This policy explains what personal information FloorStage collects, why, who sees it, where it is kept, how long we keep it, and what you can ask us to do with it. It applies to everyone who uses floorstage.com or the delivery pages we host.
Who is responsible. FloorStage, a company registered in Wyoming, United States, is the controller of the personal information described here. Message us from inside the app about anything in this policy.
1. Who this policy covers
- Customers — people with a FloorStage account.
- Visitors — people who browse floorstage.com without an account.
- Delivery-page viewers and buyers — a customer's clients who open a delivery link, download files, or pay to unlock a page. FloorStage runs those pages on the customer's behalf; the customer decides what is shared and is responsible for its own relationship with its clients.
- People who appear in content — a property photo occasionally shows a person or personal belongings. The customer who uploaded it is responsible for having the right to do so. We treat such photos as the customer's content under section 2.
2. What we collect
When you register and use your account
- Your first and last name, email address, password (stored in a form we cannot read), country, and, if you choose to tell us, your industry.
- Your billing currency (fixed at registration), and the billing details you enter: business name, address, tax number.
- Your preferences (theme, layout, the "Showcase my results" and newsletter switches), your profile picture and branding if you upload them, and your branded delivery address on a paid plan.
- Security records: the time, IP address and device of sign-ins, active sessions, two-factor settings, and a log of changes to your account and money.
Your content
- Photos, RAW files, scans, sketches, plan links and documents you upload, and the results we produce from them. We store files as you send them, including the camera settings, timestamps and — if your camera or phone wrote them — the location tags inside the file. If you do not want a location tag stored, remove it before uploading.
- Property names and addresses you type or pick, and the map image we show for them.
- Instructions you type into AI tools, the settings you choose, and the thumbs-up or -down you give a result.
- Orders: what you ordered, the notes you wrote, the files you attached, revisions, and the delivered plans.
Money
- Every credit and token movement: top-ups, purchases, charges, refunds, grants and expiries, with the job or order it belongs to. We keep these records as section 7 says.
- Card payments are handled by Stripe; we receive a reference, the last four digits and the outcome, never the full card number.
- Receipts and invoices for your purchases.
How you use FloorStage
- The pages you open inside the app, with the time, so we can help with support and see which features are used. We record the page, never what you typed into it.
- Technical logs of every request: IP address, browser type, the URL and the response, kept briefly for security and to investigate faults (section 7). Error reports, with the technical state of the page when something broke.
- Emails we sent you and whether they were delivered.
Delivery-page viewers and buyers
- For viewers: a page-view count per delivery page, the cookieless page analytics every page carries (section 6), and the technical request logs above. We set no tracking cookies on delivery pages.
- For buyers who pay to unlock a page: your email address and the payment outcome, so the page can unlock and the studio can see who paid. The payment itself is made to the studio through Stripe; the studio and Stripe hold the card details.
Support and marketing
- Emails and messages you send us.
- Your newsletter choice, when you made or changed it, and how (the signup box, Settings, or an unsubscribe link).
What we do not collect. We run no advertising trackers, no session recordings, no social media pixels, and we do not buy data about you from anyone.
3. Why we use it, and the legal basis
| What we do | Why, and the legal basis |
|---|---|
| Run your account, your folders, your tools, your orders and your wallets | To perform our contract with you |
| Send your photos and instructions to AI providers and to our drafting staff | To perform our contract with you — it is how the result is made |
| Charge, refund and record money movements; send invoices and receipts | Contract, and our legal duty to keep financial records |
| Email you about your account, orders, jobs, security and changes to these documents | Contract — these service emails cannot be switched off while you have an account |
| Send the monthly newsletter about our own services | Our legitimate interest in keeping our customers informed. It starts on when you open an account; switch it off at signup, in Settings, or with the unsubscribe link in every newsletter. Accounts opened before 20 October 2026 get it only if they switched it on |
| Show anonymised before-and-after examples of results in our marketing | Our legitimate interest in showing our work; switch it off at any time with "Showcase my results" in Settings |
| Prevent abuse and keep accounts secure | Our legitimate interest in running a safe service, and in some cases our legal duties |
| Compare a new account's sign-up details (the device cookie, the internet address, the email address and the surname) with other accounts, to stop repeated free-trial sign-ups | Our legitimate interest in keeping the free sign-up tokens to one per person; internet addresses are kept for this for 30 days |
| Keep request logs, error reports and a change trail | Our legitimate interest in keeping the service working and investigating faults |
| Record which pages are used | Our legitimate interest in supporting you and improving the product |
| Host delivery pages for your clients | Contract with the customer; for the client's own details, the customer's instructions |
| Answer support requests | Contract and legitimate interest |
AI processing. Your photos are edited by AI. It changes the picture as instructed and makes no decision about you. We do not use your content to train AI models, and we send it to our AI providers only to produce the result you asked for. Refunds, account suspensions and every other decision about a person are made by a human at FloorStage. We do not profile you.
4. Who we share it with
We share personal information only with the companies that run parts of the service for us — hosting and file storage, AI image processing, email delivery, error and uptime monitoring, maps and address search, payments and security checks — and with our drafting team. Each gets only what it needs for its part, under contracts that limit what it may do with it. We do not sell or share personal information for advertising.
Card payments are made through Stripe, which receives your card details directly; we never see them. If you sign in with Google, Google shares your account email with us.
We also disclose information when the law requires it, to protect our rights or someone's safety, or to a successor if we sell or transfer the business (we would tell you first).
Public pages. What you put on a delivery page is visible to anyone with the link. Your studio name and logo appear on your delivery pages and branded address.
Other websites. FloorStage links to other companies' websites, and a delivery page may embed a video or 3D tour a customer added. Their privacy practices are their own; this policy covers only what we run.
5. Where your data lives
Your information may be stored and processed outside your own country, including in the United States. Where the law requires it, those transfers are protected by safeguards such as the European Commission's standard contractual clauses.
6. Cookies
We use only cookies the service needs to work:
- a session cookie that keeps you signed in (30 days if you tick "remember me", otherwise until you close the browser);
- a preferences cookie that remembers your theme and layout;
- a device cookie set on the sign-up and sign-in pages — a random code that lets us notice one browser opening several accounts to claim the free sign-up tokens again;
- security cookies from our network provider, which tell real browsers from bots.
Every page, delivery pages included, counts page views without setting a cookie or storing an identifier. Delivery pages set no cookies of their own. We do not use advertising cookies.
7. How long we keep it
| Data | Kept for |
|---|---|
| Your account and content | Until you delete it or close your account |
| A photo you delete | Removed from view at once; the file is purged after 30 days |
| RAW files uploaded for HDR editing | About 2 days after upload; only the results are kept |
| An account whose email address is never confirmed | Deleted 30 days after sign-up |
| An account with no sign-in for 12 months | May be closed after a warning by email; its content goes with it |
| Closing your account | Locked at once; personal details deleted or anonymised after a 30-day grace period |
| Money records (credit and token movements, purchases, invoices, refunds) | Kept after account closure, anonymised, for as long as financial-record laws require (usually up to 7 years) |
| Security trail of account and money changes | Life of the account, then anonymised with the money records |
| Backups | Overwritten on a rolling basis after a few weeks |
| Technical records of AI jobs | 90 days |
| Content of emails we sent you | 90 days; the fact that we sent it, longer |
| Pages you opened in the app | 90 days |
| Internet addresses kept to spot repeated free-trial sign-ups | 30 days |
| Server request logs | A short period |
| Error reports | 90 days |
| Delivery-page view counts | While the page exists |
| Buyer email and payment outcome on a paid delivery page | With the customer's payment history |
| Newsletter choice record | Life of the account, plus the record of switching it off |
8. How we protect it
Every connection is encrypted. Files are stored privately; nothing is public unless you put it on a delivery page. Passwords are stored in a form we cannot read and checked against known breaches, and two-step sign-in is available. Our systems are protected against attacks, kept up to date and backed up regularly. Access to customer data by our staff is limited to what support and operations need. If a breach affects your personal information we will tell you and the relevant regulator as the law requires. No system is perfectly secure, and we cannot guarantee that information sent over the internet will never be intercepted; what we promise is the measures above and a prompt, honest response if something goes wrong.
9. Your rights
Wherever you live, you can ask us to:
- see the personal information we hold about you and get a copy of your content;
- correct it — most of it you can edit yourself in Settings;
- delete it — close your account at any time (section 7), or delete individual photos and folders yourself;
- export it — your photos and results are downloadable at any time; ask us for an export of your account data;
- stop the newsletter or the use of your results as examples — switch off the newsletter or "Showcase my results" in Settings, or use the unsubscribe link in any newsletter;
- object to or restrict processing based on our legitimate interests, and we will do so unless we have a compelling reason not to.
Message us from inside the app. We reply within 30 days, and we may ask you to confirm it is your account. There is no charge.
Depending on where you live, you may also complain to your local data protection authority.
Delivery-page viewers and buyers: your contact is the studio whose page you used, which controls what is shared.
10. Children
FloorStage is for adults. We do not knowingly collect information from anyone under 18, and if we learn that we have, we delete it.
11. Changes to this policy
We update this policy when the service changes. For a change that reduces your rights we email you and show a notice in the app at least 14 days beforehand. The current version, with its dates, is always at floorstage.com/privacy.