Privacy Policy

1. What we collect

• Account data: email address, name, and profile data provided via Blueblood ID authentication.
• Room photos: images you upload for redesign. Do not upload people or content you do not have permission to process.
• Generated designs: AI-generated images and structured audits derived from your uploads.
• Usage data: generation count, billing tier, timestamps, IP-derived country for regional pricing.
• Payment data: handled by Razorpay. We do not receive full card numbers.

2. How we use it

• To generate the redesigns you request and bill the appropriate tier.
• To send transactional emails (trial expiry, payment receipts, account updates) via Resend.
• To analyze aggregate product usage via Mixpanel — only after you grant cookie consent.
• To detect and prevent abuse, fraud, and security incidents.

Blueblood Studio does not use your uploads to train or fine-tune its own models. Third-party model and infrastructure providers process request data under their applicable terms.

3. Sub-processors

• Blueblood ID — authentication (SSO)
• Blueblood database proxy — application database hosted on Blueblood Studio infrastructure
• Google Gemini — design analysis and shopping-list generation
• Razorpay — subscription payments
• Resend — transactional email
• Mixpanel — analytics (consent-gated)
• Sentry — error tracking
• Vercel — hosting and edge functions

4. Retention

• Original uploaded photos: processed for the requested generation and not stored in the application database as upload history.
• Generated designs: retained until you delete them or your account.
• Generation logs: retained for operational, security, and cost-control purposes for up to 90 days.
• Billing records: retained as required for accounting, fraud prevention, and legal obligations.

5. Your rights

• Access & portability: export your data as JSON via account settings.
• Erasure: delete your account and all associated data via account settings.
• Object to processing: contact us using the address below.
• EU/UK residents: lodge a complaint with your local data-protection authority.

6. Cookies & tracking

Strictly-necessary cookies (authentication, payment session) are set without consent. Analytics cookies (Mixpanel) are only set after you click “Accept” on the cookie banner. You can change your preference at any time from the footer.

7. Contact

Privacy questions: hello@bluebloodstudio.com.