Service — creating your account, saving your routes, favorites, and photos (performance of a contract).
- Security and fraud prevention — protecting accounts and the Service (legitimate interests).
- Product improvement — understanding how the Service is used (legitimate interests).
- Customer support — responding to your messages (performance of a contract / legitimate interests).
- Legal obligations — records we must keep by law (legal obligation).
4. Who we share it with
- Service providers — hosting, database, and analytics providers that process data on our behalf.
- Paddle — our Merchant of Record, for the sale of subscriptions, payment processing, tax compliance, subscription management, and invoicing.
- Professional advisers — legal and accounting advisers where needed.
- Authorities — where required by law.
We do not sell your personal data.
5. Retention
We keep your data for as long as your account is active or as needed to provide the Service, and delete or anonymise it when it is no longer needed, subject to legal retention requirements.
6. Your rights
Depending on where you live (including under the California Consumer Privacy Act and GDPR where applicable), you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, to withdraw consent, and to complain to a supervisory authority. To exercise any of these rights, contact us via the feedback page. We respond within one month.
7. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and row-level access rules so users can only reach their own content.
8. Cookies
We use essential cookies and browser storage to keep you signed in and to remember your in-progress planner draft. Where analytics cookies are used, they help us understand usage and improve the Service. You can manage or clear cookies through your browser settings; essential cookies are required for sign-in to work.
9. Changes
We may update this notice from time to time. Material changes will be posted on this page with an updated date.