Privacy Policy

Last updated: August 31, 2026 — DRAFT pending legal review

What we collect

• Account data: email address and password hash (via Supabase Auth).
• Images: photos you upload and images we generate for you, stored privately.
• Payment data: handled by Stripe; we never see or store card numbers.
• Abuse-prevention signals: a salted hash of your IP address and a device fingerprint hash for the free tier. Raw IP addresses are not stored.
• Usage analytics: page and feature usage, error logs.

How images are processed

Uploaded photos are sent to Google's Gemini API to produce your requested modification, and are checked automatically for identifiable people (we reject those uploads). Generated images carry Google's invisible SynthID provenance mark.

Retention and deletion

Your images stay until you delete the project or your account; deleting either removes the associated stored images. Ledger and purchase records are retained as required for accounting.

Sharing

We share data only with the processors that run the service — Supabase (database/storage), Vercel (hosting), Google (image generation), Stripe (payments), Resend (email), Cloudflare (bot protection), Upstash (rate limiting), Inngest (job processing) — and never sell it.

Your rights

Email support@streetworks.com to access, correct, or delete your data, or delete your account directly from the account page.