Trust & Privacy
This page is maintained by the LuxeStager team to answer common security and privacy questions about our virtual staging service. It describes app-visible controls and current practices — it is editable project content and is not an independent certification.
Accounts & authentication
You sign in with an email and password or via Google. Passwords are never stored or visible to us — authentication is handled by our managed identity provider.
You can sign out, change your password, or permanently delete your account at any time from your Account settings page.
Data we store
We store your email address, optional profile name and avatar, your subscription status, the images you upload to be staged, and the staged images we generate for you. Each user can only read their own records — access is enforced at the database layer.
Uploaded and generated images are associated with your account and used to display your history. We do not sell your data.
Platform & hosting
LuxeStager runs on the Lovable platform. Application traffic is served over HTTPS and the database enforces row-level access rules so that one user cannot read or modify another user's data through the API.
We do not claim any third-party certifications (e.g. SOC 2, ISO 27001, HIPAA, PCI). If you need formal compliance documentation for procurement, contact us.
Subprocessors & integrations
We rely on a small set of trusted providers to operate the service:
- Lovable Cloud — application hosting, database, and authentication
- Stripe — subscription billing and payment processing
- Replicate — AI model inference for virtual staging
- Google — optional OAuth sign-in
Payment card details are entered directly on Stripe's hosted checkout and are never sent to or stored by us.
Cookies & analytics
We use first-party cookies and local storage strictly to keep you signed in and to remember session preferences. The app does not currently ship third-party advertising or tracking cookies.
Retention & deletion
Your account, profile, uploaded images, staged images, and usage records are retained for as long as your account is active. When you delete your account from Account settings, we delete your profile, usage records, staged images, and cancel any active subscription. Backups and provider logs may retain residual copies for a limited period.
Security contact
If you believe you've found a security issue or want to ask a privacy question, please email security@luxestager.app. We aim to respond within a few business days. Please replace this address with your real contact before sharing the page publicly.
Last updated by the LuxeStager team. This page describes current app behavior and is not an independent audit or Lovable-issued certification.