Privacy notice

Draft — to be reviewed before launch. Last updated 16 October 2026.

This notice explains what [Company name], trading as Villa Tours by AvantQ, collects when you use this site, why, and what happens to it. We are based in the United Arab Emirates. We have kept this short and plain on purpose.

1. What we collect

  • Your contact details — name, email address and, if you give it, phone number — so we can send you the quote, questions about the plan, and the delivery link.
  • Your project — the floor plan, inspiration photos and the answers you give in the order form (property type, floors, rooms, ceiling heights, style notes).
  • Order and payment facts — the quote, the status of the order, and the identifiers our payment provider gives us. We never see or store your full card number.
  • Technical basics — the IP address and time of each request, kept in short server logs for security and to keep the site running. We do not use analytics or advertising trackers and we set only one cookie, on the owner's admin login page.

2. Why we use it

To produce and deliver the order you asked for, to answer your questions, to take payment, and to keep the service secure. That is all. We do not use your files for marketing, to train any system, or for other customers' orders, and we do not sell your information.

3. Your plans stay yours

You keep all intellectual property in the floor plans and photos you send us. We use them only to produce your order and treat them as confidential. They are never shared with anyone beyond the providers below, and never posted publicly.

4. Who else handles your information

We use a small number of service providers to run this service. Each only processes what it needs for its job:

  • Stripe — card holds and charges. Your card details go straight to Stripe; we receive only a confirmation and an identifier.
  • Cloudflare R2 — storage for your uploaded files and the finished deliverables.
  • Railway — hosting for this web app and its database.
  • Resend — sends our emails to you (quote, questions, delivery link).

Some of these providers store data outside the UAE. We choose providers with appropriate security measures and do not give them more than they need.

5. How long we keep it

We delete your plan and photos 90 days after your order is delivered or cancelled. Your tour link stays live; ask us by email to take it down at any time.

Order records (your name, email, the quote and the order history) are kept for as long as we need them for accounting and to handle any question about the order. Server logs are kept for a short period and never contain your files, your name or your email.

6. Your delivery link

Your order status page and your delivery link use long, unguessable addresses instead of a login. Anyone who has the address can open it, so please share it only with people you trust. We never publish these addresses and never hand them to third parties.

7. No automated decisions

We do not make automated decisions about you. A person reviews every order, decides every quote, and prepares every delivery.

8. Your choices

You can ask us at any time to see what we hold about you, to correct it, to delete your files early, or to take your tour link down. Email us and we will act within a few business days. If your order is still in progress, deleting your files may mean we cannot finish it.

9. Security

Your files are stored privately and are never listed publicly. Status and delivery addresses are random and are never written to our logs. The owner's admin area is protected by a password and a signed cookie. No system is perfectly secure, but we take reasonable steps and would tell you promptly if your information were affected by a breach.

10. Changes

If we change this notice, we will update the date at the top. Significant changes will be mentioned on the home page.

11. Contact

[Company name], United Arab Emirates. [Registered address to be added before launch.] Email: md.rashid.md@gmail.com.