Privacy Policy

This Privacy Policy explains how [NeoStaging Entity] (“NeoStaging”, “we”) collects, uses, discloses, and protects personal information when you use our website, applications, and API (the “Service”). By using the Service, you consent to the practices described here. This policy must be reviewed by counsel to confirm it meets your specific regulatory obligations.

We collect the following categories of information:

• Account information: name, email address, and password (stored only as a secure hash).
• Images you upload: the property photographs you submit for staging, and the generated outputs.
• Billing information: processed by our payment provider, Stripe. We do not store full card numbers.
• Usage data: log data, device and browser information, IP address, and analytics about how you use the Service.
• Cookies and similar technologies: as described in our Cookie Policy.

We ask that you do not upload images containing identifiable individuals or sensitive personal data. On ingest, we strip embedded metadata (including GPS/EXIF) from uploaded images.

• to provide, operate, and improve the Service, including generating staged images;
• to process payments and manage subscriptions and credits;
• to communicate with you about your account, security, and service updates;
• to detect, prevent, and address fraud, abuse, and security issues; and
• to comply with legal obligations and enforce our Terms.

To generate staged images, we transmit your uploaded image and instructions to third-party artificial-intelligence providers acting as our sub-processors. We use paid, enterprise-grade processing tiers selected so that, per the provider’s terms, your content is not used to train the provider’s models. Providers may retain content transiently for security and abuse-monitoring as described in their policies.

Other sub-processors include our cloud storage provider and our payment processor (Stripe). A current list of sub-processors is available on request. We require sub-processors to protect personal information consistent with this policy.

Images and outputs are stored in our own access-controlled cloud storage, encrypted in transit and at rest. We retain images and outputs for the period necessary to provide the Service and for a limited retention window thereafter (by default, approximately [30] days after generation or account deletion), after which they are deleted, subject to legal-hold or backup cycles.

Account and billing records are retained as required for legal, tax, and accounting purposes.

We do not sell your personal information. We share information only:

• with sub-processors and service providers acting on our behalf, under contract;
• to comply with law, legal process, or enforceable governmental requests;
• to protect the rights, property, or safety of NeoStaging, our users, or others; and
• in connection with a merger, acquisition, or sale of assets, subject to this policy.

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal information, to object to certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and to opt out of sale or sharing (we do not sell personal information).

To exercise any right, contact [privacy@neostaging.ai]. We will respond as required by applicable law. We will not discriminate against you for exercising your rights. If you are in the EEA, UK, or Switzerland, our legal bases for processing include contract performance, legitimate interests, consent, and legal obligation.

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption, access controls, and metadata stripping on upload. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You use the Service at your own risk and are responsible for safeguarding your account credentials.

Your information may be processed in countries other than your own, including the United States, where data-protection laws may differ. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from them. If you believe a minor has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will indicate changes by updating the “Last updated” date and, where required, provide additional notice.

For privacy questions or requests, contact [privacy@neostaging.ai] or [NeoStaging Entity], [Address]. If you are in the EEA/UK, you may also have the right to lodge a complaint with your supervisory authority.