Privacy Policy

1. Introduction

RealStage ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our virtual staging service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Full name
• Password (encrypted and hashed)
• Email verification status

2.2 Project and Image Data

When you use our service, we collect:

• Original images you upload for staging
• Project names and addresses
• Room types and furnishing style preferences
• Generated staged images
• Project tags and metadata

2.3 Usage Data

We automatically collect:

• IP address and browser information
• Pages visited and features used
• Credit usage and transaction history
• Image generation timestamps and status
• Error logs and performance data

2.4 Payment Information

Payment processing is handled by Stripe. We do not store your credit card information on our servers. We only receive and store transaction IDs and payment confirmation data from Stripe.

3. How We Use Your Information

We use your information to:

• Provide and maintain the virtual staging service
• Process your images through AI generation services
• Manage your account and authenticate your identity
• Process payments and manage credit transactions
• Send verification emails and important service notifications
• Improve our service quality and user experience
• Detect and prevent fraud or abuse
• Comply with legal obligations
• Respond to your support requests

4. Third-Party Services

We use the following third-party services that may access your data:

4.1 Supabase

We use Supabase for authentication, database storage, and file storage. Your account data and images are stored on Supabase's secure infrastructure.

4.2 Nano Banana (AI Service)

Your uploaded images are processed through Nano Banana's AI service to generate staged versions. Images are transmitted securely and are not retained by Nano Banana beyond the processing period.

4.3 Stripe

Credit purchases are processed through Stripe. Stripe collects and processes your payment information according to their privacy policy. We only receive transaction confirmation data.

4.4 Vercel

Our application is hosted on Vercel, which may collect basic analytics and performance data.

5. Data Storage and Retention

5.1 Storage Location

Your data is stored on secure cloud infrastructure provided by Supabase. All data is encrypted at rest and in transit using industry-standard encryption.

5.2 Retention Policy

• Original Images: Retained until you delete the project or your account
• Generated Images: Automatically deleted 30 days after generation
• Account Data: Retained until you delete your account
• Transaction History: Retained for legal and accounting purposes (typically 7 years)

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS encryption for all data transmission
• Encrypted storage for all files and database records
• Row-level security policies to isolate user data
• Regular security audits and monitoring
• Secure authentication via Supabase Auth
• Access controls and permission systems

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

You can access all your account data and download your images through your dashboard at any time.

7.2 Correction

You can update your name and other account information in your account settings. Contact us if you need assistance correcting other data.

7.3 Deletion

You can delete individual projects or your entire account at any time. Account deletion permanently removes all your data, including images and transaction history (except as required for legal compliance).

7.4 Object to Processing

You can object to certain data processing activities by contacting us. Note that this may limit your ability to use the Service.

7.5 Withdraw Consent

If processing is based on consent, you can withdraw it at any time by deleting your account or contacting us.

8. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), we process your data based on the following legal grounds:

• Contract Performance: To provide the services you requested
• Consent: Where you have given explicit consent
• Legitimate Interests: To improve our services and prevent fraud
• Legal Obligations: To comply with applicable laws

You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

9. Cookies and Tracking

We use essential cookies for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled. We do not use third-party advertising or tracking cookies.

10. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a prominent notice on our Service. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: privacy@realstage.com

Support: support@realstage.com