Privacy policy
Last updated: 8 October 2026 · See also our Terms.
- We use your photos and details only to make and deliver your order.
- Uploads and results are deleted 30 days after delivery, or sooner if you ask.
- Payments go through Stripe. We never see your card number.
- No ad trackers, no tracking cookies. Analytics are cookieless.
- Email [email protected] to see or delete your data.
What we collect and why
| What | Why | Legal basis |
|---|---|---|
| Order form: name, email, optional Instagram handle, order type (staging, portrait, 5-pack), style, notes, and your confirmation that you may use the photos | To do the work, deliver it and talk to you about it | Contract |
| Listing photos (up to 10 rooms) you send for virtual staging and the before/after Reel | To stage the rooms and make the Reel | Contract |
| House photos and the name line (e.g. "The Millers · est. 2026") for closing-gift watercolor portraits | To make the portrait. We never add a street address unless you ask | Contract |
| Payment details at Stripe Checkout: email, name, billing country, payment status | To take payment, send receipts and run the monthly plan | Contract; legal obligation (accounting) |
| Campaign tags (utm_source, utm_medium, utm_campaign, utm_content), file names and the time of your upload | To see which posts bring orders and keep orders in order | Legitimate interest |
| Cookieless page-view statistics | To see how the site is used | Legitimate interest |
| Messages you send by email or Instagram (incl. "STAGE" sample requests) | To answer you and send free samples | Contract / steps before a contract |
Your listing photos may show the inside of a home that belongs to a client. Please only send photos you took or have permission to use. We never post your photos or results publicly without your written permission.
Cookies, analytics and tracking
- No cookies from us. StageReveal doesn't set advertising or tracking cookies.
- Cloudflare Web Analytics counts page views (page, referrer, browser type, rough country) without cookies and without building a profile of you.
- Campaign tags (UTM). If you arrive through a link with
utm_source,utm_medium,utm_campaignorutm_content, we keep those four values in your browser's sessionStorage (cleared when you close the tab). They're added to your order form and passed to Stripe as a reference, so we can tell which post brought an order. They don't identify you. - Stripe Checkout runs on stripe.com and may use its own cookies for fraud prevention. See Stripe's privacy policy.
Who else handles your data
We don't sell your data or share it for advertising. We use these providers only to run the service:
- Cloudflare: hosts the site, stores uploads and order details (Workers KV), runs Web Analytics. Like any web host it briefly processes technical data such as your IP address to serve pages and block abuse.
- Stripe: payments, receipts and (where offered) subscriptions. Your card details go straight to Stripe; we never see or store your card number.
- Google (Gemini API): generates the AI images from the photos you send. We send only the images and the instructions needed for your order.
- Google (Gmail): our email inbox, if you email us or we deliver by email.
- Meta (Instagram): only if you message us or ask for delivery by Instagram DM.
Some of these providers process data outside the EU, for example in the US. When they do, they rely on safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
How long we keep it
- Your uploads, the images we make, and the order form entry: deleted 30 days after delivery, or sooner if you ask.
- Questions without an order: deleted within 30 days after we've answered.
- Payment records (name, email, amount, date, Stripe receipt): kept as long as Hungarian tax and accounting law requires (currently up to 8 years).
- Emails and DMs about your order: deleted on request, unless we need them for a legal claim or the records above.
Your rights
Under the GDPR you can ask us to:
- show you the data we hold about you, and give you a copy;
- correct it, or delete it (including your photos, before the 30 days are up);
- restrict or object to how we use it, or move it to another service.
Email [email protected] from the address you ordered with. We reply within one month, usually much sooner. You can also complain to the Hungarian data protection authority, NAIH (Nemzeti Adatvédelmi és Információszabadság Hatóság), or to the authority where you live.
Other things to know
- No automated decisions with legal or similar effects are made about you. AI makes images; a person checks them.
- Age: StageReveal is for adults (18+) and businesses.
- Security: uploads go over HTTPS and are stored in a private store only we can access.
- Changes: if we change this policy we update the date at the top. Big changes that affect existing orders, we'll tell you about.
Who's responsible (data controller)
Seller: The SaaS Guy (TheSaaSGuy), operated by Illés István Kristóf, sole trader (egyéni vállalkozó), Budapest, Hungary
Address: Gergely u. 116. 3. em. 53. sz., 1108 Budapest, Hungary
Tax number: 92352209-1-42
Email: [email protected]