Privacy Policy

Effective Date: February 9, 2026 | Last Updated: August 22, 2026 | Version: 2026-08-20

What changed in this version: we now name every service that handles your information and where it is stored, we have corrected how long we keep photos and video, we describe our free tools and the AI behind them, and we set out what we can see while you use the site.

1. Introduction

Omidia ("Company," "we," "our," or "us") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our media platform and related services.

This Privacy Policy complies with the Personal Information Protection Act (PIPA) of British Columbia and the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Your name, email address, phone number, and company or brokerage. Sign-in is handled by Google Firebase Authentication — we never see or store your password.
  • Order Information: Property addresses, property size, order notes, and payment records
  • On-Site Data: Access codes, entry instructions, key pick-up details, and visual data of property interiors and exteriors captured during photography sessions
  • Tenant Contact: If a property is tenanted, the contact name and phone number you give us so we can arrange access (see 6A)
  • Content: Photographs and images submitted for editing
  • Communications: Customer support inquiries and feedback

Property access information — where it goes

When you book a shoot you can give us entry instructions — a lockbox code, a gate or alarm code, buzzer instructions — and key pick-up and drop-off details. We need them to get in and do the work. You should know where they go: they are stored with your order, they are written into the calendar entry for the shoot, which is hosted on Google Calendar and appears on your own calendar too, and they are included in the confirmation and reminder emails we send you. Email is not a secure channel.

Only give us a code you are entitled to share. We keep entry instructions with the order after the shoot; if you would rather we cleared them once the shoot is done, tell us and we will. If a code protects something that matters, change it after the shoot, as you would after any trade visit.

2.2 Information Collected Automatically

  • Pages visited and features used
  • Device type, browser type, and operating system
  • IP address and general location data
  • Cookies and session data
  • Referral tracking data: If you visit Omidia via a referral link, we set a cookie named omidia_ref in your browser containing the referral code. This cookie is valid for 30 days and is used solely to attribute the referral discount to your first booking. We also record the referral visit in our database to enable credit issuance to the referring user.

2.3 Information from Third Parties

  • Google: Name, email, and profile picture when signing in with Google
  • Stripe: Transaction confirmation and limited payment details
  • Our bank: If you pay by Interac e-Transfer, the name your bank sends, the amount, and your order number

2.4 If You Use Our Site Without an Account

You do not need an account to browse the site, use our free tools, or start a booking.

Free tools. We record that a tool was used: which tool, which action, the grade a check produced, whether you are on a phone or a computer, the country your connection reports, and which site you arrived from. A random ID is stored in your browser so repeat visits count as one person. We do not store your IP address, your name, or your email, and we do not store what you checked. These records are deleted after 180 days; the daily totals, which identify nobody, are kept.

Bookings started without signing in. If you build a booking before creating an account, we save the property address, unit number, size, the services you picked, and the time slot you were looking at, so you can pick up where you left off. We do not save a name, email, or phone number at that stage. That saved booking is visible to us and is deleted after 30 days. While you type an address, the address field sends your keystrokes to Google Maps, and we keep a log of address lookups that includes your IP address, to keep our Google bill honest.

If your property is outside our area. If we cannot serve the address and you leave your email, we keep your email address and the property address so we can get in touch if we start covering your area. We do not add you to a mailing list and we do not give it to anyone. Email [email protected] and we will delete it.

3. How We Use Your Information

  • Process and fulfill your photo-editing orders
  • Provide AI-powered image processing and generation
  • Communicate order status and notifications
  • Create and maintain your user account
  • Process payments and maintain billing records
  • Administer the referral program, including tracking referral visits, issuing new-agent discounts, and crediting referring users
  • Show examples of our work in our portfolio, on our website, and on social media — we show the neighbourhood or city, never the street address (see 5A)
  • Publish reviews and testimonials, but only where you have ticked the consent box and chosen how you want to be named (see 5A)
  • Improve our Services and develop new features
  • Comply with legal obligations

4. AI, and What Happens to What You Submit

4.1 Photo Editing

When you order photo editing or virtual staging, the work is done by us, using professional editing and AI tools on our own equipment. Your photos are uploaded to our storage and are not sent to any outside AI service.

4.2 Our Free Tools

Our free tools at theomidia.com/tools need no account.

The MLS Photo Optimizer resizes and compresses your photos entirely inside your own browser. The photos are never uploaded to us or to anyone else.

The BC Ad Compliance Checker gives you an instant letter grade that is worked out in your browser — nothing you type leaves your device for that check. If you then ask for the deeper review, ask us to rewrite your ad, or upload an image or PDF of an ad, that content is sent to our server and on to Google's Gemini AI so it can be read and graded. If you are signed in, the brokerage and team name saved on your profile are sent with it. Do not paste anything confidential.

We do not keep the ad text or the file you upload. Once the result comes back, we keep only counts — how many checks were run and what grade came out. What Google does with what is sent to its AI service is governed by Google's own terms.

✓ AI Training Disclosure

We do NOT use your uploaded images to train AI models. Your images are processed solely for delivering your ordered Services.

5. Disclosure of Your Information

We may share your information with:

ProviderWhat they do for usWhere
Google FirebaseYour account and sign-in, our database, and storage of your photos and delivered filesUnited States
Google CloudRuns our website and our serversUnited States
CloudflareSits in front of our website and routes and protects traffic, so it sees every request and IP addressGlobal network
StripePayments. Card details go straight into Stripe's own fields and never reach our servers. We pass Stripe your name, email, order number, and appointment details so payments and invoices match your booking, and Stripe emails you receipts and any balance invoiceUnited States
Our bank (Interac e-Transfer)Only if you choose to pay by Interac e-Transfer. The transfer carries whatever name your own bank sends with it, the amount, and the order number you type in the message box. We never see your banking login or account number, and we record the payment against your order by handCanada
ResendSends all of our email — confirmations, receipts, preparation guides, reminders, delivery notices, and share invitations. Those emails can contain the property address, the appointment time, your entry instructions, and any tenant contact you gave usUnited States
Google AnalyticsWebsite analytics on every page, including your dashboard — see Section 9AUnited States
Meta (Facebook)Advertising measurement and retargeting on Facebook and Instagram — see Section 9AUnited States
Google Maps PlatformAddress autocomplete and the property map. Your keystrokes in an address field and the property's coordinates go to Google from your own browserUnited States
Google CalendarOur shoot schedule. The entry holds the property address, your email as an invitee, your entry instructions, key pick-up details, and any tenant contactUnited States
Google GeminiReads and grades ad copy and ad images in our free BC Ad Compliance Checker — see Section 4.2United States
Open-MeteoThe weather forecast shown in the booking calendar. Your browser asks them for the forecast using the property's coordinatesEuropean Union
MatterportHosts 3D tours. The tour is embedded in your order page, so Matterport sees your IP address when you open itUnited States
YouTube and VimeoHost the walkthrough videos on our portfolio. We use YouTube's no-cookie playerUnited States
Walk ScoreNeighbourhood scores, if you use Smart Listings. Receives the property address and coordinatesUnited States

What We Do NOT Do:

  • We do NOT sell your personal information, and we never give an advertising or analytics company your name, your email address, or a property address. Section 9A says exactly what those tools receive.
  • We do NOT give your photos to other clients. Your photos are seen by you, by anyone you choose to share them with through Team Access, and by us.
  • We do NOT run a mailing list, and we do not buy or sell contact lists.
  • We do NOT use session recording, heat-mapping, or third-party chat widgets on our site, and our fonts are served from our own servers rather than a font network.

5A. When We Publish Something of Yours

Reviews and testimonials

After a delivery we may ask how it went. If you leave a review and tick the consent box, we may publish it on our website and in our marketing. You choose how you are credited — your full name, your first name and last initial, or anonymously — and we publish the review, the service you bought, and the city. We never publish the street address. We record the date you consented and the version of the release you agreed to; the full release is at theomidia.com/testimonial-terms. Nothing is published until we approve it, and you can withdraw at any time by emailing [email protected], after which we take it down.

Your property photos in our portfolio

Under Section 3.3 of our Terms of Service, we may use the photos and video we produce for you in our own portfolio, website, social media, and advertising, to show what we do. Portfolio images are public. We show the neighbourhood or city, never the full address, and we do not publish anything identifying the owner or occupants. If a particular property should not appear, tell us and we will keep it out or take it down.

6. Your Privacy Rights

Under PIPA and PIPEDA, you have the right to:

  • Access: Request access to your personal information
  • Correction: Request correction of inaccurate information
  • Withdraw Consent: Withdraw consent for data collection
  • Deletion: Request deletion of your personal information

How to make a request

Email [email protected] with "Privacy request" in the subject and tell us what you want. We will confirm we have it, and we will answer within 30 days, which is the time limit BC's Personal Information Protection Act sets. If we need longer we will tell you why before the 30 days are up. There is no charge for an ordinary request. We may need to check who you are before we hand anything over.

Deleting your account

You can delete your account yourself in Settings. That removes your profile, your orders and drafts, the photos and files stored with them, and your sign-in, and it cannot be undone — download anything you want to keep first. Some things are not removed automatically: shoots already in our business calendar, share links you created, referral records, any enquiry you sent us before you had an account, and payment records Stripe keeps for tax purposes. If you want those cleared too, email us and we will do it by hand.

Getting a copy of your information

We do not have a download-everything button. Email us and we will put together what we hold about you and send it in a form you can read.

6A. Information About Other People

Some of what we handle is personal information about people who are not our clients.

Tenants and occupants

If a property is tenanted, we ask you for a contact name and phone number so we can arrange access. We use it only to book and carry out that shoot. It is stored with the order, it appears in the calendar entry for the shoot, and it is included in the confirmation and reminder emails for that shoot. Before you give us a tenant's details, it is your responsibility to have told them and to have their agreement.

People and homes in photographs

Our work is photographs and video of a property, and drone photography can show neighbouring properties. It is your responsibility to have the owner's and the occupants' permission for us to attend, to photograph, and for the images to be published. We ask that people are out of frame during a shoot. If you are an owner, occupant, or neighbour and you are recognisable in an image we produced, or you want to know what we hold, write to [email protected] and we will remove or edit the image and answer you.

People you share files with

When you invite someone to view an order, we store their name and email address, we check whether they already have an Omidia account, we send them an invitation email, and we record when they download files. We tell you when they do. A share link works for anyone who has it until you revoke it, so treat it as you would a key.

7. Data Security

What we actually do. Traffic to our site is encrypted and forced onto HTTPS, files and data are encrypted at rest by our hosting provider, requests that change anything are checked against their origin, your dashboard is blocked from search engines, and your card details are entered directly into our payment processor's own fields and never reach our servers. One person — the owner — has administrative access. No system is perfectly secure, and we do not pretend otherwise.

If something goes wrong. If personal information we hold is lost, stolen, or seen by someone who should not have seen it, and we judge that it creates a real risk of significant harm to you, we will tell you as soon as we reasonably can and we will report it to the appropriate privacy regulator. We will tell you what happened, what information was involved, and what you can do about it. We keep a record of any such incident.

7A. Where Your Information Is Stored

Omidia is based in North Vancouver, but our systems are not. Your account, your orders, the property details you give us, and every photo and video we take or deliver are stored on Google Cloud servers in the United States. Our website and our servers run there too. Our payment processor (Stripe), our email provider (Resend), and Google Analytics also process information in the United States. The weather forecast shown in our booking calendar comes from a provider in the European Union.

This means your information is subject to the laws of those countries while it is there. Courts, law enforcement, and government authorities in the United States may be able to require access to it under US law, and Canadian privacy law cannot prevent that. We use these providers because they are the standard tools available to a business our size, we have them under their own privacy and security commitments, and we keep the amount of information we send them to what the job needs.

If you have questions about information stored outside Canada, email [email protected] and we will answer them.

7B. Who at Omidia Can See Your Information

Omidia is one person. Omid Shariat is the only person with administrative access to client data, and there are no other staff accounts.

Account access for support. We can sign into your account and see what you see, so we can sort out a problem, fix an order, or place one for you over the phone. We record every time we do it. We do not use it for anything other than running your work.

Activity. While you are signed in, your browser tells us you are online about once a minute, so we can see who is currently using the site and which orders are moving. We also get an email when someone registers or signs in. We use this to spot a stuck booking and to know when someone is waiting on us. We do not build profiles from it and we do not share it.

If you would rather not appear on our internal activity view, email [email protected] and we will switch it off for your account.

8. How Long We Keep Things

We do not run an automatic deletion schedule for your media. Your files stay available in your dashboard so you can re-download them and reuse them in later orders. Deletion happens when you ask us, or when you delete your account.

WhatHow long we keep it
Account information (name, email, phone, company)While your account is open. Deleting your account removes it.
Photos, video, floor plans, and other media — both what you upload and what we deliverIndefinitely, so you can re-download and reuse it. Email [email protected] to have the media for one order, or for your whole account, deleted.
Order and property records (address, size, notes, entry instructions)Indefinitely while your account is open. Deleted with your orders when you delete your account.
Payment recordsKept by Stripe for 7 years for tax and accounting purposes. We do not hold your card number at any point. For a payment made by Interac e-Transfer, cheque or cash, what we keep is our own record of it — the amount, the date it arrived, and any reference you gave — for the same 7 years.
Shoot records in our business calendarIndefinitely. These stay in our calendar after an account is closed unless you ask us to clear them.
Website and free-tool analyticsIndividual events: 180 days. Daily totals, which identify no one: kept.
Who is on the site right nowAbout an hour after the visit ends.
Bookings started without an account30 days.
Out-of-area enquiries (your email and the property address)Until you ask us to remove it.
Referral records and creditsKept with the account. Credits expire 6 months after they are earned.
Reviews and testimonialsKept with the order. If you withdraw consent we stop publishing and record that you withdrew.

If you would rather we did not keep your media indefinitely, tell us at the time of your order and we will delete the files once you have downloaded them.

8A. Emails We Send You

Every email we send comes from [email protected].

About your orders: confirmation, receipt, a preparation guide before the shoot, appointment reminders, notice that your files are ready, and a request for feedback afterwards. You can turn most of these off in Settings, under Notifications — order confirmations and receipts, delivery notices, ready-for-review notices, feedback requests, and preparation guides each have their own switch.

We send some things regardless, because they are part of the service you bought: invoices and refund notices, replies to your support messages, reschedule confirmations, and the share invitations you asked us to send on your behalf.

Marketing: we do not run a mailing list, a newsletter, or automated follow-up emails, and we do not email people who abandon a booking. Some of our order emails include a short note about our referral offer. If you would rather have nothing promotional from us at all, reply to any email or write to [email protected] and we will note it against your account.

Omidia, 625 E 3rd St, North Vancouver, BC V7L 0G3, Canada

9. Cookies and Browser Storage

NameWhat it doesHow long
omidia_refOur own cookie. Remembers the referral code of the agent who referred you, so your new-agent discount applies at checkout. Only set if you arrive by a referral link.30 days
Firebase sign-in sessionBrowser storage. Keeps you signed in so you do not have to log in on every page.Until you sign out
_ga, _ga_<id>Google Analytics. Lets Google Analytics tell a new visit from a returning one, so our visitor counts are not nonsense.Up to 2 years
_fbpMeta (Facebook). Advertising measurement and retargeting — see 9A.90 days
omidia-tools-vidBrowser storage. A random ID with no name or email attached, so repeat use of our free tools counts as one person rather than five.Until you clear your browser storage
omidia-tools-notrackBrowser storage. Set on our own browsers so our testing is left out of our numbers.Until cleared

Your choices. You can block or delete cookies in your browser settings, and clearing your browser storage removes the items above. You can opt out of Google Analytics on every site you visit using Google's own browser add-on, and you can control advertising from Meta through Meta's own ad settings. Blocking the sign-in item will stop you staying signed in.

9A. Analytics and Advertising

Google Analytics. We use Google Analytics on every page of this site, including your dashboard. It records which pages you open, roughly where you are connecting from, and what device and browser you use. When you are signed in we also give Google your Omidia account ID, so we can see how an account uses the site rather than only an anonymous browser. We do not send Google your name or your email address. Google processes this in the United States under its own terms.

Meta (Facebook) pixel. We use the Meta pixel on our site to measure our advertising and to show ads on Facebook and Instagram to people who started a booking with us. It tells Meta which of our pages you opened, how far through booking you got, and the value of an order if you complete one. It does not send Meta your name, your email address, the property address, or your order number. To turn it off, block third-party cookies in your browser, or use Meta's own ad settings.

Our own counts. We keep our own record of how our free tools are used. That stays on our own servers and is described in 2.4.

Who is on the site right now. So we can see our own website being used, we keep a short live record of current visits on our own servers. For each visit that is a random browser number, the town or country your connection appears to come from, the website that sent you, whether you are on a phone or a computer, and the names of the pages you open in plain English, such as “Pricing” or “Booking wizard” — which lets us see the route through the site, and the page a visit ended on. We never store the web address itself, so a property address or an order number in a link is never kept here. We do not store your IP address. The record is deleted about an hour after your visit ends.

10. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Contact Us

Omidia

Omidia is a business name used by Omid Shariat, a sole proprietor based in North Vancouver, British Columbia.

Privacy Officer: Omid Shariat

Email: [email protected]

Address: 625 E 3rd St, North Vancouver, BC V7L 0G3, Canada

Complaint Resolution

If you are not satisfied with our response, you may file a complaint with: