When you create an account, we collect basic contact information including your name, email address, company name, and billing details. Payment information is processed exclusively through our PCI-DSS-compliant payment provider; we store only the last four digits of your card and a tokenised reference — we never store full card numbers on our systems.

When you use the staging service, we receive the property images you upload, your prompts and style selections, and the AI-generated outputs we produce. We also collect usage metadata such as the number of renders completed, processing times, and the features accessed during each session. This operational data is used exclusively to deliver and improve the service.

We automatically collect technical information when you access Virtual Staging, including your IP address, browser type and version, operating system, referring URLs, and session duration. This data helps us detect abuse, diagnose infrastructure issues, and understand aggregate usage patterns. We do not use this data to build individual advertising profiles.

If you contact our support team or complete a sales enquiry form, we retain the content of that correspondence together with any attachments you include. Enterprise customers who integrate via our API may also transmit metadata from their own systems as part of batch processing jobs; that metadata is governed by the data processing agreement in their enterprise contract.

The primary purpose for processing your data is to provide you with a functional, high-quality virtual staging service. This includes authenticating your account, processing your image uploads through our AI pipeline, storing completed renders so you can access them from any device, and sending transactional emails such as render completion notifications, invoices, and password reset links.

We use aggregated and anonymised usage data to improve our AI models, optimise infrastructure performance, and prioritise new features. Individual images and prompts are never used to train our models without your explicit, opt-in consent. You can review and update your model-training preferences at any time from the Privacy section of your account settings.

With your consent, we may send you product update emails, industry research, and promotional content. You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by visiting your notification preferences. Withdrawal of marketing consent does not affect your ability to use the service.

We may process your data to comply with applicable legal obligations, including responding to lawful requests from government authorities, enforcing our Terms of Service, and preventing fraud or abuse. In each case we apply the principle of data minimisation — using only the information reasonably necessary to achieve the specific legal or security purpose.

Account information is retained for as long as your account remains active. If you close your account, we delete your personal information within 30 days, except where we are required by law to retain certain records (for example, financial transaction records, which we retain for seven years in accordance with accounting regulations).

Uploaded source images are stored for 90 days after the render is completed on Starter and Professional plans. Enterprise customers can configure custom retention windows ranging from immediate deletion to 365 days, and can enforce automatic purge policies from the Admin panel. Generated output images are retained for the same period as the source images unless you delete them earlier.

Support correspondence is retained for two years from the date of the last message in the thread. Audit log data on Enterprise plans is retained for the period specified in your enterprise contract, with a maximum of five years. You can request manual deletion of specific records at any time by contacting privacy@virtualstagedesign.com.

Anonymised and aggregated analytical data — from which no individual can be identified — may be retained indefinitely to support long-term infrastructure planning and product research. This data is stored separately from all personal data and is not linked back to individual accounts.

We do not sell, rent, or trade your personal information to third parties. We share data only with carefully selected sub-processors who help us deliver the service, and only to the extent required for that purpose. All sub-processors are bound by data processing agreements that require them to implement appropriate security measures and prohibit them from using your data for their own purposes.

Our key sub-processors include cloud infrastructure providers for compute and storage, our payment processor for billing, an email delivery platform for transactional messages, and an error-monitoring service for diagnosing application failures. An up-to-date list of sub-processors is available at virtualstagedesign.com/legal/sub-processors. We notify you at least 14 days before adding a new sub-processor that handles personal data.

If Virtual Staging is involved in a merger, acquisition, or sale of substantially all assets, your personal information may be transferred as part of that transaction. We will provide notice via email and a prominent in-app notice at least 30 days before any such transfer occurs, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

We may disclose personal information if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect the rights or safety of Virtual Staging, our customers, or the public, or investigate potential violations of our Terms of Service. Where permitted by law, we will notify you before disclosing your data in response to a government request.

Depending on your jurisdiction, you may have the right to access the personal data we hold about you, correct inaccurate data, request deletion of your data, restrict or object to certain processing activities, and receive a portable copy of your data in a machine-readable format. To exercise any of these rights, email privacy@virtualstagedesign.com with the subject line "Privacy Request". We respond to all requests within 30 days.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data in accordance with applicable law. We encourage you to contact us first so we have the opportunity to resolve your concern directly.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Material changes will be communicated via email and an in-app banner at least 14 days before they take effect. Continued use of Virtual Staging after the effective date constitutes your acceptance of the updated policy. The date at the top of this page always reflects when the policy was last revised.

Questions about this Privacy Policy can be directed to our Data Protection Officer at privacy@virtualstagedesign.com, or by post to Virtual Stage Design, Inc., Attn: Privacy, 548 Market St, Suite 12000, San Francisco, CA 94104.