Privacy Policy

Walktru.io Inc. (“Walktru,” “we,” “us,” or “our”) operates the AI listing studio at walktru.io. We process real estate listing photos and produce marketing content — enhanced photos, virtual staging, branded reels, 3D floor plans, and walkthrough tours — for real estate agents, brokers, property managers, builders, and other real estate professionals (“you” or “users”).

Our principal place of business is in the United States. Questions about this policy may be directed to privacy@walktru.io.

2.1 Information You Provide Directly

2.2 Information We Collect Automatically

2.3 Information We Do NOT Collect

We do not collect any of the following:

• Social Security numbers or government-issued identification numbers
• Financial account numbers beyond what Stripe requires for payment processing
• Health, medical, or biometric data
• Data from children — our service is not directed at anyone under 18 years of age
• Location data beyond the IP address used for fraud prevention

We use your information for six clearly defined purposes. Each is described in full below.

We want to be explicit and direct:

• We do not sell your personal information — ever, to anyone, for any purpose
• We do not share your listing photos with other users or allow your content to appear in another agent's outputs
• We do not share your personal data with advertising platforms for targeted advertising purposes
• We do not use automated decision-making to make decisions about you that have legal or significant effects (such as credit, housing, or employment decisions)
• We do not share your data with data brokers
• We do not retain your raw uploaded files after processing is complete

We share data only with companies that help us deliver the service. These are data processors acting on our instructions, not buyers of your data. All vendors are contractually required to process data only as directed by us and to maintain appropriate security standards.

We may also disclose personal information if required by applicable law, valid court order, or to protect the safety of our users or the public. We will notify you of such disclosures where legally permitted to do so.

All virtually staged and digitally altered images produced by Walktru are automatically labelled with a “Virtually Staged” or “Digitally Enhanced” disclosure in compliance with California AB 723 (effective January 1, 2026) and applicable MLS rules.

We retain the original unaltered image alongside every altered output in your dashboard for the duration of your retention period. This enables you to fulfil MLS disclosure requirements that mandate agent access to original, unaltered photos.

Staging is applied only to furniture, decor, and non-structural elements. Permanent finishes, flooring, cabinetry, and structural features are never digitally altered.

You may download all processed outputs from your dashboard at any time during the 90-day window. After 90 days, outputs are permanently deleted and cannot be recovered.

You may request deletion of your account and all associated data at any time by emailing privacy@walktru.io. We will process deletion requests within 30 days.

8.1 California Residents — CCPA/CPRA

California's privacy framework, as updated by regulations effective January 1, 2026, provides California residents with the following rights:

• Right to Know — what personal information we collect, use, share, and disclose
• Right to Access — a copy of your personal information
• Right to Delete — your personal information, subject to certain legal exceptions
• Right to Correct — inaccurate personal information
• Right to Opt Out — of the sale or sharing of personal information (we do not sell or share for advertising, but the right is acknowledged)
• Right to Limit — use of sensitive personal information
• Right to Non-Discrimination — we will not treat you differently for exercising any privacy right

We do not use automated decision-making technology to make significant decisions about you as a consumer in the areas of credit, housing, employment, education, or healthcare. Our AI processes your listing photos to produce marketing content only.

To exercise any California privacy right, email privacy@walktru.iowith “California Privacy Request” in the subject line. We will respond within 45 days at no charge and without discrimination.

8.2 All Other US State Residents

Residents of US states with active consumer privacy laws — including but not limited to Virginia, Colorado, Connecticut, Texas, Florida, Utah, Oregon, Montana, Iowa, Indiana, Kentucky, Tennessee, New Hampshire, New Jersey, Delaware, Nebraska, Maryland, Minnesota, and Rhode Island — have substantially the same rights described in Section 8.1: the right to know, access, delete, correct, and opt out of any sale or sharing of personal information.

To exercise any state privacy right, email privacy@walktru.io with your name, state of residence, and the specific right you wish to exercise. We will respond within 45 days at no charge.

8.3 International Users

Our service is currently focused on the US market. If you access Walktru from outside the United States, your data is processed and stored in the United States. By using our service, you acknowledge this transfer. For questions about cross-border data transfers, contact privacy@walktru.io.

We protect your data with the following technical and organisational measures:

• Encryption in transit using TLS 1.2 or higher
• Encryption at rest using AES-256 on AWS infrastructure
• Access controls limiting internal access to user data on a need-to-know basis
• Automatic deletion of raw uploaded files within 24 hours of processing
• Regular security reviews of our cloud infrastructure

No system is perfectly secure. If we become aware of a data breach that affects your personal information, we will notify you by email within 72 hours of discovery, describe the nature of the breach, and outline the steps we are taking to mitigate it.

We use the following types of cookies and tracking technologies:

• Essential cookies — required for the service to function, including login session management and dashboard state. These cannot be disabled without impairing service functionality.
• Analytics cookies — to understand how users navigate the product. We use PostHog or similar tools with anonymised data. You may disable these through your browser settings.
• No advertising cookies — we do not run retargeting pixels, share data with ad networks, or use behavioural advertising technology of any kind.

We honour Global Privacy Control (GPC) browser signals as valid opt-out requests per California CCPA 2026 requirements. When a GPC signal is detected, a visible “Opt-Out Request Honoured” confirmation is displayed on our platform.

Walktru is not directed at children under 18 years of age. We do not knowingly collect personal information from any person under 18. If you have reason to believe we have inadvertently collected data from a minor, contact privacy@walktru.io immediately and we will delete the relevant data without delay.

We will notify you by email and with a prominent banner on the walktru.io dashboard at least 30 days before any material changes to this policy take effect. The “Last Updated” date at the top of this document reflects the most recent revision.

Continued use of the service after the effective date of an updated policy constitutes your acceptance of the changes. If you do not accept the updated policy, you may close your account by contacting privacy@walktru.io before the effective date.

For all privacy questions, requests, or concerns:

This privacy policy was reviewed for compliance with CCPA/CPRA 2026 amendments, California AB 723, and applicable US state privacy laws effective as of the date above. This document does not constitute legal advice. Walktru recommends consulting a qualified privacy attorney for jurisdiction-specific compliance requirements.