Last updated: October 27, 2026
Article 1 – Scope
This Privacy Policy explains how VR2Planets processes personal data when you use VRExplorer, our collaborative virtual and mixed reality platform for exploring, measuring and sharing 3D scenes. Using VRExplorer requires an account provided by VR2Planets or by your organisation.
It applies to the VRExplorer application and web platform.
Use of VRExplorer is also governed by our General Terms & Conditions.
Article 2 – Data Controller and Contact
VR2Planets SAS, RCS Nantes 822 910 139, 42 Rue la Tour d’Auvergne, Halle 6 – Ouest, 44200 Nantes, France.
For any privacy question or request: contact@vr2planets.com. No Data Protection Officer has been appointed.
When a client organisation uploads its own 3D data into VRExplorer, that organisation remains responsible for this content; VR2Planets processes it on the client’s behalf, as described in our General Terms & Conditions.
Article 3 – Data We Collect
VRExplorer collects the following data when you use the application:
| Category | Data | Where it is stored |
|---|---|---|
| Account | Username, email address, first name, last name, password (stored hashed), organisations you belong to | Our servers |
| Preferences | User settings such as text size | Our servers |
| Session content | Content created in collaborative sessions: slides, objects, annotations, measurements | Our servers |
| Client content | 3D data uploaded by the client (LiDAR, photogrammetry, point clouds, images) | Our servers |
| Activity logs | Login dates and times, actions performed in the client’s private area | Our servers |
| Saved sign-in | Sign-in information kept on the headset so you do not need to log in each time | Your headset only |
| Multi-user session | Real-time position and orientation of your headset and controllers, avatar and username, shown to other participants in the same session | Not stored: transmitted in real time only |
| Voice | Voice chat audio, streamed in real time to other participants via Photon Voice | Not recorded or stored |
| Camera (passthrough) | On Meta Quest and Pico, passthrough camera images are used to display your surroundings in mixed reality and to scan sign-in QR codes. Only the temporary, single-use sign-in token contained in the QR code is used, to log you in to VRExplorer | Camera images are processed on the headset only and never stored or sent to our servers; the sign-in token is sent to our servers for authentication only |
| Hand tracking | Overall position of your hands, detected by the headset’s hand tracking, used to display your avatar’s hands to you and to other participants. Finger movements are not used | Processed on the headset; hand position transmitted in real time during sessions; never stored |
| Crash reports | Error details, device model, operating system and app version, IP address, collected via Sentry when the app crashes | Sentry |
We do not collect: eye-tracking data, room or scene scans, biometric data, precise location, contacts, or payment data. We do not use advertising or audience-measurement tools. The VRExplorer web platform only uses strictly necessary cookies to keep you signed in.
Article 4 – How We Use Your Data
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Provide access to VRExplorer and authenticate users | Account, saved sign-in, authentication cookies | Performance of the contract (Art. 6(1)(b)) |
| Run real-time collaborative sessions (seeing and talking to other participants) | Multi-user session, voice | Performance of the contract (Art. 6(1)(b)) |
| Store, display and process 3D data and session content | Client content, session content, preferences | Performance of the contract (Art. 6(1)(b)) |
| Display mixed reality and let you sign in by scanning a QR code | Camera (passthrough), processed on the headset | Performance of the contract (Art. 6(1)(b)) |
| Display your hands in the application | Hand tracking | Performance of the contract (Art. 6(1)(b)) |
| Send service emails (invitations, password reset) | Email address, username | Performance of the contract (Art. 6(1)(b)) |
| Secure the service and trace access to the client’s private area | Activity logs | Legitimate interest in security (Art. 6(1)(f)) |
| Detect and fix crashes and defects | Crash reports | Legitimate interest in a working service (Art. 6(1)(f)) |
We do not sell your data, use it for advertising, or build profiles. VR2Planets does not consult or exploit client content, except data the client has expressly made public or when the client asks us to for support.
Article 5 – Hosting and Service Providers
VRExplorer data is hosted in the European Union, on Amazon Web Services servers located in Paris, France.
Your data is accessed only by authorised VR2Planets staff and by the following processors, bound by data processing agreements:
| Provider | Role |
|---|---|
| Amazon Web Services | Hosting and service emails |
| Photon | Real-time voice and session networking, without storage |
| Sentry | Crash reporting |
Where a provider processes data outside the European Union, the transfer is protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.
Other participants in a collaborative session see your username, avatar and position, and hear your voice, for the duration of that session only.
Article 6 – How Long We Keep Your Data
| Data | Retention |
|---|---|
| Account and preferences | Duration of the client’s subscription, then deleted within 15 days of its end |
| Client content and session content | Duration of the subscription, then deleted within 15 days of its end (unless otherwise agreed with the client) |
| Activity logs | 12 months |
| Backups | Rolling daily backups kept for 5 days |
| Crash reports | No longer than 90 days |
| Saved sign-in on the headset | Until you log out or uninstall the app |
| Multi-user session data, voice, camera images, hand tracking | Not stored |
Article 7 – Requesting Data Deletion
Any user, in any country, can request the deletion of their personal data at any time, free of charge. No login and no justification are required.
To request deletion, email contact@vr2planets.com with the subject “VRExplorer – data deletion” and the email address or username of your VRExplorer account. We delete your data and confirm it within 30 days.
If your account was created by your organisation, you can contact us directly or through your organisation’s administrator; we will process your request in both cases.
Uninstalling the application removes all data stored locally on your headset, including your saved sign-in. Data stored on our servers is deleted only through the request above or at the end of the client’s subscription.
The only data we may keep after a deletion request is data we are legally required to retain, such as invoicing records (10 years under French commercial law). Such data is not linked to your use of the application.
Article 8 – Your Other Rights
You can also request access to, correction of, restriction of, or a portable copy of your data, and object to its processing. These rights are open to all users, wherever they live. Send your request to contact@vr2planets.com.
If you are in the European Union, you can lodge a complaint with the French data protection authority, the CNIL.
Article 9 – Children
VRExplorer is a professional tool and is not intended for children under 16. We do not knowingly collect data from children under 16. If VRExplorer is used in a school setting, accounts for minors are created and supervised by the educational institution, which is responsible for obtaining any required parental consent.
Article 10 – Changes to This Policy
We may update this policy when VRExplorer’s features or data practices change. The date at the top shows the latest revision. Significant changes will be notified to clients through the VRExplorer platform.