Privacy Policy

Last updated October 9, 2026. PAINTRZ LLC of 7909 N Oracle Rd, Ste 178, Tucson, AZ 85704 is the data controller for this service.

The short version. We hold your email, your billing status, the photos you upload and the renders we make from them. Your photos are sent to a third-party AI provider outside our systems to be processed. Renders live at unlisted web addresses that anyone with the link can open. We delete originals after 90 days and everything else within 30 days of you closing your account. We do not sell anything to anyone.

1. What we collect

WhatWhy
Email addressTo create your account, sign you in, and contact you about your account. Collected at signup.
Photos you uploadTo produce your renders. This is the whole product.
Renders we generateSo you can come back to your work and download it again.
Color choices and promptsTo produce the render and to show you your history.
Subscription and credit statusTo know what you are entitled to. Handled through Stripe; we never receive or store your card details.
Business branding you enterCompany name, contact line and logo, if you add them, so they can be applied to renders you export.
Phone numberOnly if you give it to us, to call or text you about your account. See Phone calls and text messages.
Basic technical logsErrors and request records from our hosting providers, used to keep the service working.

We do not use advertising trackers, and we do not build profiles of you for marketing.

2. Your photos are processed by a third party

This is the part that matters most, so it gets its own section.

To generate a render, your photo is transmitted to a third-party image-generation provider that we contract with. Their systems produce the recoloured image and return it to us. We cannot generate a render without doing this.

That provider processes the photo on our instructions and for no other purpose. Their handling of the data is also governed by their own terms. If you are not comfortable with your photo being processed by a third party in this way, do not upload it.

We will name the provider on request to anyone exercising a data-protection right, and we will tell you here if we change who it is.

3. Renders are reachable by anyone with the link

Finished renders and uploaded photos are stored with web addresses that are effectively impossible to guess, but that are not protected by a password. Anyone who has the link can open the image.

This is deliberate: it is what lets you send a render to a customer without making them create an account. It does mean you should treat a render link as semi-public, and not upload photographs you would not want seen by whoever a link is eventually forwarded to.

4. Guest links

A contractor can generate a guest link so a homeowner can run renders on their own phone. If you are the homeowner using such a link: the photo you upload goes into the contractor’s account, and they can see it. They, not Paintrz, decide what to do with it. Contact them first about deletion; contact us if you cannot reach them.

5. Google sign-in and Google Calendar

You can sign in with your Google account, and you can connect your Google Calendar. Both are optional.

Paintrz’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. How long we keep things

DataKept forWhy that long
Photos you upload (originals)90 days after upload Needed while you might still correct or re-render the image. After that they are the most sensitive thing we hold and the least useful, so they go.
Renders12 months after creation Long enough to come back to a job and download it again.
Guest-link uploads30 days after the link expires A guest link is a two-hour session; the photo has no reason to outlive it by much.
Account and billing records7 years Tax and accounting obligations. This is records of payment, not your photos.
Everything else, on account closure30 days A grace period in case closing was a mistake, then deletion.

A daily job enforces these periods. Once a photo's period has passed it is deleted the next day and its link stops resolving; the record of the job (colour, date, settings) is kept without the image. Your current logo is never deleted while the account is open.

7. Who we share it with

Only the providers that make the service run:

We do not sell personal information. The one thing we share for advertising is the ads measurement described below. We may disclose information if the law requires it.

Ads measurement (OpenAI)

Some of our ads run in ChatGPT. When you arrive from one, the link carries a click reference from OpenAI. On those visits our pages use the OpenAI Pixel, and our servers use OpenAI's Conversions API, to tell OpenAI which steps the visit led to: landing on the page, viewing paint matches, starting a free try, saving a paint list, creating an account, sending a color plan to a client, or buying a plan or renders. Each report holds the click reference, the step, the time and, for a purchase, the amount. OpenAI uses it to measure and improve our ads. We do not send your photos, renders, colors, name or contact details. The OpenAI Pixel stores the click reference in a first-party cookie (__oppref), and it can read contact details typed into a form on that page and send them to OpenAI only as a one-way hash, never in readable form. Visitors who did not come from one of these ads are not reported. OpenAI's own handling is described in its privacy policy.

8. Where data is held

Our providers operate internationally, so your data may be processed outside your country, including in the United States. Where required, transfers rely on standard contractual clauses or an equivalent mechanism offered by the provider.

9. Your rights

Depending on where you live, you have some or all of these rights: to see what we hold about you, to correct it, to delete it, to get a copy in a portable format, to object to or restrict processing, and to withdraw consent.

You can download your renders at any time, and close your account under Settings → Close account. Closing starts the 30-day grace period above; signing in again inside it keeps the account, and after it everything is deleted. For anything else, email getpaintrz@gmail.com and we will respond within 30 days.

If you are in the EU or UK and you think we have got it wrong, you can complain to your data protection authority. If you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising your rights.

10. Security

Accounts are protected by password authentication with email confirmation. Data is encrypted in transit. Access to production systems is limited to the people who run Paintrz. Database access rules restrict every account to its own rows.

No system is perfectly secure. If a breach affects you, we will tell you and the relevant authority as required by law.

11. Children

Paintrz is not intended for anyone under 18 and we do not knowingly collect their data.

12. Changes

If we change this policy in a way that materially affects you, we will email you before it takes effect.

Phone calls and text messages

Your phone number. If you give us a phone number (at signup, on a form, or by calling or texting us) we use it only to talk to you about Paintrz and your account.

Business calls. We call painting contractors, real estate professionals and other businesses whose work Paintrz helps with. We use business contact details from public sources, such as Arizona Department of Real Estate license records and the business’s own website. Calls come from (520) 332-6206 and are placed by a person. If we miss you we may leave a voicemail.

Stopping calls. Tell us on the call, call or text (520) 332-6206, or email getpaintrz@gmail.com, and we add your number to our internal do-not-call list within 10 business days. We check numbers against the National Do Not Call Registry before we call.

Text messages. We text you only if you have agreed to receive texts from Paintrz. Message frequency varies with your account activity. Message and data rates may apply. Reply STOP to opt out at any time and HELP for help. Consent to receive texts is not a condition of any purchase.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. The only provider that handles your number for calls and texts is our phone service (below), and only to deliver them.

Deleting your data

Your Paintrz account. In the app, open Settings › Account › Close account. Your account closes at once and, after a 30-day window in which you can change your mind, everything is deleted: your profile, photos, renders, jobs and the rest of your records. To have it deleted sooner, email getpaintrz@gmail.com from the address on your account.

Facebook, Instagram and Pinterest. Paintrz connects only its own PAINTRZ business accounts to these services, to publish our content and answer messages sent to PAINTRZ. If you messaged or commented on PAINTRZ and want that data deleted from our systems, email getpaintrz@gmail.com with the account name you used; we delete it within 30 days and confirm by email. You can also remove Paintrz from your Facebook account under Settings › Apps and Websites.

13. Contact

getpaintrz@gmail.com · (520) 332-6206 — PAINTRZ LLC, 7909 N Oracle Rd, Ste 178, Tucson, AZ 85704.