Privacy Policy

1. Who we are

Retouch Homes (retouch.homes) is operated by Optimizer Team, Inc., a Delaware corporation at 2261 Market Street, STE 66718, San Francisco, CA 94114, USA ("we", "us"). This policy explains what personal data we handle when you use our website, app, API or portal embed, and the choices you have. It applies wherever you are; extra rights for some places are in section 9.

For your account and our website, we decide how data is used (we are the "controller"). When a business, such as an agency or a listing portal, sends us photos as part of its own work, we process those photos on its behalf and on its instructions (as its "processor" or "service provider"). If you appear in such a photo, that business is your first contact; we will help it answer you.

2. What we collect

• Account details: your name and email. If you sign in with Google, also your Google profile name and picture. If you sign in by email link, the address we send it to.
• Email preferences: whether you ticked "Email me product updates" when signing in, and when.
• Organization details: organization names, members and their roles, invitations (email addresses), and API key names. We store keys only in hashed form.
• Photos: the photos you upload or whose links you send, the edited photos we return, and a report of each edit. Photos can show people, the inside of homes and things like car plates, and can carry metadata such as where they were taken. Listing IDs or names you attach are kept with them.
• Usage and logs: a record of each photo processed, for metering and billing; a log of API calls (time, status, photo count, errors, but not the photo links); and, for each sign-in session, your IP address and browser type. Our server logs drop the query part of links, because signed links carry access tokens there.
• Portal embed: when a partner portal shows our card in its listing form, we record whether it was shown, and whether you opted in, opted out or clicked it, with a random session ID, the language and the version of the text shown. These records carry no name or email.
• Website analytics: pages viewed, referring sites, device and browser type, and approximate location from your IP address, through Vercel Web Analytics and, on retouch.homes, Google Analytics.
• Payments (once paid plans start): Stripe and Link take your payment details. We receive what you bought, the amount, your country and email, never your full card number.
• Messages: what you write when you email us.

3. How we use it

• to sign you in and run the Service: edit photos, deliver them and show you your usage and logs;
• to keep the Service secure, enforce rate limits and stop abuse;
• to answer support requests and tell you about changes to the Service or these policies;
• to email you product updates and offers, only if you ticked the box for them when signing in. Each one has an unsubscribe link, or you can email us to stop them;
• to bill you, keep accounting records and meet legal duties;
• to understand, in aggregate, how the website and embed are used, and improve them.

We don't sell personal data, and we don't use it for targeted advertising. We don't use your photos to train AI models or to market Retouch Homes without your permission.

Where the law asks for a legal basis (for example in the EU and UK), we rely on: performing our contract with you; our legitimate interests in running a secure, working service and understanding its use; your consent, where we ask for it, which you can withdraw at any time; and legal obligations, such as tax records.

4. Who we share it with

We use these providers to run the Service. They may use the data only to provide their service to us.

• Vercel: hosting, file storage and web analytics.
• Neon: our database.
• Google: sign-in with Google, and Google Analytics.
• Resend: sending sign-in emails and, if you opted in, product-update emails.
• Stripe and Link: payments, once paid plans start. Link may sell to you as merchant of record and then also uses your data under its own privacy policy.

If you opt in to Retouch Homes through a partner portal, the portal sends us your photos and receives the edited photos back; the portal's own privacy policy covers what it does with them. We may also disclose data if the law requires it, to protect people or our rights, or to a buyer of our business, who would have to honor this policy.

5. Where it's stored

Our database and photo storage are in Singapore. Some providers, including Google, Resend and Stripe, process data in the United States and other countries. When data moves across borders, we rely on safeguards the law recognizes, such as the European Commission's standard contractual clauses and our providers' data processing terms.

6. How long we keep it

• Original photos: we keep a private copy of each original for up to 90 days so you can compare it with the edit, then delete it automatically. A photo you upload in the app first waits in temporary storage at a long, unguessable link that anyone who has it can open. We delete it once the photo is processed, or within about 90 days if processing fails or the upload is abandoned.
• Edited photos and edit reports: we keep them while your organization uses the Service, because portals publish them, and delete them when you ask. Edited photos are served from long, unguessable links so websites can show them: anyone you share a link with can open it.
• Account and organization data: until you delete your account or ask us to. Backups expire on a rolling schedule after that.
• Usage and payment records: as long as tax and accounting law requires.
• Analytics: for the periods set in Google Analytics and Vercel Web Analytics.

7. Security

Data travels over HTTPS. The private copies of original photos can be opened, by you or our staff, only through links that expire within minutes; app uploads waiting to be processed sit at unguessable links (see section 6). API keys are stored hashed. Access is limited to people who need it to run the Service. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

8. Cookies

• Sign-in: a session cookie that keeps you signed in to the app. The app doesn't work without it.
• Google Analytics sets cookies on retouch.homes (named _ga and _ga_…) to count visits. You can block them in your browser or with Google's opt-out add-on.
• Vercel Web Analytics uses no cookies.

The portal embed sets no cookies on the portal's site.

9. Your rights

Wherever you live, you can ask us for a copy of your personal data, to correct it, to delete it, or to send it to you in a portable format, and you can object to or ask us to limit how we use it. Email hello@retouch.homes. We will confirm your identity, answer within 30 days or sooner if your law requires, and won't treat you differently for asking.

• EU, EEA and UK: you have these rights under the GDPR and UK GDPR, can withdraw consent at any time, and can complain to your data protection authority.
• California and other US states: you can ask what personal data we collected, used and disclosed in the past 12 months, and have it deleted or corrected. We don't sell personal data or "share" it for cross-context behavioral advertising, and we don't use sensitive personal data to infer things about you. You can use an authorized agent to make a request.
• Malaysia (Personal Data Protection Act 2010), Singapore (Personal Data Protection Act 2012) and Indonesia (Law No. 27 of 2022 on Personal Data Protection): you can access and correct your data, withdraw consent, and, in Indonesia, ask for deletion. You can also complain to your country's personal data protection authority.

For data in photos that a business sent us, we pass your request to that business and help it respond.

10. Children

The Service is for adults doing business. We don't knowingly collect data from anyone under 18. If you believe a child has given us personal data, email us and we will delete it.

11. Changes

We will post any change here with a new date, and tell signed-in users by email or in the app before a material change takes effect. Our Terms of Service cover the rest of our agreement with you.

12. Contact

Privacy questions and requests, including for our data protection contact: hello@retouch.homes, or by post to Optimizer Team, Inc., 2261 Market Street, STE 66718, San Francisco, CA 94114, USA.