Your photos are yours.

Who this policy covers

This policy explains how Relight Spaces handles personal information when you visit the website, create an account, upload a photo, generate a result, buy credits, ask for support, or exercise a privacy right.

What we collect

• Account information: your email address, account identifier, and sign-in records.
• Your working files: uploaded JPG or PNG photos, generated results, filenames, dimensions, and file sizes.
• Job information: the mood and strength you choose, processing status, model used, quality-check outcomes, errors, and cost records.
• Purchase information: credit purchases and Stripe transaction identifiers. Card details stay on Stripe and do not pass through this app.
• Support information: the name, email address, topic, and message you choose to submit through the contact form.
• Site interaction information: a random session identifier and the Relight Spaces pages visited. This does not include photo contents, filenames, advertising identifiers, IP addresses, or a cross-site profile.
• Basic technical information: device, browser, network, security, and diagnostic records needed to protect accounts, operate the service, diagnose failures, and prevent abuse.

Why we use it

We use this information to authenticate you, process and deliver your requested edit, maintain your private history, operate credits and refunds, understand whether the website and studio flow are working, enforce cost and upload limits, improve reliability, respond to support requests, and protect the service. We do not use customer photos as a public gallery.

How AI processing works

The product sends the photo and lighting instructions to OpenAI through its business API to create a new image. Relight Spaces does not opt customer content into provider model training. Under default API controls, provider abuse-monitoring logs may be retained for up to 30 days. If the production provider or these controls change materially, this policy will be updated.

Storage and deletion

Original photos, finished results, and temporary review copies are stored privately and scheduled for automatic deletion after 30 days. You can delete a finished job—or all of your stored photos—sooner from My Images. Download links are signed and expire after 15 minutes.

Privacy-light page-view records are scheduled for deletion after 90 days. They are used for product measurement and are not shared with an advertising network.

Support messages are kept while they are needed to answer the request, improve support, resolve a dispute, or meet legal obligations. Limited account, job, credit, purchase, security, and accounting records may remain after image files are deleted for the same kinds of operational and legal reasons. We remove or anonymize personal information when it is no longer reasonably needed.

Services that help operate the product

Supabase provides authentication, database, and private file storage; Vercel hosts the web application; Trigger.dev runs background jobs; OpenAI performs image editing; and Stripe handles checkout and payment records. Each provider processes information for its operating role. Processing may occur outside your province, state, or country, including in the United States.

Security

The service uses private storage, account-based access rules, short-lived download links, server-authorized upload paths, upload quotas, restricted administrative access, and automated cleanup. No internet service can promise perfect security, so the product should not be used for highly sensitive, illegal, or intimate material.

Your choices and requests

You can download a copy of your account data, delete stored images, and close your account from Settings. You may also ask to access, correct, or challenge our handling of your personal information. We may need to verify your identity before completing a request.

Privacy and support requests can be submitted through our secure contact form.

Canada and United States privacy rights

Canadian privacy laws may give you rights to understand our purposes, access personal information, request corrections, and challenge compliance. Some United States state laws may also give eligible residents rights to know, correct, delete, or receive personal information and to appeal certain decisions. Relight Spaces does not sell customer photos or personal information and does not use them for cross-context behavioral advertising.

Photos containing people

Only upload photos you are authorized to use. If a photo identifies a person, contains private belongings, or shows a private location, make sure you have the appropriate permission and a legitimate reason to process it.

Changes to this policy

We may update this policy as the product, providers, or legal requirements change. The current version and update date will remain available on this page. Material changes will be communicated in the product or by email when appropriate.