Privacy Policy

This Privacy Policy explains how [NeoStaging Entity] (“NeoStaging”, “we”) collects, uses, discloses, and protects personal information when you use our website, applications, and API (the “Service”). By using the Service, you consent to the practices described here. This policy must be reviewed by counsel to confirm it meets your specific regulatory obligations.

We collect the following categories of information:

• Account information: name, email address, and password (stored only as a secure hash).
• Images you upload: the property photographs you submit for staging, and the generated outputs.
• Billing information: processed by our payment provider, Stripe. We do not store full card numbers.
• Usage data: log data, device and browser information, IP address, and analytics about how you use the Service.
• Cookies and similar technologies: as described in our Cookie Policy.

We ask that you do not upload images containing identifiable individuals or sensitive personal data. On ingest, we strip embedded metadata (including GPS/EXIF) from uploaded images.

• to provide, operate, and improve the Service, including generating staged images;
• to process payments and manage subscriptions and credits;
• to communicate with you about your account, security, and service updates;
• to detect, prevent, and address fraud, abuse, and security issues; and
• to comply with legal obligations and enforce our Terms.

To generate staged images, we transmit your uploaded image and instructions to third-party artificial-intelligence providers acting as our sub-processors. We use paid, enterprise-grade processing tiers selected so that, per the provider’s terms, your content is not used to train the provider’s models. Providers may retain content transiently for security and abuse-monitoring as described in their policies.

Other sub-processors include our cloud storage provider and our payment processor (Stripe). A current list of sub-processors is available on request. We require sub-processors to protect personal information consistent with this policy.

Images and outputs are stored in our own access-controlled cloud storage, encrypted in transit and at rest. We do not delete your files. We operate no time-based expiry, rolling buffer, or automatic clean-up. Specifically:

• While your subscription is active, your uploaded images and generated outputs are retained indefinitely and remain fully available.
• If you cancel, your library still stays. It becomes read-only — you can browse and download everything, indefinitely, with no expiry date — but you cannot generate new outputs until you resubscribe.
• Closing your account does not erase your data. It stops billing and access; your library is preserved so you can return to it.
• You have the right to erasure. If you ask us to destroy your data — including under the GDPR right to erasure or an equivalent right such as the CCPA/CPRA right to delete — we permanently destroy your images, outputs, and personal data after a thirty (30) day grace period. We will not retain your data against your wishes.
• You can delete your content at any time. Deleting individual images or listings is honoured promptly, with no waiting period, and the underlying files are removed from our storage shortly afterwards.
• Account deletion can be requested at any time from your account settings. We purge your images, outputs, and personal data within 30 days of the request.

In other words: the only things that cause your data to be deleted are actions youtake. Deletion may be delayed only where required by a legal hold, and residual copies may persist briefly in routine encrypted backups before those backups cycle out.

Because we retain images of the interiors of properties indefinitely, please avoid uploading photographs containing identifiable people or sensitive personal belongings where this can be avoided, and use the delete controls if you no longer want us to hold an image. You remain responsible for having the rights to any image you upload.

Account and billing records are retained as required for legal, tax, and accounting purposes.

We do not sell your personal information. We share information only:

• with sub-processors and service providers acting on our behalf, under contract;
• to comply with law, legal process, or enforceable governmental requests;
• to protect the rights, property, or safety of NeoStaging, our users, or others; and
• in connection with a merger, acquisition, or sale of assets, subject to this policy.

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal information, to object to certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and to opt out of sale or sharing (we do not sell personal information).

To exercise any right, contact [privacy@neostagingai.com]. We will respond as required by applicable law. We will not discriminate against you for exercising your rights. If you are in the EEA, UK, or Switzerland, our legal bases for processing include contract performance, legitimate interests, consent, and legal obligation.

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption, access controls, and metadata stripping on upload. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You use the Service at your own risk and are responsible for safeguarding your account credentials.

Your information may be processed in countries other than your own, including the United States, where data-protection laws may differ. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from them. If you believe a minor has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will indicate changes by updating the “Last updated” date and, where required, provide additional notice.

For privacy questions or requests, contact [privacy@neostagingai.com] or [NeoStaging Entity], [Address]. If you are in the EEA/UK, you may also have the right to lodge a complaint with your supervisory authority.