Privacy Policy and Cookies

Last updated: March 19, 2026

1. Data controller

The data controller is [COMPANY NAME], registered at [ADDRESS], Tax ID: [NIP] (hereinafter: "Controller"). Contact: kontakt@simplistage.pl.

2. Types of data collected

The Controller collects the following personal data:

  • Email address — provided during account registration.
  • Property photos — uploaded to generate virtual staging.
  • Property data — information provided in the description generator form (type, area, location, etc.).
  • Payment data — processed by Stripe; the Controller does not store credit card data.

3. Processing purposes

  • Creating and managing user accounts (authentication).
  • Providing the virtual staging service — processing photos through our system.
  • Providing the description generator service — generating text based on property data.
  • Processing payments for credits (photos).
  • Communicating with the user (complaint handling, information about terms changes).

4. Legal bases for processing (GDPR)

  • Art. 6(1)(b) — performance of a contract (provision of services).
  • Art. 6(1)(a) — consent (acceptance of terms of service and privacy policy during registration).
  • Art. 6(1)(f) — legitimate interest of the controller (service security).

5. Sharing data with third parties

Data may be shared with the following entities:

  • Supabase (USA) — database hosting and authentication. Data protected under Standard Contractual Clauses (SCCs).
  • Stripe (USA) — payment processing. Stripe is PCI DSS certified.
  • Google Cloud (USA) — photo processing and description generation. Photos are sent to the API for service delivery.

6. Data retention

  • Account data is stored until the User deletes their account.
  • Uploaded original and generated photos are stored for the period necessary to provide the service.
  • Payment transaction data is stored for the period required by tax law (5 years).

7. User rights

Under the GDPR, the User has the following rights:

  • Right of access — to obtain information about processed data.
  • Right to rectification — to correct inaccurate data.
  • Right to erasure — to request data deletion ("right to be forgotten").
  • Right to data portability — to receive data in a structured format.
  • Right to restriction of processing — in certain cases.
  • Right to object — to processing based on legitimate interest.

To exercise the above rights, please contact the Controller at: kontakt@simplistage.pl. The User also has the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).

8. Cookies

The Service uses only cookies necessary for the proper functioning of the service. We do not use analytics or advertising cookies.

Cookie / StoragePurposeTypeLifetime
sb-*-auth-tokenAuthentication session (Supabase)EssentialSession / until logout
__stripe_mid, __stripe_sidPayment processing (Stripe)EssentialPayment session
cookie_consent (localStorage)Remembering cookie consentEssentialIndefinite

Users can manage cookies in their browser settings. Deleting session cookies will log you out of the service.

Instructions for managing cookies in popular browsers:

  • Chrome: Settings → Privacy and security → Cookies
  • Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Safari: Preferences → Privacy → Manage Website Data
  • Edge: Settings → Privacy → Cookies

9. Contact

For matters related to personal data protection, please contact us at: kontakt@simplistage.pl.