Privacy policy
Last updated: September 2026
This policy describes the data Moorea processes, why, where it is hosted and how to exercise your rights. It applies to the moorea.app website, the my.moorea.app application and the embed.moorea.app embedded player.
Data controller
ELVN SAS, 60 rue François Ier, 75008 Paris, France, registered with the Paris trade and companies register under number 979 732 906. For any question about your data: privacy@moorea.app or hello@moorea.app.
Data we process
Account: email address, display name, language, hashed password or the identifier from your authentication provider. Content: the panoramas, tours, maps, texts and media you upload, along with the technical metadata of the files (dimensions, capture date where the file carries one). Billing: no payment data is processed to date, as no payment is wired yet. Contacts collected by your tours: if you switch on a lead capture form, the details your visitors leave are processed on your behalf and you are responsible for them.
Legal bases and purposes
Performance of the contract is the basis for processing account and content data, without which the service cannot be provided. Legitimate interest is the basis for aggregate audience measurement and for the security of the service. Consent is the basis for the only two operations that call for it: the advertising trackers on the moorea.app website, denied by default, and forwarding an introduction request to a drone pilot.
Cookies and audience measurement
The embedded player sets no cookie and writes nothing to a visitor’s device. The viewing statistics of a tour are aggregates computed without cookies or persistent identifiers: views, distinct visitors over a short window, scenes watched, referring site. The my.moorea.app application only uses cookies strictly necessary to your session. The moorea.app website uses cookie-free audience measurement. On top of that, and only if you accept them, come the cookies of our Google Ads campaigns: they are there to tell which ads bring visitors. They are denied by default; until you accept in the banner, nothing is written to your device and the measurements sent to Google carry no advertising identifier. Your choice, whether you accept or decline, is kept for six months on your device and can be changed at any time through the Cookies link in the footer.
Introductions to a drone pilot
When you fill in the introduction form on an industry page, your details (name, establishment, email, phone, postcode) and your message are processed for a single purpose: putting you in touch with a professional. They are forwarded to one drone pilot who is a member of the Moorea Network and whose area and sector match your request - one at a time, never a bidding round. That professional is an independent third party: as soon as they keep your data, they become responsible for it. The processing is based on your consent, collected by the form checkbox, and requests are kept for twenty-four months and then deleted. Introductions are free and carry no commission.
Publishing to Google Maps
If you connect a Google account to publish your panoramas on Google Maps, we ask for two permissions and no more: Street View publishing (the streetviewpublish scope) and read access to the account’s email address, used only to show you which account is connected. We keep that address, the refresh token encrypted at rest, the list of permissions actually granted and the identifier of the business listing you point to; that listing’s name and address are only a thirty-day cache, and the access token is never stored. This data is used solely to publish what you ask for and is passed on to no one. Published views go out under your Google account and belong to it: from then on they follow Google’s rules. You can withdraw access whenever you like, from the app or from your Google account permissions - the connection is then deleted on our side, which does not unpublish views already online: only you can remove those, from Google.
Where your data lives
The API and the database are hosted in Frankfurt, Germany. Panoramas and their tiles are stored on Cloudflare R2 within European jurisdiction. Image processing runs on Modal Labs, Inc. and transactional emails on Resend, Inc.: both providers are established in the United States, and the corresponding transfers rely on the European Commission’s standard contractual clauses.
Retention periods
Account data is kept for as long as the account exists. A tour placed in the bin is purged automatically after thirty days. Viewing aggregates are kept with no way to trace them back to a person. When the account is deleted, content and associated data are erased, subject to statutory retention obligations.
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability. You can delete your tours and your account directly from the application, or write to privacy@moorea.app or hello@moorea.app. You may also lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
Security
Traffic is encrypted in transit. The access codes of protected tours and share tokens are stored as hashes: the key carries identity, never access. Data access is partitioned by workspace.
A place worth showing from above?
The free plan is enough to publish a first tour and show it around.