Privacy Policy

• Account information. Your email address, password credentials (stored hashed by our authentication provider), and any profile or brand details you add — agent or brokerage name, logo, and team membership.
• Uploaded photos and property content. The property photos you upload, the AI-generated results (staged, enhanced, curb-appeal, twilight, renovation concept, floor plan, video), plus the metadata you enter: property or listing name and address, room type, condition, staging style, and generated listing descriptions.
• Payment information. Subscriptions are billed through Stripe. Stripe collects and stores your card details directly — we never receive or store your full card number. We keep a customer/subscription reference, your plan, billing status, and renewal dates.
• Usage analytics. Counts of photos processed, properties created, feature usage, and page views on your branded public property pages (including aggregate view counts and dates). We also keep basic technical logs and error reports needed to operate and debug the service.
• Leads and inquiries. If a buyer submits the contact form on one of your public property pages, we store the name, email, phone, message and status so you can manage it in your Leads CRM. Enterprise "Contact Sales" submissions are stored for our sales follow-up.

Photos are stored in private cloud storage. Access is restricted to your own account (and, for brokerage plans, no other agent on your team can see your photos) — files are served through short-lived signed links. The exception is any property page you deliberately publish: photos on a published page are publicly viewable by anyone with the link, until you unpublish or delete it.

Third-party AI processing. To generate results, your uploaded image and the relevant prompt details are transmitted to third-party AI image and text processing providers (currently Google Gemini models via our AI gateway, and OpenAI text-to-speech for walkthrough voiceovers). These providers process the image to return output to us. We use business/API tiers and do not authorize these providers to use your photos to train their models. We are not responsible for their independent practices, but we choose providers whose API terms exclude training on submitted content.

We do not sell your data, and we do not share your photos with unrelated third parties or with advertisers. We share data only with service providers who help us run Curbellas, and only for that purpose:

• cloud hosting, database, and file storage providers;
• the AI processing providers described above;
• Stripe, for payments and subscription management;
• email delivery providers, for account and transactional messages you have asked for.

We may also disclose information if legally required, or to protect our rights or the safety of users. If our business is transferred, data may move with it under this same policy.

We keep your photos and generated assets for as long as your account is active, so your gallery and published pages keep working. You can:

• delete individual photos or a whole property from the My Photos page;
• unpublish a branded property page at any time to remove it from public view;
• request full account and data deletion by emailing privacy@pipelinestudio.app from your account address. We will delete your account, stored photos, generated assets, brand profile and leads within 30 days, except records we must keep for tax, accounting or fraud-prevention purposes (for example invoices held by Stripe).

You may also request a copy of the personal data we hold about you, or ask us to correct it. Depending on where you live, you may have additional rights (such as objecting to certain processing) — email us and we will honor them.

Essential. We use strictly necessary cookies and local browser storage to keep you signed in and remember interface preferences. Blocking them may prevent sign-in from working.

Analytics (first-party). We count feature usage and property page views so you can see performance in your Analytics dashboard. When you first visit, we also note the campaign tags in the link you arrived on (utm_source, utm_medium, utm_campaign, utm_content, utm_term), which kind of ad click brought you (for example “a Facebook ad click” — we do not keep the ad network’s click identifier itself), the referring website, your landing page and a random browser key. We use this, together with which sign-up and checkout steps were reached, to understand which campaigns bring customers. This record stays on Curbellas and is attached to your account when you sign up; it does not include your name or email.

Advertising measurement. We use the Google Ads tag (Google LLC) to measure whether our ads lead to a subscription; when you start a subscription we report the plan and amount, never your payment details. We may also use the Meta Pixel (Meta Platforms) for the same purpose; it is switched off unless we enable it, and then only runs with your advertising choice. We do not send your email, phone number or account content to advertising platforms.

Your choices. Visitors in the EEA, UK and Switzerland (and anyone whose region we can’t determine) are asked first, and analytics and advertising stay off until they choose. Elsewhere they are on by default. Anyone can change or withdraw their choice at any time from the Cookie settings link in the site footer; the change applies immediately, and we keep a record of each choice and when it was made in your browser.

Partner referral links. If you arrive through a Curbellas partner link (a link containing ?via=), we ask before remembering that referral in your browser. With your OK we store the partner code and the date of your first visit for the partner attribution window so the partner can be credited if you later subscribe; if you decline, it is removed. Partners never receive your full email address, payment details or account content — only a masked label (for example “j•••@example.com”) and commission amounts. See the Partner Program Terms.

We use encryption in transit, private storage buckets, row-level access controls, and signed URLs. No system is perfectly secure, so please use a strong, unique password. The service is intended for real estate professionals and is not directed at anyone under 18. Our providers may process data in the United States and other countries; where required we rely on appropriate safeguards for those transfers.

Privacy questions, access requests, or deletion requests: privacy@pipelinestudio.app. We aim to respond within 5 business days. We will post material changes to this policy in the app before they take effect.