Your photos are yours.

Who this policy covers

This policy explains how Relight Spaces handles personal information when you visit the website, create an account, upload a photo, generate a result, buy credits, ask for support, or exercise a privacy right.

What we collect

• Account information: your email address, account identifier, and sign-in records.
• Your working files: uploaded JPG, PNG, or HEIC photos, generated results, filenames, dimensions, and file sizes. HEIC photos are converted privately in your browser before upload.
• Job information: the mood and strength you choose, processing status, model used, quality-check outcomes, errors, and cost records.
• Purchase information: credit purchases and Stripe transaction identifiers. Card details stay on Stripe and do not pass through this app.
• Support information: the name, email address, topic, and message you choose to submit through the contact form.
• Guest Studio saving: the email address you enter to save a private guest Studio as an account, plus the confirmation-delivery status.
• Shared comparisons: if you choose Share before/after, we store a random share token and the specific original/result pair you selected. The public page does not show your identity or original filename.
• Site interaction information: a random session identifier and the Relight Spaces pages visited for our privacy-light product analytics. We also use Microsoft Clarity session replay and heatmaps to understand navigation, clicks, scrolling, cursor movement, errors, and how page content is used. Clarity masks sensitive form content by default; a replay may reconstruct other content and images visible in the customer-facing product. Public pages also use the Meta Pixel for advertising measurement. Meta may receive the page visited, browser and device information, cookies or similar identifiers, and network information such as an IP address. Photo contents and filenames are not sent through the Pixel.
• Basic technical information: device, browser, network, security, and diagnostic records needed to protect accounts, operate the service, diagnose failures, and prevent abuse.

Why we use it

We use this information to authenticate you, process and deliver your requested edit, maintain your private history, operate credits and refunds, understand whether the website and studio flow are working, measure advertising performance, enforce cost and upload limits, improve reliability, respond to support requests, and protect the service. We do not use customer photos as a public gallery.

How AI processing works

The product sends the photo and lighting instructions to OpenAI through its business API to create a new image. Relight Spaces does not opt customer content into provider model training. Under default API controls, provider abuse-monitoring logs may be retained for up to 30 days. If the production provider or these controls change materially, this policy will be updated.

Storage and deletion

Finished results are stored privately and remain in My Images until you delete them or close your account. Full-resolution original uploads are removed automatically after 90 days. Temporary quality-check copies are removed after 30 days. You can delete an image set, or all of your stored photos, at any time. Download links are signed and expire after 15 minutes.

Our separate privacy-light page-view records are scheduled for deletion after 90 days and are not shared with an advertising network. Microsoft Clarity session recordings are generally retained for 30 days and are handled under Microsoft’s own privacy and retention controls. Meta Pixel events are handled under Meta’s own retention controls and policies.

Support messages are kept while they are needed to answer the request, improve support, resolve a dispute, or meet legal obligations. Limited account, job, credit, purchase, security, and accounting records may remain after image files are deleted for the same kinds of operational and legal reasons. We remove or anonymize personal information when it is no longer reasonably needed.

A guest Studio-saving email is used only to confirm the requested account. It does not add the address to a marketing list.

A before/after comparison is public only when you deliberately create a share link. Anyone with that unguessable link can view that one original/result pair until you revoke it or delete either image. It does not expose your account, other images, or original filename.

Advertising measurement and choices

We also use Google Analytics and Google Ads to measure visits and purchases. With measurement permission, a Google ad-click identifier and the purchase transaction identifier, time, currency, and amount may be sent from our server to Google, including when you do not return from Stripe Checkout. This server-side reporting does not send your email, billing address, photo, or filename. It is skipped without an explicit analytics permission cookie or when Global Privacy Control is present at checkout. Pending click identifiers are removed from our reporting queue after acceptance or expiry; Stripe checkout metadata follows the retention of the payment record.

Relight Spaces uses the Meta Pixel on public pages to measure visits from Meta ads and understand campaign performance. Meta may use the information it receives according to its own privacy policy and advertising controls. The Pixel does not load when a browser sends a Global Privacy Control signal. You can also limit cookies in your browser and manage activity shared by businesses through Meta’s advertising and off-Meta activity settings.

Services that help operate the product

Supabase provides authentication, database, and private file storage; Vercel hosts the web application; Trigger.dev runs background jobs; OpenAI performs image editing; Stripe handles checkout and payment records; and Meta provides advertising measurement through the Meta Pixel. Each provider processes information for its operating role. Processing may occur outside your province, state, or country, including in the United States.

Security

The service uses private storage, account-based access rules, short-lived download links, server-authorized upload paths, upload quotas, restricted administrative access, and automated cleanup. No internet service can promise perfect security, so the product should not be used for highly sensitive, illegal, or intimate material.

Your choices and requests

You can download a copy of your account data, delete stored images, and close your account from Settings. You may also ask to access, correct, or challenge our handling of your personal information. We may need to verify your identity before completing a request.

Privacy and support requests: support@relightspaces.com.

Canada and United States privacy rights

Canadian privacy laws may give you rights to understand our purposes, access personal information, request corrections, and challenge compliance. Some United States state laws may also give eligible residents rights to know, correct, delete, or receive personal information, opt out of certain targeted advertising uses, and appeal certain decisions. Relight Spaces does not sell customer photos or personal information. Customer photos are not sent to Meta for advertising.

Photos containing people

Only upload photos you are authorized to use. If a photo identifies a person, contains private belongings, or shows a private location, make sure you have the appropriate permission and a legitimate reason to process it.

Changes to this policy

We may update this policy as the product, providers, or legal requirements change. The current version and update date will remain available on this page. Material changes will be communicated in the product or by email when appropriate.