Privacy Policy

ViewPass

Effective date: 19 August 2026 | Last updated: 28 September 2026

1. Who we are

ViewPass is operated by AK Real Estate Acquisitions LLC, a limited liability company registered in the State of Florida, United States, with its registered address at 7901 4th St N Ste 300, St. Petersburg, FL 33702, US ("ViewPass", "we", "us", "our"). ViewPass is available at https://viewpass.app.

ViewPass is a software service for real estate agents. It lets agents offer self guided viewings of vacant properties. Prospective buyers and renters ("viewers") book a viewing slot, verify their identity, and receive a time limited door code for a smart lockbox at the property.

AK Real Estate Acquisitions LLC is the data controller for the personal information described in this policy. For anything privacy related, contact us at support@viewpass.app.

2. Who this policy applies to

This policy covers two kinds of people who use ViewPass, and the information we hold about each is different.

  • Agents: real estate professionals who create a ViewPass account, add property listings, connect a smart lockbox and pay for a subscription.
  • Viewers: members of the public who use a tour link or QR code to book and complete a self guided viewing. Viewers do not create an account.

Where a section applies only to one group, it says so.

3. Information we collect

3.1 Information agents provide

  • Company or agency name, work email address and password (your password is stored only as a one way hash, never in readable form).
  • Property listing details: address, description and any listing label you choose to add.
  • Call prompt preferences: the days and hours you are willing to take calls from viewers during a tour, and the phone number to reach you on if you enable this feature.
  • Your choice of lockbox provider and the connection details needed to issue door codes (see Section 6).
  • Whether you have opted in to receive marketing updates from us.
  • If you join the ViewPass: Territory waitlist: your name, email address, US state and, optionally, your brokerage. We use these only to tell you when Territory opens and to send related product updates. You can ask us to remove you at any time.

3.2 Information viewers provide

  • Full name, mobile phone number and email address, entered when booking a viewing.
  • The date and time slot you book, and which property it relates to.
  • Your chosen identity document type (passport, driving licence, national ID card or state ID card) and the outcome of the identity check (see Section 5). We do not receive or store the image of your document.
  • Viewing feedback, if you choose to leave it: your level of interest, how the property compared to its listing, and any question you leave for the agent.
  • Whether you asked to submit an application for the property.
  • If you contact us through the contact form on our site: your name, email address, your message, and whether you opted in to receive marketing updates from us.

3.3 Information collected automatically

  • Login and session data needed to keep agents signed in securely.
  • A record of each door code issued: the code, the listing it was for, the viewing it was issued against, and the time window it was valid for.
  • Whether a door code confirmation email was sent to a viewer, and when.
  • Standard server and security logs, including IP address, used for security monitoring and to limit repeated failed sign in attempts (see Section 8).

We use Google Analytics to understand how people find and use ViewPass. It collects standard usage information such as the pages visited, approximate location derived from your IP address, device and browser type, and the site that referred you. This applies to both agents and viewers. We do not use advertising trackers or social media pixels on ViewPass.

3.4 Information we do not collect

  • We do not collect payment card numbers. Card details are entered directly with our payment processor and never pass through our systems.
  • We do not collect, receive or store images of identity documents, and we do not collect facial biometric data.
  • We do not collect device location or GPS data.
  • We do not knowingly collect information from anyone under 18. ViewPass is for adults booking property viewings.

4. How we use information

PurposeWhat this involves
Providing the serviceRunning agent accounts, displaying listings, taking viewer bookings, issuing door codes, and passing viewer feedback and applications to the agent whose property it is.
Identity verificationConfirming that a viewer holds a valid government photo ID before a door code is issued, so the agent has a verified record of who entered the property.
Property access and auditGenerating time limited door codes and keeping a log of which code was issued to which booking, so there is an accurate record of access to each property.
CommunicationsSending a viewer their door code and booking details by email. Sending agents service messages about their account. We only send news, product updates or offers to people who have opted in, and you can unsubscribe at any time.
BillingCharging agents for their subscription and adjusting it when listings are activated or deactivated.
SecurityProtecting accounts, preventing abuse, and limiting repeated failed sign in attempts.
Legal obligationsMeeting tax, accounting and legal requirements, and responding to lawful requests.

We do not use personal information to build marketing profiles, and we do not sell or rent personal information to anyone.

5. Identity verification

Before a door code is issued, every viewer must verify a government issued photo ID. This is a core part of how ViewPass works and is why agents and property owners can allow unaccompanied access.

Identity checks are performed by Didit, an independent identity verification provider. When you start verification you are taken to a page run by Didit, where you photograph your document. Didit reads and checks the document and returns a result to ViewPass.

What ViewPass receives and keeps is deliberately limited to:

  • The name you entered when booking.
  • The type of document you chose to verify with.
  • The result of the check: approved, declined or under review.
  • A reference number for the verification session.

ViewPass does not receive, view or store the image of your document, the data extracted from it, or any facial or biometric data. The agent sees only your name and whether the check passed.

How long Didit keeps the information it collects during the check is governed by Didit's own privacy policy, which you should read alongside this one. A door code is never issued unless the check is approved.

6. Door codes and smart lockboxes

Door codes are issued through Seam, a smart device platform that connects ViewPass to the agent's lockbox. ViewPass works with igloohome lockboxes and TTLock compatible lockboxes.

Agents connect their own lockbox by signing in to their igloohome or TTLock account through a page run by Seam. ViewPass never sees the agent's lockbox account password. Seam gives ViewPass a device reference that lets it issue codes to that lockbox.

When a viewer's booking is confirmed and their identity check has passed, ViewPass asks Seam to create a code on the lockbox for a window around the booked slot. The exact window depends on the lockbox hardware and is shown to the viewer. ViewPass stores the code and the window against the booking.

To limit the personal information shared with the lockbox provider, the code is labelled in the lockbox system with a generic ViewPass reference, not with the viewer's name.

7. Who we share information with

We share personal information only with the service providers we need in order to run ViewPass, and only the information each one needs. We do not sell or rent personal information.

ProviderWhat they do for usWhat they receive
SupabaseHosts our database and handles agent sign in.All account, listing, booking, feedback and door code data described in this policy.
DiditVerifies viewer identity documents.The viewer's name, email and phone, and the document image the viewer photographs on Didit's own page.
StripeProcesses agent subscription payments.Agent email, company name and payment card details entered directly with Stripe.
SeamConnects to lockboxes and issues door codes.The agent's lockbox account connection, the listing reference and the code time window. Not the viewer's name.
ResendDelivers transactional email.The viewer's email address, the property address, door code and valid time window, in the confirmation email.
Google AnalyticsMeasures how people find and use ViewPass.Standard usage data including pages visited, approximate location from IP address, device and browser type, and referring site.
igloohome / TTLockManufacture and operate the lockbox.The door code and its time window, via Seam, labelled with a generic ViewPass reference.

Each of these providers is bound by its own privacy policy and by contractual terms limiting how it may use the information. We encourage you to read their policies.

Beyond these providers, we may share information:

  • With the agent whose property you book. Agents see the viewer's name, booking slot, verification result, feedback and application request, because that is the purpose of the service.
  • If required by law, regulation, legal process or a lawful request from a public authority.
  • To protect the rights, property or safety of ViewPass, our users, property owners or the public, including investigating misuse of a door code.
  • As part of a business transfer such as a merger or sale, in which case this policy will continue to apply to the information transferred.

8. How we protect information

  • All data is encrypted in transit using HTTPS.
  • Agent passwords are stored only as one way hashes.
  • Database access rules mean each agent can only see their own listings, bookings and feedback. Viewers can only reach the public tour page for a specific active listing.
  • Sign in and password reset are rate limited to help prevent guessing attacks.
  • Door codes are time limited and tied to a single booking. They are never issued without an approved identity check.
  • Secret keys for our service providers are held only on our servers and are never exposed to web browsers.

No method of transmission or storage is completely secure. If we become aware of a breach that affects your personal information, we will notify you and any relevant authority as required by applicable law.

9. How long we keep information

InformationHow longWhy
Agent account detailsWhile the account is open, then up to 12 monthsService delivery, dispute resolution, backups
Listing detailsWhile the listing exists, including while archivedAgents can archive and later reactivate a listing with its history intact
Viewer booking, identity result, feedback and door code recordsFor the life of the listing and for a period afterwards to preserve the access recordThese form the audit trail of who entered a property and when, which is a core purpose of the service
Door code confirmation emailsDelivery status onlyConfirming the email was sent
Billing and transaction recordsUp to 7 yearsTax and accounting obligations
Security and server logsUp to 90 daysSecurity monitoring and abuse prevention
Territory waitlist detailsUntil Territory launches and you either sign up or unsubscribe, or 12 months after you joined the waitlist, whichever comes first. We delete them earlier on request.To tell you when Territory opens

If an agent permanently deletes a listing, the listing itself is removed but the booking and access records are retained, detached from the property, so that the access log remains complete. Viewers who want their booking information removed sooner can contact us (see Section 11); we will honour the request unless we need to retain a record for security, legal or dispute reasons.

10. Where information is processed

ViewPass is a United States service operated by a Florida company, and our service providers process information in the United States. If you access ViewPass from outside the United States, including from the United Kingdom or Canada, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. By using ViewPass you understand that your information will be processed there.

Where UK data protection law applies to a transfer, we rely on appropriate safeguards recognised under UK law.

11. Your rights and choices

Depending on where you live, you may have the right to ask us what personal information we hold about you, to correct it, to delete it, to restrict how we use it, or to receive a copy in a portable format. To make a request, email support@viewpass.app. We will verify your identity before acting and respond within the time required by applicable law. We will never treat you differently for exercising a privacy right.

California residents

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you the right to know what personal information we collect and how we use and share it, to request deletion, to request correction, and to opt out of the sale or sharing of your personal information. We do not sell or share personal information for cross context behavioural advertising. We will not discriminate against you for exercising these rights.

In the last 12 months we have collected the categories of personal information described in Section 3 of this policy: identifiers, contact details, commercial information relating to subscriptions, and, for viewers, the result of an identity document check.

Residents of other US states

Residents of states with comparable privacy laws, including Virginia, Colorado, Connecticut, Texas and Oregon, may exercise equivalent rights by contacting us. Nevada residents may opt out of any future sale of their personal information by emailing support@viewpass.app; we do not currently sell personal information.

United Kingdom residents

If you are in the United Kingdom, the UK GDPR and the Data Protection Act 2018 give you rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent where we rely on it. You may also complain to the Information Commissioner's Office at ico.org.uk. Our lawful bases for processing are: performance of a contract (providing the service to agents), legitimate interests (security, fraud prevention and maintaining an accurate access record for property owners), and consent where we ask for it.

Canadian residents

If you are in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) gives you the right to access the personal information we hold about you, to request that we correct it if it is inaccurate or incomplete, and to withdraw your consent where we rely on it, subject to legal or contractual restrictions. To make a request, email support@viewpass.app and we will verify your identity before acting. You also have the right to complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

12. Children

ViewPass is not directed at children and is not intended for anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with information, contact us and we will delete it.

13. Cookies

ViewPass uses cookies and browser storage in two ways. The first is essential: the cookies and storage needed to keep agents signed in and to keep the service secure. The second is analytics: Google Analytics sets cookies to measure how people find and use ViewPass, as described in Section 3.3. We do not use advertising cookies. You can clear or block cookies in your browser settings, but clearing them will sign you out.

Do Not Track

Some browsers can send a Do Not Track signal to websites. There is no agreed standard for how websites should respond to it. ViewPass does not currently change how it collects information in response to Do Not Track signals. If you prefer not to be included in our analytics, you can use a browser setting or extension that blocks Google Analytics, or clear and block cookies for this site. Doing so does not affect your ability to book or complete a viewing.

14. Links to other services

During identity verification and lockbox connection you will be taken to pages run by Didit and Seam. Those pages are governed by their own privacy policies. This policy does not cover how third parties handle information on their own sites.

15. Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top. If the change is significant, we will tell agents by email or by a notice in the ViewPass dashboard. Continued use of ViewPass after a change means you accept the updated policy.

16. Contact us

Email: support@viewpass.app

Website: https://viewpass.app

Data controller: AK Real Estate Acquisitions LLC

Address: 7901 4th St N Ste 300, St. Petersburg, FL 33702, US

We aim to respond to privacy enquiries within 5 business days, and within applicable legal deadlines for formal requests.