Your photos are yours.

Who this policy covers

This policy explains how Relight Spaces handles personal information when you visit the website, create an account, upload a photo, generate a result, buy credits, ask for support, or exercise a privacy right.

What we collect

• Account information: your email address, account identifier, and sign-in records.
• Your working files: uploaded JPG, PNG, or HEIC photos, generated results, filenames, dimensions, and file sizes. HEIC photos are converted privately in your browser before upload.
• Job information: the lighting style you choose, processing status, delivery status, errors, and purchase records.
• Purchase information: credit purchases and Stripe transaction identifiers. Card details stay on Stripe and do not pass through this app.
• Support and correction information: the name, email address, topic, support message, and correction request you choose to submit. You may update a pending correction request. A correction request is linked to the relevant original upload, finished result, style, and private account so you do not need to upload the photo again.
• Guest Studio saving: the email address you enter to save a private guest Studio as an account, plus the confirmation-delivery status.
• Shared comparisons: if you choose Share before/after, we store a random share token and the specific original/result pair you selected. The public page does not show your identity or original filename.
• Site interaction information: a random session identifier and the Relight Spaces pages visited for our privacy-light product analytics. We also use Microsoft Clarity session replay and heatmaps to understand navigation, clicks, scrolling, cursor movement, errors, and how page content is used. Clarity masks sensitive form content by default; a replay may reconstruct other content and images visible in the customer-facing product. Public pages also use the Meta Pixel for advertising measurement. Meta may receive the page visited, browser and device information, cookies or similar identifiers, and network information such as an IP address. Photo contents and filenames are not sent through the Pixel.
• Basic technical information: device, browser, network, security, and diagnostic records needed to protect accounts, operate the service, diagnose failures, and prevent abuse.

Why we use it

We use this information to authenticate you, process and deliver your requested edit, maintain your private history, operate credits and refunds, understand whether the website and studio flow are working, measure advertising performance, enforce cost and upload limits, improve reliability, respond to support requests, and protect the service. We do not use customer photos as a public gallery.

How AI processing works

Relight Spaces securely processes the photo and lighting style you choose to create a new image. If you request a correction, the relevant finished result and the original upload are processed to address that request: an automatic correction is attempted first, and a person may review it. A delivered correction becomes the current version in My Images, and the version it replaced stays available to you. To keep house numbers, signs and other lettering accurate, Relight Spaces also reads the lettering in your original and in the finished image, and may redraw a small area of the finished image so its lettering matches your original; this uses our AI service providers (currently OpenAI and Google). When an image is corrected this way, the uncorrected version is kept as a temporary quality-check copy. Customer photos are not used to train public AI systems.

Storage and deletion

Finished results are stored privately and remain in My Images until you delete them or close your account. Full-resolution original uploads are removed automatically after 90 days. Temporary quality-check copies are removed after 30 days. If you add a disclaimer label to a download, the labelled copy is kept only briefly so your browser can fetch it and is removed within an hour. If you submit a “not quite” feedback report, we create reduced private copies of that original/result pair for support review for up to 30 days; clearing or changing the report removes those copies early, and closing your account removes them immediately. You can delete an image set, or all of your stored photos, at any time. Download links are signed and expire after 15 minutes.

Our separate privacy-light page-view records are scheduled for deletion after 90 days and are not shared with an advertising network. Microsoft Clarity session recordings are generally retained for 30 days and are handled under Microsoft’s own privacy and retention controls. Meta Pixel events are handled under Meta’s own retention controls and policies.

Support and correction messages, candidate records, and approval history are kept while they are needed to answer the request, deliver and document the correction, improve support, resolve a dispute, or meet legal obligations. Correction image files follow the same private access and deletion protections as other working files. Limited account, job, credit, purchase, security, and accounting records may remain after image files are deleted for the same kinds of operational and legal reasons. We remove or anonymize personal information when it is no longer reasonably needed.

A guest Studio-saving email is used only to confirm the requested account. It does not add the address to a marketing list.

If you have bought credits and unused credits sit in your account for several weeks, we may email you a short reminder that they are still there. We send it at most every few months, stop after two reminders in a row, and every reminder has a one-click unsubscribe link.

A before/after comparison is public only when you deliberately create a share link. Anyone with that unguessable link can view that one original/result pair until you revoke it or delete either image. It does not expose your account, other images, or original filename.

Advertising measurement and choices

We also use Google Analytics and Google Ads to measure visits and purchases. With measurement permission, a Google ad-click identifier and the purchase transaction identifier, time, currency, and amount may be sent from our server to Google, including when you do not return from Stripe Checkout. This server-side reporting does not send your email, billing address, photo, or filename. It follows the same measurement choice and regional consent rules as the Google tag in your browser: it is skipped if you refuse measurement, where we ask for consent and you have not allowed it, or when Global Privacy Control is present at checkout. With the same permission, when you create an image we keep your most recent Google ad-click identifier with your account for up to 90 days, so a purchase made later or on another device can still be measured; it is deleted after 90 days or when you close your account. Pending click identifiers are removed from our reporting queue after acceptance or expiry; Stripe checkout metadata follows the retention of the payment record.

Relight Spaces uses the Meta Pixel to measure public-page visits and selected actions such as starting a trial, saving an account, and purchasing credits. Checkout can send purchase-related events, but Studio, My Images, Settings, and private comparison pages do not send Meta page-view events. These browser and server events follow your measurement choice and our regional consent rules; an explicit refusal is respected wherever you visit from. The Pixel does not load when a browser sends a Global Privacy Control signal. Use Privacy choices in the footer to review or change your choice. Meta may use information it receives according to its own privacy policy and advertising controls.

Services that help operate the product

We use carefully selected service partners for secure account access, private file storage, image processing, website hosting, background operations, payments, and optional advertising measurement. Each partner processes information only for its operating role. Processing may occur outside your province, state, or country, including in the United States.

Security

The service uses private storage, account-based access rules, short-lived download links, server-authorized upload paths, upload quotas, restricted administrative access, and automated cleanup. No internet service can promise perfect security, so the product should not be used for highly sensitive, illegal, or intimate material.

Your choices and requests

You can download a copy of your account data, delete stored images, and close your account from Settings. You may also ask to access, correct, or challenge our handling of your personal information. We may need to verify your identity before completing a request.

Privacy and support requests: support@relightspaces.com.

Canada and United States privacy rights

Canadian privacy laws may give you rights to understand our purposes, access personal information, request corrections, and challenge compliance. Some United States state laws may also give eligible residents rights to know, correct, delete, or receive personal information, opt out of certain targeted advertising uses, and appeal certain decisions. Relight Spaces does not sell customer photos or personal information. Customer photos are not sent to Meta for advertising.

Photos containing people

Only upload photos you are authorized to use. If a photo identifies a person, contains private belongings, or shows a private location, make sure you have the appropriate permission and a legitimate reason to process it.

Changes to this policy

We may update this policy as the product or legal requirements change. The current version and update date will remain available on this page. Material changes will be communicated in the product or by email when appropriate.