| What | Why |
|---|---|
| Email address | To create your account, sign you in, and contact you about your account. Collected at signup. |
| Photos you upload | To produce your renders. This is the whole product. |
| Renders we generate | So you can come back to your work and download it again. |
| Color choices and prompts | To produce the render and to show you your history. |
| Subscription and credit status | To know what you are entitled to. Handled through Stripe; we never receive or store your card details. |
| Business branding you enter | Company name, contact line and logo, if you add them, so they can be applied to renders you export. |
| Basic technical logs | Errors and request records from our hosting providers, used to keep the service working. |
We do not use advertising trackers, and we do not build profiles of you for marketing.
This is the part that matters most, so it gets its own section.
To generate a render, your photo is transmitted to a third-party image-generation provider that we contract with. Their systems produce the recoloured image and return it to us. We cannot generate a render without doing this.
That provider processes the photo on our instructions and for no other purpose. Their handling of the data is also governed by their own terms. If you are not comfortable with your photo being processed by a third party in this way, do not upload it.
We will name the provider on request to anyone exercising a data-protection right, and we will tell you here if we change who it is.
Finished renders and uploaded photos are stored with web addresses that are effectively impossible to guess, but that are not protected by a password. Anyone who has the link can open the image.
This is deliberate: it is what lets you send a render to a customer without making them create an account. It does mean you should treat a render link as semi-public, and not upload photographs you would not want seen by whoever a link is eventually forwarded to.
A contractor can generate a guest link so a homeowner can run renders on their own phone. If you are the homeowner using such a link: the photo you upload goes into the contractor’s account, and they can see it. They, not Paintrz, decide what to do with it. Contact them first about deletion; contact us if you cannot reach them.
| Data | Kept for | Why that long |
|---|---|---|
| Photos you upload (originals) | 90 days after upload | Needed while you might still correct or re-render the image. After that they are the most sensitive thing we hold and the least useful, so they go. |
| Renders | 12 months after creation | Long enough to come back to a job and download it again. |
| Guest-link uploads | 30 days after the link expires | A guest link is a two-hour session; the photo has no reason to outlive it by much. |
| Account and billing records | 7 years | Tax and accounting obligations. This is records of payment, not your photos. |
| Everything else, on account closure | 30 days | A grace period in case closing was a mistake, then deletion. |
Only the providers that make the service run:
We do not sell personal information, and we do not share it for advertising. We may disclose information if the law requires it.
Our providers operate internationally, so your data may be processed outside your country, including in the United States. Where required, transfers rely on standard contractual clauses or an equivalent mechanism offered by the provider.
Depending on where you live, you have some or all of these rights: to see what we hold about you, to correct it, to delete it, to get a copy in a portable format, to object to or restrict processing, and to withdraw consent.
You can download your renders at any time, and close your account under Settings → Close account. Closing starts the 30-day grace period above; signing in again inside it keeps the account, and after it everything is deleted. For anything else, email [PRIVACY CONTACT EMAIL] and we will respond within 30 days.
If you are in the EU or UK and you think we have got it wrong, you can complain to your data protection authority. If you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising your rights.
Accounts are protected by password authentication with email confirmation. Data is encrypted in transit. Access to production systems is limited to the people who run Paintrz. Database access rules restrict every account to its own rows.
No system is perfectly secure. If a breach affects you, we will tell you and the relevant authority as required by law.
Paintrz is not intended for anyone under 18 and we do not knowingly collect their data.
If we change this policy in a way that materially affects you, we will email you before it takes effect.
[PRIVACY CONTACT EMAIL] — Paintrz LLC, [REGISTERED ADDRESS].