Facade Lighting Studio

This Privacy Policy explains how Facade Lighting Studio ("we", "our", "us") collects, uses, and protects information when you use our website and services. By using the service, you agree to this policy.

1. Information we collect

Account information — when you register, we collect your email address, name (optional), and a password hash. If you sign in with Google, we receive your email, name, and profile picture.
Project content — building photos you upload and lighting designs you create. Photos are stored locally in your browser by default. Saved projects (when you choose to save) are stored on our servers.
Payment information — handled entirely by our payment processors (Stripe and, where applicable, Razorpay). We never see or store your full card number, CVV, or UPI PIN. We only receive a transaction reference and the amount paid.
Usage data — log entries of API calls (e.g., AI Enhance requests), timestamps, and basic device metadata (IP address, browser user-agent) used for security and abuse prevention.
Feedback — ratings and comments you submit via the in-app feedback widget.

2. How we use your information

To create and manage your account.
To process payments and grant access to paid features.
To process AI-powered image enhancements (your image is sent to Google Gemini for enhancement, then returned).
To prevent fraud, abuse, and brute-force login attacks.
To respond to support requests and improve the product.

3. Third parties we share data with

Stripe — payment processing for international customers.
Razorpay — payment processing for Indian customers (when enabled).
Google Gemini — AI image enhancement. Images you submit for AI Finalize are sent to Google's API.
Google OAuth — only if you choose to sign in with Google.
Hosting and infrastructure providers required to operate the service.

We do not sell your data to advertisers or data brokers.

4. Data retention

We retain account data for as long as you have an active account. You may request deletion at any time by emailing us at xpertzankur@gmail.com. Payment transaction records are retained for the period required by applicable tax and accounting laws (typically 7 years in India).

5. Cookies and local storage

We use cookies and your browser's localStorage to keep you signed in, auto-save work in progress, and remember UI preferences (sidebar width, collapsed sections). We do not use third-party advertising cookies.

6. Security

Passwords are hashed using bcrypt. Authentication tokens are signed JWTs with limited expiry. Communications are encrypted in transit (HTTPS). We follow industry-standard security practices but no system is 100% secure — please report any suspected vulnerability to xpertzankur@gmail.com.

7. Your rights

You can access, correct, export, or delete your personal data at any time by emailing us. If you are in the European Union or other jurisdictions with data-protection regulations (GDPR, etc.), you have the additional rights to object to processing and to data portability under those laws.

8. Children

The service is not directed at children under 13. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice at least 7 days before they take effect.

10. Contact

Questions about privacy? Email xpertzankur@gmail.com.