Last updated : 2026-09-21
Privacy policy
This English version is provided for convenience. The French version, Politique de confidentialité, is the binding one.
Personal data
For vrtice, respect for privacy and data is fundamental. Accordingly, in compliance with the General Data Protection Regulation (GDPR) adopted by the European Parliament on 14 April 2016, and with the amended French Data Protection Act of 6 January 1978, vrtice informs you of the following.
In connection with the Noddy services (the Noddy mobile app, the Noddy web app and the panorama stitching service), personal data about you may be collected (hereinafter your "Personal Information"). It is processed by vrtice for the purposes set out in this privacy policy. The data collected is the data needed for the services to work properly.
Identity of the data controller
The data controller is vrtice, a French SAS with a share capital of €55,000, whose registered office is at 545 avenue de l'Europe, 38330 Montbonnot-Saint-Martin, France, registered in Grenoble under number 848 469 037.
Email address: rgpd@vrtice.com
Noddy is a professional tool. When your account is provided by your employer or by a customer of vrtice, that organization determines how the panoramas you produce are used. vrtice then processes these images on its behalf, in order to provide the service.
Data collected
Various categories of data may be collected by vrtice in connection with the use of the services. Below is the list of data collected and information on when it is collected.
When your account is opened, the following may be collected
Account data including: your sign-in credentials (email address, which is your login, and password), information about your profile (last name, first name, language, company) and the Noddy stations linked to your account.
When you use the services, the following may be collected
| Category | Detail |
|---|---|
| Capture data | The photos taken during a sequence and the stitched panorama, with their name and date. For each photo: phone orientation measured by its motion sensors, station angles, lens calibration, sequence settings, capture time and, when you allow it, the geographic position of the capture location. Technical log of the sequence. |
| Technical data | Information about your device (model, operating system version, app version, IP address, stable technical identifier of the phone) and about the station (identifier, software version, battery level, motor measurements, received over Bluetooth). |
| Notification data | The notification token and the app installation identifier. |
| Usage data | Your sign-in history to the services. The app contains no audience measurement tool. |
| Diagnostic data | Crash reports (nature of the error, technical state of the app, phone model) and performance measurements. These reports contain no screenshot and no photo. |
When you contact customer service, the following may be collected
Request data including: the details of your request or complaint (time, date, subject and content of the request), the content of exchanges with customer service and any data needed to process your request.
Additional data that may be collected
Exceptionally, vrtice may ask for your permission to collect certain data. For example, for certain satisfaction surveys or particular events, we may ask for your consent to collect participation data.
Permissions requested by the mobile app
- Camera: take the photos of the sequence.
- Motion sensors: measure the phone orientation during the sequence.
- Bluetooth: connect to the station.
- Location: when you allow it, the app records the geographic position of the capture location with the panorama, in order to place it. Without this permission, the app does not read your position. On Android 11 and earlier, the system also requires this permission to detect a nearby Bluetooth device: in that case, no position is read or recorded.
- Notifications: inform you about the progress of an upload or a stitch.
The app detects when a phone call starts in order to pause the sequence. It reads neither the number nor the content of the call. Photos stay in the app's private storage: they are not added to your photo library.
Purposes of the processing
vrtice may process your Personal Information for the purposes set out below. The collection of your Personal Information is necessary to enable vrtice to meet its contractual obligations toward you and to comply with the laws and regulations on the protection of personal data.
To give you access to the Noddy services
vrtice uses your account, capture, notification and technical data to let you benefit from the Noddy services, and in particular from the following features:
- signing in to your account and linking your stations;
- controlling the station and taking photos;
- stitching the photos into a panorama;
- placing the panorama at its capture location, when you allow it;
- storing, viewing and downloading panoramas, from the mobile app or the web app;
- notifying you of the progress of a stitch;
- updating the station software.
To improve, secure and monitor the Noddy services
vrtice uses your account, usage, diagnostic and technical data to improve the features of the Noddy services and their performance, develop new features and services, and ensure the confidentiality, security and integrity of the service. This processing is based on vrtice's legitimate interest. You may object at any time by writing to the address given above.
For marketing purposes
vrtice may use your account data to send you information about the Noddy services, their features and their offers. You may object at any time.
To answer your requests
vrtice uses your account, usage, technical and request data to handle your requests to customer service.
Recipients of the data
vrtice is the recipient of your Personal Information. To provide the Noddy services, vrtice uses providers that process certain data on its behalf and on its instructions:
- hosting and storage of accounts, photos and panoramas: cloud infrastructure providers;
- panorama stitching: Pixfield (France), which receives the photos and capture data of a sequence;
- notifications: Google Firebase Cloud Messaging, and Apple's notification service on iPhone;
- diagnostics: Sentry.
Some of these providers are established outside the European Union, notably in the United States. These transfers are covered by the European Commission's standard contractual clauses or by an adequacy decision.
Apart from these providers, your Personal Information, whether in individual or aggregated form, is not passed to third parties. vrtice does not sell the personal data of the visitors and users of its services.
Retention period
Your Personal Information is kept by vrtice only for the time corresponding to the purpose of the collection as set out above.
| Purpose | Data | Retention |
|---|---|---|
| Access the Noddy services | Account data; technical data; notification data | Duration of the account, then archived for up to 3 years |
| Stitch and store panoramas | Capture data | Until deleted by the user or until the account is deleted |
| Improve, secure and monitor the Noddy services | Account data; usage data; technical data; diagnostic data | Duration of the account, then archived for up to 3 years. Crash reports: 90 days |
| Promote the Noddy services | Account data | For 3 years after the end of the account |
| Handle requests | Account data; usage data; technical data; request data | Duration of the handling of your request, then archived for up to 3 years |
Deleting your account and your data
From the mobile app: Settings, Account, "I want to delete my account". Deletion erases your account and all your panoramas, with no possible recovery. You can also delete a single panorama from its page in the app.
Without the app: write to rgpd@vrtice.com from the email address of your account. vrtice processes the request within one month.
Data protection
vrtice implements measures intended to protect your Personal Information against unauthorized access, use and disclosure. To this end, vrtice has in particular put the following measures in place:
- technical measures to ensure the confidentiality and security of your data (encrypted exchanges, session credentials kept in the phone's secure storage, authenticated connection with the station);
- restricted access to your Personal Information;
- confidentiality obligations for vrtice employees who have access to your Personal Information.
People in photos
A panorama may show people present on the premises. It is up to the user to make sure he or she is authorized to photograph the premises and to inform the people concerned when required. The Noddy services are intended for professionals and reserved for adults.
Your data protection rights
You have the following rights regarding your Personal Information, which you can exercise by writing to vrtice at the address given above.
Right of access
You may access the Personal Information collected by vrtice.
However, because of vrtice's obligation of security and confidentiality in the processing of personal data, your request will be processed provided that you prove your identity, in particular by producing a copy of a valid identity document.
vrtice informs you that it will be entitled, where appropriate, to refuse manifestly abusive requests (because of their number or their repetitive or systematic nature).
Right to rectification and erasure
The right to rectification entitles you to request the rectification, updating, blocking or erasure of Personal Information about you that may prove inaccurate, erroneous, incomplete or obsolete. You may also request the restriction of processing and the portability of your data.
You may also define general and specific instructions regarding what happens to your personal data after your death. Where applicable, the heirs of a deceased person may require that the death be taken into account and/or that the necessary updates be made.
Right to object
This right may be exercised in either of the following two situations:
- when the exercise of this right is based on legitimate grounds, in particular with regard to improvement and diagnostic processing; or
- when the exercise of this right is intended to prevent the data collected from being used for marketing purposes.
Response time
vrtice undertakes to answer your request for access, rectification or objection, or any other request for further information, within a reasonable period that shall not exceed 1 month from receipt of your request.
Complaint to the competent authority
If you consider that vrtice is not meeting its obligations regarding your Personal Information, you may lodge a complaint or a request with the competent authority. In France, the competent authority is the CNIL, cnil.fr.
Cookie policy
The noddy.me website sets no cookies and loads no analytics tool or third-party resource. The website's hosting provider records technical logs (IP address, requested page, date) to keep the service secure and running.
The Noddy web app uses only the cookies or local storage needed to sign you in and keep your session secure. They are essential to the service and are used for no audience measurement and no advertising.
If this changes, you will be informed by a banner when you visit, and the list of cookies used will be published on this page.
Changes to this policy
vrtice updates this policy when the services change. The date at the top of the page shows the version in force. A significant change is announced by any useful means (email, notification at sign-in).