Privacy
This explains what we collect, why, who else sees it, and what you can ask us to do about it. It is written to be read, not to be skipped.
Who is responsible
Miranberitan SRL, registered in Belgium under enterprise number 1009.119.704, at Excelsiorlaan 71, 1930 Zaventem, Belgium, is the data controller. You can reach us at info@immodecor.eu.
What we collect
Because you gave it to us
- Your email address and password, so you can sign in.
- Your company name, if you enter one.
- The photos you upload and any instruction you type alongside them.
Because the service creates it
- The photos our model produces from yours.
- Your credit balance and every movement on it.
- Which operations you ran and when, so we can show you your history and bill correctly.
Because we have to protect the service
- Your IP address at sign-up and the time of it. We use this to stop one person creating fifty accounts to farm free credits. It is deleted after 30 days.
Why we are allowed to do this
| What for | Legal basis |
|---|---|
| Running your account and producing your photos | Performance of our contract with you |
| Taking payment and issuing invoices | Contract, and legal obligation under Belgian tax law |
| Stopping abuse and fraud | Our legitimate interest in keeping the service usable and affordable |
| Sending you service emails you cannot opt out of, such as a failed payment | Contract |
What we do not do
- We never use your photos to train a model.Not ours, not anyone else's.
- We do not sell your data, and we do not share it for anyone else's advertising.
- We do not look at your photos except when you ask us for support and we need to.
- No decision that affects you legally or significantly is made automatically. The model edits an image; it does not decide anything about you.
Who else processes your data
We use a small number of suppliers to run the service. Each one is bound by a data processing agreement and may only use your data to do the job we hired them for.
| Supplier | What they do | Where |
|---|---|---|
| Supabase | Database, authentication and photo storage | European Union (Frankfurt) |
| Vercel | Website hosting and delivery | European Union, with a global delivery network |
| fal.ai | Runs the image model that produces your staged photo | United States Safeguard: Standard Contractual Clauses approved by the European Commission |
| Paddle | Seller of record: handles payment, invoicing and VAT | United Kingdom and European Union Safeguard: UK adequacy decision of the European Commission |
| Resend | Sends account and notification emails | United States Safeguard: Standard Contractual Clauses approved by the European Commission |
Your photos are stored in the European Union. They leave the EU only for the seconds it takes the image model to process them, under the safeguards listed above.
How long we keep things
| What | How long |
|---|---|
| Photos you upload | 90 days, then deleted automatically |
| Photos we generate | As long as your account is open |
| Account and billing records | 7 years, required by Belgian tax law |
| Credit history | As long as your account is open, then 7 years for accounting |
Your rights
Under the GDPR you can ask us to:
- Give you a copy of everything we hold about you.
- Correct anything that is wrong.
- Delete your account and everything in it.
- Export your data in a machine readable form.
- Stop processing, or object to processing based on our legitimate interest.
Email info@immodecor.eu and we will answer within one month. We will not charge you and we will not ask why.
If you think we have got it wrong, you can complain to the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, or to the authority in the country you live in.
Security
Your photos sit in private storage that only your own account can open. Access is enforced by the database itself, not only by our application code, so a bug in the interface cannot expose another customer's files. Passwords are hashed and we never see them.
Changes
If we change this, we will change the date at the bottom. If the change matters, we will email you before it takes effect rather than hope you notice.