Privacy policy
Effective [TO FILL: effective date]
Who we are
TidyStagingAI™ (www.tidystaging.co.uk) is operated by Tidywork Studio LTD, company number 14278482, registered at Suite 201 Grangewood House, Oakwood Hill, Loughton, Essex, England, IG10 3TZ ("we", "us"). We are the controller of the personal data described here. ICO registration: ZB820957. Contact us at contact@tidyworkstudio.co.uk.
What we collect
- Account details: your name, email address, company or agency name, job title if given, and a securely hashed password.
- Your content: the room photographs you upload, style reference files, the staged images we generate for you, your staging requests and edit instructions, and the projects, units and rooms you create.
- Usage and activity records: what each person did and when (staging, edits, approvals and reports), shown against their name; credit use; and project access settings on Enterprise accounts.
- Feedback and reports: anything you send us from the feedback button or by reporting an image: your note, any screenshots or photos you attach (which may show your own content), the page and picture you were looking at, your browser and device, and our replies. We use it only to fix problems, answer you and improve the service.
- Billing information: your plan, purchases and payment status. Card details are entered on our payment provider's pages and never reach our servers.
- Technical data: IP address, browser and device details, and sign-in times and locations, held by us and by our hosting and authentication providers for security and reliability. On every account we also look at sign-in patterns (places, devices, IP addresses and how much work a login does in a day) to check that each login is used by one named person, and we sign a login out of other places when it is signed in somewhere new (see company accounts below).
Why we use it, and our lawful basis
- To provide the service you signed up for, create your account, generate and deliver staged images, and manage credits and teams (contract).
- To take payment and keep financial records (contract and legal obligation).
- To keep the service secure, prevent misuse and fix problems (legitimate interests).
- To read and answer the feedback and reports you send, and to improve the service (legitimate interests).
- To contact you about your account, such as access requests and support (contract and legitimate interests).
We do not sell your personal data, and we do not use your uploaded photographs to train our own models.
Who we share it with
We use the categories of service provider (processors) below to run TidyStagingAI. They are bound by contracts that only let them use your data for what we ask. You can ask us for the names of the specific providers we use at any time at contact@tidyworkstudio.co.uk. Each receives only what it needs to do its job. We act for you in handling the photographs and content you upload; you decide what to upload, and you should not upload photographs that show people or private information without a lawful reason.
| Who | What it does for us | What it receives | Where |
|---|---|---|---|
| Cloud hosting and database providers | Run the application and store accounts, project data, and your uploaded and generated images; send sign-in and password-reset emails. | Account details, your photographs and staged images, project data, and request logs. | Stored in the United Kingdom (London). Some processing, and the application network itself, may be in the United States. |
| Payment provider | Takes payments. | Your email address and the details of what you buy. Card details go straight to the payment provider and never reach us. | UK, Ireland and the United States |
| AI service providers | Understand your staging requests and photographs, generate the staged images, and check the results. | Your staging requests, room photographs, any marked area, generated images and style reference files. | Outside the UK (mainly the United States) |
| Error-monitoring provider | Records technical errors so we can fix them. It is set up not to collect photographs, staging requests, email addresses or cookies. | Error messages, the page or action involved, browser and device details. | Outside the UK (the United States or the EU) |
We may also disclose data where the law requires it, or to professional advisers under a duty of confidentiality.
International transfers
Some of these providers process data outside the UK, including in the United States. Where they do, we rely on the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework, or another safeguard permitted by UK law.
How long we keep it
We keep your account, projects and images while your account is open so you can come back to them. We do not delete photographs and generated images from an open account automatically, except a photograph that was uploaded and then never used, which we remove after a day. If an account is closed or its subscription ends, we keep its library for at least 90 days so you can download it, and may delete it after that once we have told you. You can delete a whole development yourself at any time from its page, and you can delete your entire account, with every photo and result, from the Billing page. Enterprise accounts, and anyone who would rather ask us, can email contact@tidyworkstudio.co.uk and we will do it within one month. Payment records are kept by our payment provider for the period the law requires (normally six years).
How long our AI providers keep your images
When we send a photograph to be edited, we ask the image provider to keep the uploaded and generated files for no more than one hour (long enough for us to collect the result) and not to store the request text or file links in its history. Our AI providers may keep inputs and outputs for a limited period set by each of them, currently no more than 30 days, for safety and abuse monitoring, and by default they do not use API data to train their models. Your images stay with us, under your account, until you delete them.
Your rights
Under UK data protection law you can ask to access your data, correct it, delete it, restrict or object to how we use it, and receive a copy in a portable format. To use any of these rights, email us. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.
Company accounts
If you use TidyStagingAI through your employer's Enterprise account, your employer's Admin can see your name, email, role, your activity and the projects you work on. Everything you do is recorded under your name, and each download includes a record of who staged, changed, approved and downloaded each image. Each Enterprise seat is for one named person, so we require two-step sign-in and may review sign-in times, locations and devices to detect shared logins; if we think a seat is being shared we may tell your employer's Admin. We do this because it is necessary to enforce the seat terms of your employer's agreement with us (our legitimate interest). Your employer is responsible for its own use of the information it can see.
Security
Data is encrypted in transit, stored in private storage accessed through short-lived links, and access to each account's data is limited to that account's users and to authorised Tidywork staff who need it to run the service. This includes reviewing images, our automated checks and any problem you report in order to fix errors and improve the service.
Cookies
We only use essential sign-in cookies. See our cookie policy.
Changes
We may update this policy. If we make a significant change we will tell you in the app or by email before it takes effect.