Privacy Policy
Last updated: April 2026
This policy explains what personal data Stagify ("we", "us") collects about you, why we collect it, and what rights you have. If you only remember one thing: we collect the minimum we need to run the service, and we don't sell your data.
1. Who we are
Stagify is operated from Lithuania, in the European Union. For privacy questions, contact us at hello@restager.app.
2. What we collect
Account data
- Email address and password (password is stored hashed, never in plain text)
- Display name if you provide one
- Credit balance and subscription plan
Content you upload
- Room photos you upload for staging, plus the AI-generated result images
- Selected room type and design style for each staging
Payment data
- We do not store card numbers. Payments are handled by Stripe, which stores a token we can reference (for receipts and refunds)
- We store which plan you purchased, the amount, currency, status, and Stripe's transaction ID
Usage and technical data
- Timestamps and metadata of stagings you create
- Standard web server logs (IP, user agent, referrer) for debugging and abuse prevention
3. How we use it
- To deliver the staging service (generate staged images from your uploads)
- To manage your account, credits, and subscription
- To process payments, send receipts, and handle refunds
- To respond to support requests
- To detect and prevent abuse
- To comply with legal obligations (e.g. invoicing, tax reporting)
We do not use your content to train AI models. We do not sell your data to third parties. We do not use your uploaded images for marketing.
4. Third-party services (sub-processors)
We use a small number of providers to run the service. Each has its own privacy policy:
- Cloudflare — hosting, DNS, database (Cloudflare D1). Data is stored in EU regions where possible.
- Stripe — payment processing.
- Decor8 — the AI model that produces staged images from your uploads.
- Imgur — temporary image hosting for the upload step of the staging pipeline.
- Google Fonts — web fonts served on our pages.
5. Retention
- Account data and payment records: kept while your account exists, and for up to 10 years after for tax/accounting compliance
- Uploaded images and staging results: kept while your account exists; deleted within 30 days of account deletion
- Server logs: typically 30–90 days
6. Your rights (GDPR)
If you're in the EU/EEA/UK, you can:
- Access the data we hold about you
- Correct anything that's wrong
- Delete your account and associated data
- Export your data
- Object to or restrict processing
- Lodge a complaint with your data protection authority (in Lithuania, the State Data Protection Inspectorate)
To exercise any of these, email hello@restager.app.
7. Security
Passwords are hashed. API access uses signed tokens. Traffic is encrypted in transit via HTTPS. We follow reasonable industry practices, but no system is perfectly secure — if you believe your account has been compromised, contact us immediately.
8. Children
Stagify is not intended for users under 16. If you believe a child has created an account, let us know.
9. Changes to this policy
We may update this policy. Material changes will be announced via email or a notice on the site. Continued use after an update means you accept the revised policy.