Privacy policy

Information we handle

For guest orders we store a random session identifier and private order-link token. At checkout we collect the email address for your payment receipt and store it with the purchase, together with your optional offers preference and the time and version of any recorded permission. If you choose to sign in, we also collect your identity-provider name, email, stable account identifier and email-verification status. For all projects we collect project names or property addresses; uploaded images, filenames and room labels; style choices; listing-address searches and selected source-photo links; and saved results. We also retain technical file characteristics, checksums, consent and processing records needed to associate files with the correct project.

Uploaded originals can contain embedded metadata, including location and device information. We preserve original bytes. Remove unnecessary metadata, documents, faces, access codes and other private material before uploading. Our providers may process IP addresses, device/browser information, authentication events, operational logs and security records.

How information is used

We use this information to authenticate you, save and deliver projects, match previous orders to the same verified email, process authorized photos, provide support, prevent duplicate charges and misuse, and document permissions. We use your checkout email to send a payment receipt through Stripe after successful payment and to support your order. We also send a completion notice with a private order link when all included staged results are ready. If you separately opt in to occasional StageParcel offers, we record that permission and may use the address for those offers. Opting in is optional and does not affect ordering or receipts. You can withdraw permission through an unsubscribe option in an offer or by contacting support. Signing in does not license photos for marketing. We do not display customer photos in our public gallery through these terms.

Previous orders are copied into this separate studio through a read-only connection. We match the verified email exactly after trimming spaces and normalizing letter case. We do not claim orders based on an email typed into a form. Contact support if you no longer control the email used for an order.

Service providers

Auth0 (Okta) handles authentication; we do not receive or store your password. Our site hosting uses OpenAI Sites and Cloudflare infrastructure for application data and private photo storage. When you authorize generation, OpenAI’s image API receives the selected photo and style instructions. Necessary support or requested order correspondence may use our business email provider.

Stripe handles payment details through secure embedded payment fields. We pass your receipt email to Stripe and receive payment references, status, amount, currency, discount and associated order information. We do not receive or store your full card number or security code. Stripe processes payment data under its own privacy notice. Previous orders may be linked to your verified email. Provider processing, security and retention are governed by the applicable provider agreements and settings. We do not promise that all provider logs or backups are instantly deleted.

Cookies and tracking

We count public homepage loads on our own server to understand website usage. A random first-party browser cookie lasts up to 30 days and helps distinguish a new browser from a returning one; browser counts are not counts of people. Each document load has a random reference so delivery retries do not add visits. We record the time and bounded campaign source and campaign name from tagged links. These usage records do not include IP addresses, device details, customer identities, photographs, property details, full URLs, or ad-click references. If cookies are blocked, a homepage load can still be counted without identifying a new browser. We also record progress through the ordering flow, such as photo selection, checkout views, package offers and payment attempts, with a random per-tab flow reference and bounded error categories. An owned project reference can associate a stage with its project. These funnel events do not include email addresses, photos, property addresses, full URLs, provider error text or ad-click references. Distinct browser flows are not counts of people, and an attempt is not a paid order. These first-party usage counts run independently of the optional OpenAI advertising choice below.

The studio uses essential authentication cookies. The short-lived login transaction lasts up to 10 minutes; the signed-in studio session expires after seven days or sign-out. A guest browser session lasts up to 30 days. Private order links permit later access without an account. Auth0 and the hosting platform may use their own essential authentication cookies.

We use the Google Ads tag to measure visits and advertising performance. Google may receive browser and device information and use cookies or similar identifiers for this purpose. We configure the tag to report the site homepage rather than private order URLs. We do not provide customer photographs to Google through this tag, and we do not sell personal information. You can control advertising cookies in your browser settings.

If you allow OpenAI ad measurement using Ad privacy, we send OpenAI page visits and server-confirmed purchase amounts in USD, with a random measurement-event reference and an available ad-click reference. OpenAI also receives the browser and network information accompanying the request. We use an image-based integration without automatically reading customer details from forms; customer names, email addresses, property details, photographs, private order links and payment secrets are not included in these measurement requests. An ad-click reference is used for up to 30 days, and a pending checkout reference for up to 24 hours. Browser storage can retain expired records until they are checked, replaced or cleared; expired references are not used for measurement. Your measurement preference is stored until you change it or clear browser storage. Choose No thanks or change your choice with Ad privacy; declining does not affect ordering. Revocation stops future OpenAI measurement and removes the stored attribution and pending checkout references.

Storage, security and retention

Files require an authorized account or browser session, or possession of that order’s private viewing link. Anyone with the private link can view and download that order; keep it private. We retain project files while needed to provide your saved library and handle support or an authorized request. You may remove draft photos in the studio. Request deletion of submitted projects or account closure through support.

Records needed for transactions, legal obligations, fraud prevention or disputes may be retained after a request; applicable provider logs and backups may follow separate retention cycles. We will explain applicable exceptions. No system is completely secure. Keep separate copies of important files and notify us promptly of suspected unauthorized access.

Your choices and requests

Use Account to export available account and authorization information. Contact support to request access, correction, deletion, account closure or other rights that apply to you. We may reasonably verify identity and authority before disclosing or deleting information, and will respond within applicable legal requirements. You may use an authorized representative where law permits.

Depending on your location and whether applicable law covers the business, you may have additional privacy rights, including objection, restriction, portability, an appeal or complaint to a regulator. We will not deny rights that applicable law grants. We do not assert that every state or international privacy regime applies to every customer.

The service is intended for adults and is not directed to children under 18. Contact us if a child has provided information.