Privacy policy

Information we handle

We collect your identity-provider name, email, stable account identifier and email-verification status; project names or property addresses; uploaded images, filenames and room labels; style choices; listing-address searches and selected source-photo links; and saved results. We also retain technical file characteristics, checksums, consent and processing records needed to associate files with the correct project.

Uploaded originals can contain embedded metadata, including location and device information. We preserve original bytes. Remove unnecessary metadata, documents, faces, access codes and other private material before uploading. Our providers may process IP addresses, device/browser information, authentication events, operational logs and security records.

How information is used

We use this information to authenticate you, save and deliver projects, match previous orders to the same verified email, process authorized photos, provide support, determine first-property discount eligibility, prevent duplicate charges and misuse, and document permissions. Signing in does not license photos for marketing. We do not display customer photos in our public gallery through these terms.

Previous orders are copied into this separate studio through a read-only connection. We match the verified email exactly after trimming spaces and normalizing letter case. We do not claim orders based on an email typed into a form. Contact support if you no longer control the email used for an order.

Service providers

Auth0 (Okta) handles authentication; we do not receive or store your password. Our site hosting uses OpenAI Sites and Cloudflare infrastructure for application data and private photo storage. When you authorize generation, OpenAI’s image API receives the selected photo and style instructions. Necessary support or requested order correspondence may use our business email provider.

Stripe handles payment details through secure embedded payment fields. We receive payment references, status, amount, currency, discount and associated order information. We do not receive or store your full card number or security code. Stripe processes payment data under its own privacy notice. Previous orders may be linked to your verified email. Provider processing, security and retention are governed by the applicable provider agreements and settings. We do not promise that all provider logs or backups are instantly deleted.

Cookies and tracking

The studio uses essential authentication cookies. The short-lived login transaction lasts up to 10 minutes; the signed-in studio session expires after seven days or sign-out. Auth0 and the hosting platform may use their own essential authentication cookies.

This studio does not include optional advertising pixels or analytics trackers. We do not sell personal information or provide customer photographs for targeted advertising through this application. If that changes, we will update the notice and provide legally required choices before activating those practices.

Storage, security and retention

Originals and results are stored privately with account authorization checked on file requests. We retain project files while needed to provide your saved library and handle support or an authorized request. You may remove draft photos in the studio. Request deletion of submitted projects or account closure through support.

Records needed for transactions, legal obligations, fraud prevention or disputes may be retained after a request; applicable provider logs and backups may follow separate retention cycles. We will explain applicable exceptions. No system is completely secure. Keep separate copies of important files and notify us promptly of suspected unauthorized access.

Your choices and requests

Use Account to export available account and authorization information. Contact support to request access, correction, deletion, account closure or other rights that apply to you. We may reasonably verify identity and authority before disclosing or deleting information, and will respond within applicable legal requirements. You may use an authorized representative where law permits.

Depending on your location and whether applicable law covers the business, you may have additional privacy rights, including objection, restriction, portability, an appeal or complaint to a regulator. We will not deny rights that applicable law grants. We do not assert that every state or international privacy regime applies to every customer.

The service is intended for adults and is not directed to children under 18. Contact us if a child has provided information.