1. Who we are
Oria is a brand of ZETTASOURCE S.R.L., a Romanian limited liability company with registered office at Str. Serelor nr. 5B, Onești, jud. Bacău, 601115, Romania, registered with the Trade Registry under J04/1144/2021, sole registration code (CUI) 44525193. We are the data controller for personal data processed through realoria.com and the Studio and Air services.
Contact for privacy matters: contact@zetta360.com.
2. What we collect
Information you give us
- Contact details — name, email, phone number, company, role, when you request a quote, sign up to the waitlist, or message us on WhatsApp.
- Account data — email and authentication identifiers when you create an account to access your tours.
- Property data — address, photos, videos, floor plans, and other media you upload or that we capture on site for the production of a virtual tour.
- Billing data — company details, VAT number, and invoice address. Payment card information is handled directly by our payment processor; we do not store card numbers.
Information collected automatically
- Usage data — pages viewed, referring URL, approximate location derived from IP address, device type, browser, and timestamps.
- Tour analytics — aggregate viewing metrics on your published tour (sessions, dwell time, hotspot interactions).
3. Why we process it
- To respond to your enquiries and provide quotes.
- To deliver the Studio and Air services and host the resulting virtual tours.
- To manage your account, authentication, and access to private tours.
- To issue invoices and meet our tax and accounting obligations.
- To improve the service through aggregate analytics.
- To send service-related communications and, where you opt in, product updates.
- To prevent fraud, abuse, and to enforce our Terms.
4. Legal basis
We process personal data on the following legal bases under Article 6 of the GDPR:
- Performance of a contract — to deliver the service you have asked us to provide.
- Legitimate interests — to operate the website, secure our systems, and improve the product, balanced against your rights.
- Legal obligation — to keep accounting records and respond to lawful authority requests.
- Consent — for optional marketing communications and non-essential cookies. You can withdraw consent at any time.
5. Sharing & processors
We do not sell personal data. We share it only with vetted processors acting on our instructions, including:
- Cloud hosting and storage (Vercel, Supabase).
- Email and messaging infrastructure.
- Payment processors for billing.
- Accounting and tax advisors, under confidentiality.
We will only disclose personal data to public authorities where required by law.
6. Retention
- Quote & enquiry data — up to 24 months from last contact, then deleted or anonymised.
- Account data — for the life of the account, plus 90 days after closure.
- Tour media — for the duration of the hosting plan, plus 30 days after termination.
- Invoices and accounting records — 10 years, as required by Romanian fiscal law.
7. International transfers
Our infrastructure is hosted in the EU/EEA where possible. Where a processor is located outside the EEA, transfers are protected by Standard Contractual Clauses approved by the European Commission and, where applicable, additional safeguards.
8. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, and object to the processing of your personal data, as well as the right to data portability and to withdraw consent. See the GDPR notice for the full list and how to exercise them.
9. Cookies
realoria.com uses strictly necessary cookies for authentication and security. We use privacy-preserving, aggregated analytics that do not rely on tracking cookies by default. If we add non-essential cookies in the future, we will ask for your consent through a banner before they are set.
10. Security
We use TLS in transit, encryption at rest for stored media, least-privilege access controls, and audit logging. No system is perfectly secure — if you become aware of a vulnerability, please report it to contact@zetta360.com.
11. Changes
We may update this policy as our service evolves. Material changes will be notified by email or by a banner on the site. The “Last updated” date at the top reflects the current version.
12. Contact
Questions, complaints, or requests under this policy can be sent to contact@zetta360.com. You also have the right to lodge a complaint with the Romanian Data Protection Authority — Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (dataprotection.ro).