Privacy Policy

Effective Date: July 30, 2026

Last Updated: July 30, 2026

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date above and provide additional notice where required by applicable law.

TourFX is a technology platform operated by Studio Holdings LLC d/b/a TourFX.

If you have questions about this Privacy Policy or our privacy practices, you may contact us at:

Email: support@tourfx.ai

This Privacy Policy applies to personal information collected through:

• The TourFX website;
• The TourFX web application;
• AI-powered image and video generation services;
• Customer support communications;
• Marketing communications;
• Connected third-party integrations; and
• Any other Services that link to or reference this Privacy Policy.

This Privacy Policy does not apply to:

• Third-party websites, applications, or services that are not operated by TourFX;
• Information collected by third-party providers through their own products or services; or
• Personal information subject to a separate privacy notice provided by TourFX.

Your use of third-party services remains subject to the privacy policies of those third parties.

For purposes of this Privacy Policy:

• “Personal Information” means information that identifies, relates to, describes, or can reasonably be linked to an identified or identifiable individual.
• “User Content” means photographs, videos, images, branding assets, logos, prompts, voice recordings, property information, documents, and any other content that you upload, submit, import, connect, or otherwise provide through the Services.
• “Generated Content” means images, videos, animations, voiceovers, text, marketing materials, virtual staging, virtual twilight images, object removal results, enhancements, and any other output created by the Services using artificial intelligence or other processing technologies.
• “Processing” means any operation performed on information or User Content, including collecting, recording, organizing, storing, accessing, modifying, transmitting, generating, analyzing, deleting, or otherwise using such information.
• “Third-Party Services” means products, services, software, APIs, payment processors, cloud providers, artificial intelligence providers, integrations, or other technologies provided by companies other than TourFX.
• “Services” means the TourFX website, applications, software, artificial intelligence tools, and all related products, features, and services provided by TourFX.

We collect information that you voluntarily provide when you create an account, purchase Services, communicate with us, or otherwise interact with TourFX.

This information may include:

• Name
• Email address
• Phone number
• Company or business name
• Brokerage or organization
• Billing and payment information (processed through our third-party payment providers)
• Profile photo
• Brand assets, including logos, colors, fonts, and other branding materials
• Customer support requests and correspondence
• Feedback, surveys, testimonials, and other communications you voluntarily provide

You may choose not to provide certain information; however, doing so may limit your ability to use certain features of the Services.

In order to provide AI-powered real estate media services, we collect and process content that you upload, import, connect, or otherwise submit through the Services (“User Content”).

User Content may include:

• Property photographs
• Videos
• Logos
• Voice recordings
• Brand assets
• Text prompts and instructions
• Property addresses
• Listing information
• Zillow listing URLs or other property listing links
• Files imported through Dropbox or other connected cloud storage providers
• Documents, graphics, marketing materials, and other files you choose to upload

User Content is processed solely for the purpose of providing the Services you request, including AI image editing, virtual staging, virtual twilight, object removal, video generation, voice generation, branding, and related functionality.

Please do not upload information that you do not have the legal right or authorization to use.

When you access or use the Services, certain information is collected automatically through our systems and service providers.

This information may include:

• IP address
• Device identifiers
• Browser type and version
• Operating system
• Internet service provider
• Referring and exit pages
• Date and time of access
• Pages viewed
• Features used
• Usage logs
• Clickstream data
• Session information
• Error logs
• Crash reports
• Performance diagnostics
• Network and connection information

We use this information to:

• Operate and secure the Services;
• Improve performance and reliability;
• Diagnose technical issues;
• Detect fraud, abuse, and unauthorized access;
• Analyze feature usage; and
• Improve the user experience.

This information generally does not directly identify you by itself but may be considered personal information under applicable privacy laws.

TourFX uses cookies and similar technologies, including pixels, local storage, software development kits (SDKs), and comparable technologies, to operate and improve the Services.

These technologies help us recognize your browser or device, remember your preferences, enhance security, analyze usage, and provide a better user experience.

We may use the following categories of cookies and similar technologies:

Depending on your browser settings and applicable law, you may be able to manage or disable certain non-essential cookies. However, disabling some technologies may affect the availability or functionality of portions of the Services.

We use your information to:

• Create and manage your user account;
• Authenticate your identity;
• Verify account ownership;
• Provide access to the Services;
• Manage subscription plans and account settings; and
• Maintain your account preferences.

We use your information and User Content to provide the AI-powered services you request, including:

• AI photo enhancement;
• Virtual staging;
• Virtual twilight;
• Object removal;
• Image generation;
• Video generation;
• Voice generation;
• Branding tools;
• Property marketing content; and
• Other AI-powered features made available through the Services.

Your User Content is processed only as necessary to provide the requested Services.

We use your uploaded content, prompts, settings, and related information to generate, edit, render, enhance, transform, export, and deliver Generated Content.

This processing includes coordinating with artificial intelligence providers and other technologies necessary to produce the outputs you request.

We use your information to:

• Process subscription payments;
• Process credit purchases;
• Prevent fraudulent transactions;
• Manage billing;
• Issue invoices and receipts;
• Process refunds or credits when applicable; and
• Comply with financial and tax obligations.

Payment card information is processed by our third-party payment providers and is not stored by TourFX except as necessary to maintain payment records permitted by applicable law.

We use your information to:

• Respond to inquiries;
• Resolve technical issues;
• Investigate reported problems;
• Provide customer assistance;
• Improve support quality; and
• Communicate regarding your account or Services.

Support personnel may access your account or User Content only when reasonably necessary to provide requested support, investigate security issues, prevent abuse, or comply with legal obligations.

We continually improve the Services using information such as:

• Feature usage;
• Performance metrics;
• Error reports;
• Diagnostic information;
• User feedback;
• Aggregated usage statistics; and
• De-identified or anonymized data.

This information helps us improve reliability, usability, speed, performance, accessibility, and user experience.

TourFX may use aggregated, anonymized, or de-identified information to improve the performance, reliability, quality, and operation of the Services.

Unless we specifically obtain your permission or otherwise disclose a different practice, TourFX does not use your User Content or Generated Content to train our proprietary artificial intelligence models.

Third-party AI providers may process your content solely as necessary to generate the Services you request, subject to their applicable terms and privacy practices.

We use information to:

• Detect fraud;
• Prevent abuse;
• Identify unauthorized access;
• Monitor suspicious activity;
• Protect user accounts;
• Enforce our Terms of Service;
• Protect the integrity of the Services; and
• Investigate security incidents.

We use your information to communicate with you regarding:

• Account activity;
• Service updates;
• Billing;
• Security notifications;
• Customer support;
• Product announcements;
• Important changes to our Services, Terms, or Privacy Policy; and
• Other communications related to your use of the Services.

Certain communications, such as billing notices, security alerts, and account-related messages, are considered transactional and may be sent even if you opt out of marketing communications.

Where permitted by applicable law, we may use your information to:

• Send newsletters;
• Announce new features;
• Share promotions and special offers;
• Invite you to participate in surveys;
• Inform you about educational content; and
• Provide other marketing communications that may be of interest.

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in those communications or by contacting us at support@tourfx.ai.

We may use your information as necessary to:

• Comply with applicable laws and regulations;
• Respond to lawful requests from governmental authorities;
• Enforce our legal rights;
• Protect the rights, property, and safety of TourFX, our users, and others;
• Resolve disputes;
• Defend legal claims; and
• Fulfill contractual and regulatory obligations.

When you use AI-powered features, TourFX processes the User Content you submit in order to provide the Services you request.

Depending on the feature used, User Content may include photographs, videos, voice recordings, logos, branding assets, property information, listing data, prompts, documents, or other materials that you upload, import, connect, or otherwise provide through the Services.

Your User Content is processed solely for the purpose of generating, editing, enhancing, analyzing, transforming, or delivering the requested outputs.

To provide certain AI-powered features, TourFX may utilize third-party artificial intelligence providers, machine learning models, voice synthesis technologies, image generation systems, video generation systems, language models, and related technologies.

When necessary to fulfill your request, your User Content may be securely transmitted to these providers for processing.

These providers process your content only as necessary to generate the requested outputs and in accordance with their applicable contractual obligations, privacy practices, and security requirements.

TourFX does not use your User Content or Generated Content to train our proprietary artificial intelligence models unless we first obtain your permission or otherwise clearly disclose a different practice.

Nothing in this Privacy Policy prevents TourFX from using anonymized, aggregated, or de-identified information that cannot reasonably identify you to improve the operation, reliability, security, performance, or functionality of the Services.

TourFX may create anonymous, aggregated, statistical, or de-identified information derived from user activity.

This information does not identify you personally and may be used to:

• Improve the Services;
• Analyze platform performance;
• Develop new features;
• Measure product usage;
• Enhance system reliability;
• Improve security;
• Conduct internal research and analytics; and
• Support business planning and reporting.

Where reasonably possible, this information is maintained in a form that does not directly identify any individual user.

TourFX does not routinely review your User Content or Generated Content.

Authorized personnel may access User Content only when reasonably necessary to:

• Provide requested customer support;
• Investigate technical issues;
• Detect, investigate, or prevent fraud or abuse;
• Maintain the security and integrity of the Services;
• Comply with applicable laws, regulations, or legal process; or
• Protect the rights, property, or safety of TourFX, our users, or others.

Any such access is limited to personnel with an appropriate business need and is subject to reasonable administrative, technical, and organizational safeguards.

Artificial intelligence is inherently probabilistic and may produce inaccurate, incomplete, inconsistent, biased, or unexpected results.

Although TourFX continually works to improve the quality and reliability of its AI-powered Services, users remain responsible for reviewing and verifying all Generated Content before publishing, distributing, or otherwise relying upon it.

Additional information regarding the limitations of AI-generated content can be found in our Terms of Service.

We process your personal information when necessary to provide the Services you request or to perform our contractual obligations.

This includes processing information to:

• Create and manage your account;
• Authenticate your identity;
• Provide AI-powered services;
• Process uploaded content;
• Generate images, videos, voiceovers, and other outputs;
• Process payments;
• Deliver customer support; and
• Fulfill our obligations under our Terms of Service.

Without this processing, we may be unable to provide the Services you request.

In certain situations, we process your personal information based on your consent.

Examples may include:

• Sending marketing communications where consent is required;
• Using non-essential cookies or similar technologies where required by law;
• Processing information for purposes for which consent is specifically requested; and
• Any other processing where applicable law requires your consent.

Where we rely on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before your withdrawal.

We may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests include:

• Operating and improving the Services;
• Maintaining platform security;
• Preventing fraud and abuse;
• Detecting technical issues;
• Protecting user accounts;
• Improving performance and reliability;
• Developing new features;
• Conducting analytics using aggregated or de-identified information;
• Responding to customer inquiries; and
• Protecting the rights, property, and safety of TourFX, our users, and others.

When appropriate, we balance our legitimate interests against your privacy rights before relying on this legal basis.

We may process personal information where necessary to comply with applicable legal or regulatory obligations.

Examples include processing necessary to:

• Comply with applicable laws and regulations;
• Respond to lawful requests from courts, regulators, or governmental authorities;
• Maintain financial and tax records;
• Prevent fraud and other unlawful activity;
• Enforce our legal rights;
• Resolve legal disputes; and
• Meet other legal compliance obligations.

If you have questions regarding the legal basis upon which we process your personal information or wish to exercise your privacy rights under applicable law, please contact us at support@tourfx.ai.

We share payment-related information with third-party payment processors, including Stripe or other payment providers, to:

• Process subscription payments;
• Process credit purchases;
• Prevent fraudulent transactions;
• Issue refunds or credits where applicable; and
• Comply with financial and tax obligations.

TourFX does not store your complete payment card information.

If you choose to sign in using a third-party authentication provider, such as Google, we receive only the information necessary to authenticate your account and provide the requested sign-in functionality.

The information shared depends on your account settings and the permissions you authorize with the third-party provider.

We use third-party cloud hosting and infrastructure providers, including Amazon Web Services (AWS) or similar providers, to host, process, transmit, and securely store information necessary to operate the Services.

These providers process information solely on our behalf and in accordance with our contractual arrangements.

To provide AI-powered features, TourFX may securely transmit User Content and related information to third-party artificial intelligence providers.

These providers process your information only as necessary to generate the images, videos, voiceovers, edits, enhancements, or other outputs you request.

TourFX requires these providers to process information in accordance with applicable contractual obligations and security requirements.

If you choose to connect Dropbox or another supported cloud storage provider, TourFX will access and exchange only the information necessary to import, export, synchronize, or store files as requested by you.

You may disconnect these integrations at any time through your account settings or the applicable third-party service.

We may share limited technical and usage information with analytics providers to better understand how users interact with the Services.

This information helps us:

• Improve performance;
• Identify technical issues;
• Measure feature usage;
• Enhance reliability; and
• Improve the overall user experience.

Where reasonably possible, analytics information is aggregated or de-identified.

We use third-party providers to deliver:

• Account notifications;
• Security alerts;
• Billing communications;
• Customer support messages;
• Marketing emails; and
• Other communications related to the Services.

These providers process information only as necessary to deliver communications on our behalf.

We may share limited information with third-party customer support platforms and service providers to help us:

• Respond to inquiries;
• Resolve technical issues;
• Investigate reported problems;
• Improve customer service; and
• Maintain support records.

Access to User Content is limited to situations where it is reasonably necessary to provide requested support, investigate abuse, maintain security, or comply with legal obligations.

We may disclose information where we believe, in good faith, that disclosure is necessary to:

• Comply with applicable laws or legal process;
• Respond to lawful requests from governmental authorities;
• Enforce our Terms of Service or other agreements;
• Protect the rights, property, or safety of TourFX, our users, or others;
• Detect, investigate, or prevent fraud, security incidents, or illegal activity; or
• Establish, exercise, or defend legal claims.

If TourFX is involved in a merger, acquisition, financing, investment, reorganization, bankruptcy, sale of assets, or other corporate transaction, your information may be transferred as part of that transaction, subject to applicable law.

Any successor entity receiving your information will remain subject to the commitments described in this Privacy Policy unless you are otherwise notified.

We may share information when you instruct or authorize us to do so, including when you choose to connect third-party integrations, export content, share media, or otherwise direct us to transmit your information to another person or service.

TourFX does not sell your personal information to third parties.

We also do not share your personal information for cross-context behavioral advertising except as described in this Privacy Policy or as permitted by applicable law.

If our data practices change in the future in a manner that requires additional notice or consent under applicable privacy laws, we will update this Privacy Policy accordingly.

TourFX may allow you to create an account or sign in using your Google account.

If you choose to use Google Sign-In, TourFX will receive certain information from Google, such as your name, email address, and profile information, as authorized by your Google account settings and permissions.

Your use of Google Sign-In is also governed by Google's applicable terms and privacy policies.

Payments made through the Services are processed by third-party payment providers, including Stripe or other payment processors.

TourFX does not receive or store your complete payment card information. Payment information is collected, processed, and secured by the applicable payment provider in accordance with its own privacy practices and security standards.

TourFX may allow you to connect Dropbox or other supported cloud storage providers to import, export, synchronize, or store files.

By connecting a cloud storage account, you authorize TourFX to access only the files and information necessary to perform the functionality you request.

You may revoke TourFX's access at any time through your account settings with the applicable provider.

TourFX may allow you to import property information, listing details, photographs, addresses, or other real estate data from Zillow or other property data providers where permitted by applicable law and the provider's terms.

TourFX does not control, verify, or guarantee the accuracy, completeness, availability, or legality of third-party property data.

Your use of imported property information remains subject to the terms, licensing requirements, and policies of the applicable provider.

To provide AI-powered functionality, TourFX utilizes artificial intelligence technologies provided by both TourFX and third-party AI providers.

When you request AI-powered services, your User Content may be securely transmitted to these providers solely for the purpose of generating the requested outputs.

TourFX carefully selects providers that support appropriate security and privacy practices; however, their processing of your information is governed by their own contractual obligations and privacy policies.

TourFX utilizes third-party cloud infrastructure providers, including Amazon Web Services (AWS) or similar providers, to host, process, store, and secure the Services.

These providers may process personal information on TourFX's behalf solely for the purpose of providing cloud hosting, networking, storage, backup, and related infrastructure services.

TourFX may use third-party analytics providers to understand how users interact with the Services.

Analytics technologies may collect information regarding:

• Device information;
• Browser information;
• Feature usage;
• Session activity;
• Performance metrics;
• Error reporting; and
• Other technical usage information.

This information helps us improve the functionality, reliability, performance, and user experience of the Services.

The Services may allow you to connect or interact with third-party social media platforms to publish, share, or promote Generated Content.

When you choose to use these integrations, information may be exchanged between TourFX and the applicable social media platform as necessary to provide the requested functionality.

Your interactions with those platforms are governed by their own privacy policies, terms of service, and account settings.

Third-Party Services may change their features, APIs, pricing, availability, functionality, or privacy practices at any time.

TourFX may add, modify, suspend, replace, or discontinue integrations with Third-Party Services without prior notice.

TourFX is not responsible for the actions, omissions, availability, security, or privacy practices of Third-Party Services, and we encourage you to review the privacy policies of any third-party service you choose to connect to the Services.

Your personal information and User Content may be stored and processed on servers operated by TourFX or our authorized service providers.

These servers may be located in the United States or in other jurisdictions where our cloud infrastructure or service providers operate.

TourFX takes commercially reasonable measures to protect information regardless of where it is processed.

TourFX utilizes third-party cloud hosting, storage, networking, content delivery, and computing providers to operate the Services.

As a result, your information may be transferred between data centers, regions, or jurisdictions as necessary to provide reliable, secure, and efficient Services.

Our service providers are contractually required to protect personal information consistent with applicable laws and our contractual obligations.

When personal information is transferred internationally, TourFX takes appropriate steps designed to protect such information in accordance with applicable privacy laws.

Depending on the circumstances, these safeguards may include:

• Standard Contractual Clauses (“SCCs”) approved by the European Commission or other applicable authorities;
• Contractual commitments with our service providers;
• Technical and organizational security measures;
• Risk assessments where appropriate; and
• Other lawful transfer mechanisms recognized under applicable data protection laws.

Where required by applicable law, TourFX relies on Standard Contractual Clauses or other approved transfer mechanisms to facilitate the lawful transfer of personal information from the European Economic Area, the United Kingdom, Switzerland, and other jurisdictions with cross-border transfer requirements.

These safeguards are intended to provide an appropriate level of protection for personal information transferred internationally.

To provide the Services, your personal information may be accessed or processed by TourFX personnel and authorized service providers located in different countries.

Regardless of where processing occurs, TourFX seeks to ensure that personal information receives an appropriate level of protection through contractual, technical, and organizational safeguards consistent with applicable law.

If you have questions regarding our international data transfer practices or the safeguards we use, you may contact us at support@tourfx.ai.

We retain account information for as long as your account remains active.

If your account is closed or deleted, we may retain certain account information for a reasonable period to:

• Comply with legal obligations;
• Resolve disputes;
• Prevent fraud;
• Enforce our agreements;
• Maintain security; or
• Protect the integrity of the Services.

We retain User Content for as long as reasonably necessary to provide the Services and operate your account.

If you delete User Content or close your account, we will use commercially reasonable efforts to remove or de-identify such content within a reasonable period, subject to:

• Backup systems;
• Legal obligations;
• Security requirements;
• Fraud prevention;
• Ongoing disputes; or
• Other legitimate business purposes.

Residual copies may temporarily remain in backup or disaster recovery systems until they are securely overwritten or deleted in accordance with our normal retention practices.

Generated images, videos, voiceovers, marketing materials, and other Generated Content may be retained to:

• Provide continued access through your account;
• Support downloads and exports;
• Maintain account history;
• Provide customer support;
• Resolve technical issues; and
• Comply with legal obligations.

You remain responsible for maintaining your own backup copies of any Generated Content you wish to retain.

Billing records, invoices, payment history, transaction records, and related financial information may be retained for as long as necessary to:

• Comply with accounting and tax laws;
• Prevent fraud;
• Resolve payment disputes;
• Meet regulatory obligations; and
• Protect TourFX's legal interests.

Payment card information is processed by third-party payment providers and is retained in accordance with their applicable policies and legal obligations.

Customer support communications, technical support records, bug reports, and related correspondence may be retained to:

• Respond to future inquiries;
• Improve customer support;
• Investigate technical issues;
• Train support personnel;
• Detect abuse; and
• Maintain support history.

Analytics information, system logs, diagnostic information, crash reports, performance metrics, and security logs may be retained for as long as reasonably necessary to:

• Improve the Services;
• Monitor system performance;
• Detect fraud and abuse;
• Investigate security incidents;
• Troubleshoot technical problems; and
• Maintain the reliability and security of the Services.

Where reasonably possible, analytics information is aggregated, anonymized, or de-identified.

Certain information may be retained for longer periods when necessary to:

• Comply with applicable laws or regulations;
• Respond to lawful requests from governmental authorities;
• Resolve legal claims or disputes;
• Enforce our agreements;
• Protect our legal rights; or
• Preserve evidence relevant to anticipated or ongoing legal proceedings.

When personal information is no longer required for the purposes described in this Privacy Policy, TourFX will take commercially reasonable steps to securely delete, anonymize, or de-identify the information, unless continued retention is required or permitted by applicable law.

Because of backup systems and disaster recovery processes, deletion may not occur immediately, and residual copies may remain until they are securely overwritten or otherwise removed through our normal retention procedures.

TourFX uses industry-standard encryption technologies to help protect personal information during transmission and, where appropriate, while stored.

Sensitive communications between your device and the Services are protected using secure encrypted connections.

Access to personal information and User Content is limited to authorized personnel, contractors, and service providers who require access to perform their job responsibilities or provide services on our behalf.

Access permissions are granted based on business need and are subject to appropriate internal controls.

TourFX utilizes reputable cloud infrastructure providers that employ physical, technical, and administrative security measures to help protect the availability, integrity, and confidentiality of information stored on their systems.

We also rely on trusted third-party providers for infrastructure, storage, networking, backups, and related cloud services.

TourFX implements authentication mechanisms designed to help protect user accounts from unauthorized access.

Users are responsible for maintaining the confidentiality of their login credentials and for safeguarding access to their accounts.

If you believe your account has been compromised, you should notify TourFX immediately and promptly update your credentials where appropriate.

TourFX uses security monitoring, logging, auditing, and other protective measures designed to:

• Detect unauthorized access;
• Identify suspicious activity;
• Investigate potential security incidents;
• Protect the integrity of the Services; and
• Improve the overall security of our platform.

We continually review and enhance our security practices as technologies, threats, and business needs evolve.

Authorized personnel and third-party service providers who process information on our behalf are expected to maintain appropriate confidentiality and security protections consistent with applicable contractual obligations and industry practices.

Although TourFX works to protect your information using commercially reasonable security measures, no method of transmitting information over the Internet, electronic storage system, or security technology is completely secure.

Accordingly, TourFX cannot guarantee the absolute security of your personal information or User Content. You acknowledge that you provide information and use the Services at your own risk.

If TourFX becomes aware of a security incident affecting your personal information, we will respond in accordance with applicable law and, where required, provide appropriate notifications.

You may have the right to request confirmation of whether TourFX processes your personal information and to obtain access to the personal information we hold about you.

You may have the right to request that we correct inaccurate or incomplete personal information that we maintain about you.

Many account details can also be updated directly through your account settings.

You may have the right to request deletion of your personal information, subject to certain exceptions permitted by applicable law.

We may retain certain information where necessary to:

• Comply with legal obligations;
• Complete transactions;
• Detect or prevent fraud;
• Protect the security of the Services;
• Resolve disputes;
• Enforce our agreements; or
• Exercise or defend legal claims.

Where required by applicable law, you may have the right to receive certain personal information in a structured, commonly used, and machine-readable format or request that we transfer it to another organization where technically feasible.

Where our processing is based on your consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing that occurred before your consent was withdrawn.

Depending on your jurisdiction, you may have the right to object to certain processing activities or request that TourFX restrict the processing of your personal information under certain circumstances.

You may opt out of receiving promotional or marketing emails from TourFX at any time by:

• Clicking the “unsubscribe” link included in marketing emails;
• Updating your communication preferences within your account, where available; or
• Contacting us using the information provided in this Privacy Policy.

Even if you opt out of marketing communications, we may still send you non-promotional communications relating to your account, subscriptions, billing, security, legal notices, or the operation of the Services.

To exercise any applicable privacy rights, please contact us at support@tourfx.ai.

Before fulfilling certain requests, TourFX may take reasonable steps to verify your identity in order to protect your personal information and prevent unauthorized access.

If we are unable to fulfill your request, we will explain the reason to the extent required or permitted by applicable law.

TourFX will not discriminate against you for exercising any privacy rights available under applicable law.

However, certain features of the Services may require the processing of personal information. If you request deletion of information necessary to provide the Services, some functionality may no longer be available, and your account may need to be limited or closed.

During the preceding twelve (12) months, TourFX may have collected the following categories of personal information:

• Identifiers (such as name, email address, account information, and IP address);
• Commercial information (such as subscription details, purchases, billing history, and transaction records);
• Internet or electronic network activity (such as browser information, device information, usage data, and log files);
• Geolocation information derived from IP addresses or device information;
• Professional or employment-related information (such as brokerage or company information provided by users);
• User Content, including uploaded photographs, videos, branding assets, prompts, listing information, and related files;
• Generated Content created through the Services; and
• Other information you voluntarily provide while using the Services.

We do not knowingly collect protected classifications or biometric information unless voluntarily provided by you as part of User Content.

We collect personal information from a variety of sources, including:

• Directly from you;
• Automatically through your use of the Services;
• Through connected third-party services that you authorize;
• From payment processors;
• From authentication providers;
• From analytics providers; and
• From other lawful sources.

We collect and use personal information to:

• Provide and operate the Services;
• Create and manage user accounts;
• Process AI-powered requests;
• Process payments and subscriptions;
• Provide customer support;
• Improve our products and services;
• Detect fraud and security threats;
• Comply with legal obligations;
• Communicate with users; and
• Protect the rights, property, and safety of TourFX and others.

Additional information regarding these purposes is provided throughout this Privacy Policy.

TourFX may disclose personal information to the categories of recipients described in Section 6 of this Privacy Policy, including:

• Payment processors;
• Authentication providers;
• Cloud hosting providers;
• AI providers;
• Analytics providers;
• Customer support providers;
• Email and communication providers;
• Professional advisors;
• Governmental authorities where legally required; and
• Successors in connection with business transactions.

TourFX does not sell personal information.

TourFX also does not share personal information for cross-context behavioral advertising as those terms are defined under California law.

Subject to applicable law, California residents may have the right to:

• Know the categories and specific pieces of personal information we collect;
• Know the sources from which personal information is collected;
• Know the purposes for collecting, using, or disclosing personal information;
• Know the categories of third parties with whom personal information is shared;
• Request deletion of personal information;
• Request correction of inaccurate personal information;
• Request access to personal information;
• Request a portable copy of certain personal information; and
• Exercise any other rights provided under applicable California privacy laws.

Because TourFX does not sell personal information or share personal information for cross-context behavioral advertising, California residents currently are not required to submit a “Do Not Sell or Share My Personal Information” request.

If TourFX's practices change in the future in a manner that requires such an opt-out right, we will update this Privacy Policy and provide any notices required by applicable law.

TourFX does not use or disclose sensitive personal information for purposes requiring a separate right to limit its use under the CPRA.

Any sensitive personal information we process is used only as reasonably necessary to:

• Provide the Services;
• Maintain account security;
• Prevent fraud;
• Comply with legal obligations; or
• Carry out other purposes permitted by applicable law.

TourFX will not discriminate against you for exercising any rights available under the CCPA or CPRA.

Unless permitted by law, we will not:

• Deny you goods or services;
• Charge different prices or rates;
• Provide a different level or quality of service; or
• Penalize you for exercising your privacy rights.

However, certain features of the Services require the processing of personal information. If you request deletion of information necessary to provide those features, some functionality may no longer be available.

To submit a request under the CCPA or CPRA, please contact us at support@tourfx.ai.

We may verify your identity before fulfilling your request to help protect your personal information and prevent unauthorized access.

Authorized agents may submit requests on behalf of California residents where permitted by applicable law, subject to appropriate verification requirements.

Subject to applicable law, you may have the following rights regarding your personal information:

• Right of Access – Request confirmation of whether we process your personal information and obtain a copy of that information.
• Right to Rectification – Request correction of inaccurate or incomplete personal information.
• Right to Erasure – Request deletion of your personal information under certain circumstances.
• Right to Restrict Processing – Request that we limit the processing of your personal information in certain situations.
• Right to Data Portability – Receive certain personal information in a structured, commonly used, and machine-readable format and, where technically feasible, request its transfer to another controller.
• Right to Object – Object to certain processing activities, including processing based on our legitimate interests or direct marketing.
• Right to Withdraw Consent – Withdraw your consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing conducted before consent was withdrawn.
• Rights Related to Automated Decision-Making – Where applicable, request human review of decisions based solely on automated processing that produce legal or similarly significant effects.

These rights may be subject to limitations and exceptions under applicable law.

To exercise your GDPR rights, please contact us at support@tourfx.ai.

To protect your personal information, TourFX may request additional information to verify your identity before responding to your request.

We will respond to verified requests within the time periods required by applicable law.

Information regarding the legal bases upon which TourFX processes personal information is provided in Section 5 (Legal Bases for Processing) of this Privacy Policy.

Information regarding international transfers of personal information and the safeguards we use is provided in Section 8 (International Data Transfers) of this Privacy Policy.

If you believe TourFX has processed your personal information in violation of applicable data protection laws, you have the right to lodge a complaint with the data protection authority or supervisory authority in your country of residence, place of work, or the location where the alleged infringement occurred.

We encourage you to contact TourFX first so that we have an opportunity to address your concerns directly before you contact a supervisory authority.

At this time, TourFX does not maintain an establishment within the European Union or the United Kingdom.

If TourFX becomes legally required to appoint an EU or UK representative under applicable data protection laws, this Privacy Policy will be updated with the representative's contact information.

If you have questions regarding your GDPR rights or TourFX's processing of your personal information, please contact us at support@tourfx.ai.

We may use cookies and similar technologies to:

• Authenticate users and maintain secure login sessions;
• Remember user preferences and account settings;
• Operate essential website functionality;
• Improve performance and reliability;
• Analyze usage of the Services;
• Measure the effectiveness of features and communications;
• Detect fraud, abuse, and security incidents;
• Troubleshoot technical issues; and
• Improve the overall user experience.

Depending on the Services you use, TourFX may utilize:

• Essential Cookies – Required for the operation, security, and functionality of the Services.
• Functional Cookies – Remember your preferences and personalize your experience.
• Analytics Cookies – Help us understand how users interact with the Services so we can improve performance and usability.
• Performance Cookies – Measure reliability, diagnose technical issues, and optimize system performance.
• Marketing Cookies – Used only where applicable to measure marketing effectiveness or provide advertising-related functionality in accordance with applicable law.

Not all categories of cookies are used in every jurisdiction or on every part of the Services.

Depending on your location and applicable law, you may be able to control or manage certain cookies through:

• Your browser settings;
• Cookie preference tools provided through the Services;
• Device settings; or
• Other privacy controls made available by TourFX.

Please note that disabling certain cookies may affect the availability or functionality of portions of the Services.

Additional information regarding the cookies and tracking technologies used by TourFX, including the categories of cookies we use, their purposes, retention periods, and available choices, is available in our separate Cookie Policy, which is incorporated into this Privacy Policy by reference.

If there is any inconsistency between this section and the Cookie Policy regarding cookies and tracking technologies, the Cookie Policy will control with respect to those technologies.

With your consent where required by applicable law, TourFX may send marketing communications regarding:

• New products and features;
• Product updates and announcements;
• Promotional offers;
• Educational content;
• Webinars and events;
• Surveys and feedback requests; and
• Other information about TourFX and our Services.

We may send these communications by email or through other communication methods you have authorized.

You may opt out of receiving marketing communications at any time by:

• Clicking the “unsubscribe” link included in our marketing emails;
• Updating your communication preferences within your account, where available; or
• Contacting us at support@tourfx.ai.

Please allow a reasonable period for your request to be processed.

Opting out of marketing communications will not affect your ability to use the Services.

Even if you opt out of marketing communications, TourFX may continue to send communications that are necessary to provide the Services or administer your account.

These communications may include:

• Account verification;
• Password resets;
• Security alerts;
• Billing and payment notifications;
• Subscription confirmations;
• Service announcements;
• Changes to our Terms of Service or Privacy Policy;
• Customer support responses; and
• Other communications necessary for the operation of your account or the Services.

Because these communications are essential to providing the Services, you cannot opt out of receiving them while you maintain an active account.

Where available, you may manage your communication preferences through your account settings.

TourFX will honor your communication preferences in accordance with applicable law, although certain legally required or service-related communications may continue to be sent as described in this Privacy Policy.