Privacy Policy

Last updated: September 23, 2026

Who we are

VIYLSA ("we", "us") builds 360° virtual tours with a built-in AI guide for venues in Pakistan. This page explains what information we handle when you use this website or a VIYLSA tour.

What we collect on this website

• Contact details you send us. When you submit the enquiry form, message us on WhatsApp or email us, we receive the name, contact details and message you choose to share. The enquiry form is delivered through a form processor (Formspree), which passes your submission to our inbox. We use these details only to respond to your enquiry and arrange your demo.
• No accounts, no tracking forms. This website does not require sign-up and does not sell or share your details with third parties.

What a VIYLSA tour collects for venue owners

• Visit analytics. Aggregate statistics such as visit counts, time spent in the tour and which spaces were viewed. Visitors are never required to identify themselves. These are reported to the venue that owns the tour.
• AI guide conversations. Questions asked to the AI guide, and any contact details a visitor chooses to leave, are shared with the venue so it can follow up.

NEIC tour analytics

The NEIC tour records how the tour is used, so NEIC can see what visitors look at. A session belongs to one browser tab; it is not an identified person. The tour records:

• Your visit: page loads, the rooms you open, how long you spend in each, and a periodic "still here" signal (capped at 30 minutes per session).
• Where you look: coarse view-direction samples, used to draw the attention heatmap.
• What you use: info points you open, how you move between rooms (arrows, floor plan, gallery, automatic tour) and clicks through to the NEIC website.
• How you arrived: the referring site's host name (not the full address) and limited campaign tags (utm source, medium and campaign) if the link had them.
• Your device, broadly: phone or desktop, a screen-size band, browser and operating-system family (for example "Chrome" or "Android"), and your browser's language. We do not store the full user-agent string.
• Approximate location: Cloudflare supplies country, region, city and timezone from the network connection when an event arrives. VPNs and mobile networks can make this inaccurate. We never use GPS and never ask for your location.

We do not store raw IP addresses in analytics or try to identify visitors. A token derived from the connection, which changes every day, is used only to limit abuse. No cross-site identifier, advertising cookie or session recording is used.

Cloudflare hosts the website and processes incoming requests; Supabase stores the analytics and serves the administrator-only dashboard. The tour uses your browser's local and session storage for the opt-out setting, the session, and a small queue that holds events while you are offline.

The tour on our homepage

The homepage loads the live NEIC tour and plays a short demonstration on it automatically. That demonstration is not counted as a visit: the tour holds its analytics until you click, tap or scroll inside it yourself, and the demonstration's camera movements never enter the attention heatmap.

AI guide

Questions you type to the tour's AI guide are sent to our guide service to produce an answer, and are shown to the venue so it can see what visitors want to know. The guide may offer an optional form for your name and email; those details are stored only if you submit them, and are shared with the venue so it can reply. They are never sent to the AI model.

The raw analytics retention policy is 180 days, but automated deletion is currently gated pending verification; data may remain longer until this is enabled. Aggregate reports may be retained longer. Contact details and guide messages follow their separate voluntary-submission handling.

Third-party services

The enquiry form on this website is processed by Formspree, whose handling of form submissions is covered by Formspree's own privacy policy. The tour player is embedded from its own hosted address, and contacting us via WhatsApp is subject to WhatsApp's privacy policy.

Your choices

Disable NEIC analytics on this browser or enable it again. Opting out does not prevent tour navigation. Where applicable law requires consent, analytics must remain disabled until that consent is obtained.

To ask what information we hold about you, or to have it corrected or deleted, email [email protected]. We respond within one business day.

Questions? [email protected] · WhatsApp +92 310 5968568