Privacy Policy

1. Introduction

Welcome to StageInSeconds.com ("we," "us," "our," or the "Service"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our AI-powered virtual staging service for real estate professionals.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

This Privacy Policy should be read in conjunction with our Terms and Conditions. Capitalized terms not defined in this Privacy Policy have the meanings given in the Terms and Conditions.

2. Information We Collect

We collect several types of information from and about users of our Service.

2.1 Information You Provide Directly

Account Information:

• Email address (required for account creation)
• Password (encrypted and stored securely via Firebase Authentication)
• Display name (optional)
• Profile photo (optional)
• Communication preferences

Payment Information:

• Payment card details (processed and stored by Stripe; we do not store complete card information on our servers)
• Billing address
• Transaction history and purchase records

User Content:

• Property photographs and images you upload for virtual staging
• Custom text prompts and modification requests
• Property addresses or identifiers (optional, used for file naming/organization)
• Any other content you voluntarily provide through the Service or customer support

2.2 Information We Collect Automatically

Usage Information:

• Pages and features accessed
• Time and date of visits
• Credits used and staging generations performed
• Error logs and diagnostic information

Device and Technical Information:

• IP address and approximate geographic location
• Browser type and version
• Operating system and device type
• Referral URLs and exit pages

Cookies and Similar Technologies:

• Session cookies to maintain your logged-in state
• Performance cookies to analyze Service usage
• Functional cookies to remember your preferences
• Analytics cookies to understand user behavior

2.4 Information We Do Not Collect

We do not:

• Knowingly collect information from children under 13 years of age
• Collect sensitive personal information such as Social Security numbers, health information, or biometric data
• Track you across third-party websites or services
• Sell your personal information to third parties (as defined by CCPA)

3. How We Use Your Information

3.1 To Provide and Maintain the Service

• Create and manage your account
• Process your uploaded images through AI generation systems
• Generate and deliver virtually staged images
• Process payments and manage your credit balance
• Provide customer support and respond to inquiries
• Send transactional communications (order confirmations, account notifications, service updates)

3.2 To Improve and Develop the Service

• Analyze usage patterns and trends to improve Service functionality
• Conduct research and development for new features
• Test and optimize AI generation quality and performance
• Monitor and analyze Service performance and reliability

3.3 To Ensure Security and Prevent Fraud

• Detect, prevent, and investigate fraudulent transactions and abuse
• Protect against unauthorized access and security threats
• Verify identity and authenticate users
• Enforce our Terms and Conditions and Acceptable Use Policy
• Comply with legal obligations and respond to legal requests

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following circumstances:

4.1 Third-Party Service Providers

5. Data Storage and Security

5.1 Where We Store Your Data

Your information is stored and processed in the United States and may be transferred to and maintained on servers located outside of your state, province, or country where data protection laws may differ.

5.2 How We Protect Your Data

We implement commercially reasonable technical and organizational security measures to protect your information:

Technical Safeguards:

• Encryption in transit using SSL/TLS protocols (HTTPS)
• Encryption at rest for sensitive data
• Secure authentication via Firebase Authentication with password hashing
• Firewall protection and network security monitoring
• Regular security updates and vulnerability patching

Organizational Safeguards:

• Access controls limiting employee access to personal information on a need-to-know basis
• Employee confidentiality agreements and security training
• Incident response procedures for data breaches
• Regular security audits and assessments

5.4 Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify you in accordance with applicable laws:

• California Residents: Within 30 calendar days of discovering or being notified of a breach (as required by California SB 446, effective January 1, 2026)
• California Attorney General: Within 15 calendar days of notifying affected individuals if 500 or more California residents are impacted

7. Data Retention and Deletion

7.1 How Long We Retain Your Data

Active Accounts:

• Account Information: Retained for the duration of your account plus 90 days after deletion
• Uploaded Images: Retained until you delete them or until account termination plus 30 days
• Generated Images: Retained until you delete them or until account termination plus 30 days
• Usage Logs: Retained for 90 days for operational purposes
• Payment Records: Retained for 7 years as required for tax and financial compliance

Inactive Accounts:

• Accounts inactive for 24 consecutive months may be automatically deleted after email notification

Deleted Accounts:

• User Content (uploaded and generated images) deleted within 30 days of account deletion
• Backup copies may persist for up to 90 days for disaster recovery purposes
• Account metadata and transaction history may be retained as required by law

8. Your Privacy Rights

8.1 General Rights (All Users)

• Access: Request information about the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information (subject to legal exceptions)
• Data Portability: Request a copy of your personal information in a portable format
• Opt-Out of Communications: Unsubscribe from marketing emails
• Account Termination: Close your account at any time

8.2 California Residents' Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Categories of personal information collected, sources, purposes, and third parties we share with
• Right to Delete: Request deletion of personal information we collected from you (subject to exceptions)
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the "sale" or "sharing" of personal information (Note: We do not sell or share personal information as defined by CCPA)
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

8.3 How to Exercise Your Rights

To exercise your privacy rights, you may:

• Email: privacy@stageinseconds.com
• Account Dashboard: Access, download, or delete data directly through your account settings
• Support Contact: support@stageinseconds.com

We will respond to verified requests within:

• 30 days (general requests)
• 45 days (California residents, with extension notice if needed)

9. Children's Privacy (COPPA Compliance)

9.1 Age Restrictions

The Service is not intended for children under 13 years of age. We do not knowingly collect, use, or disclose personal information from children under 13 without verifiable parental consent, as required by the Children's Online Privacy Protection Act (COPPA).

Our Terms and Conditions require users to be at least 18 years of age to create an account and use the Service, as it is designed for professional real estate marketing purposes.

9.2 Parental Rights

If you are a parent or guardian and believe your child under 13 has provided personal information to us without your consent, please contact us immediately at privacy@stageinseconds.com. We will promptly:

• Verify the claim
• Delete the child's information from our systems
• Terminate any associated account
• Prevent future access

12. Marketing Communications

12.1 Types of Communications

Transactional Emails (Cannot Opt-Out):

• Account creation and verification
• Password reset and security alerts
• Purchase confirmations and receipts
• Credit usage notifications
• Subscription renewal reminders
• Critical Service updates and changes to Terms/Privacy Policy

Marketing Emails (Can Opt-Out):

• New features and product updates
• Tips for using the Service effectively
• Promotional offers and discounts
• Industry news and best practices

12.2 Opting Out of Marketing

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email
• Adjusting your email preferences in your account settings
• Emailing support@stageinseconds.com with "Unsubscribe" in the subject line

14. California Privacy Disclosures

14.3 Sale or Sharing of Personal Information

We do not sell or share your personal information

as those terms are defined under the CCPA. We have not sold or shared personal information in the preceding 12 months.

We do share personal information with service providers (Google, Firebase, Stripe) for business purposes as described above, but these arrangements do not constitute "sales" or "shares" under CCPA.

15. Contact Information for Privacy Matters

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Response Time: We will acknowledge receipt of your inquiry within 5 business days and provide a substantive response within 30 days (45 days for California residents as permitted by law).