Privacy policy

1. Who this policy is from

VisualBuild (“we,” “us,” “our”) is a contractor tool that turns a house photo into a photoreal after image. This policy describes what data we collect, how we use it, who we share it with, and your rights. It applies to the VisualBuild iOS app and the visualbuild.app website.

2. What we collect

We only collect information necessary to operate the service.

• Account information. When an operator creates an account for you, we store your email, name, business name, and your role (owner or member). Passwords are managed by our auth provider, Supabase, and we never see them in plain text.
• House photos you upload. Each photo you upload or capture in-app is stored so we can generate variants from it. Original camera EXIF metadata (including GPS coordinates) is stripped before upload.
• AI-generated images. The before/after results we generate from your photos, along with the category, option, or custom prompt used to produce them.
• Projects and shares. The project names you type, the public share links you create, and the view counts on those share links.
• Address lookups.When you use Find by Address, the address text and selected place identifier are sent to Google to retrieve Street View imagery. We don’t retain the search query after the lookup completes.
• Usage counters. A monthly count of how many generations your business has consumed, aggregated per team-member, used to enforce your monthly cap.
• Basic device + diagnostic info.Our hosting provider (Vercel) logs standard request metadata (IP address, user-agent, timestamp) for security and abuse prevention. These logs auto-expire on Vercel’s retention schedule.

3. What we don’t collect

• No location data beyond what you explicitly type into Find by Address. Photo GPS is stripped before upload.
• No background tracking. The mobile app does not run in the background and does not access your location, contacts, calendar, microphone, or motion sensors.
• No advertising trackers, no analytics scripts that follow you across the web, no third-party ad networks.
• No biometric data. No financial information (we don’t process payments in-app; billing is handled out of band).

4. How we use your data

Strictly to operate the service:

• To authenticate you and your team.
• To generate AI before/after images from the photos you upload and the materials or prompts you select.
• To deliver share links to recipients you choose.
• To enforce your monthly generation cap and show usage in the app.
• To respond when you contact us for support, account changes, or deletion requests.

5. Third parties we send data to

VisualBuild uses Google Gemini, operated by Google LLC, as a third-party AI service to generate your before/after images. When you tap Generate in the app, we send Gemini your uploaded house photo, an optional reference image, and a text prompt describing the desired change. Gemini returns the generated image. We do not include your name, email, location, or any account identifiers in that request, and the data is not used to train any third-party AI model beyond fulfilling your single request. Before your first generation, the app shows an in-product disclosure naming Google Gemini and requires your explicit consent to proceed.

Beyond Gemini, we share data only with the service providers required to deliver the product. Each is bound by its own privacy and security commitments.

• Google AI Studio (Gemini)— the third-party AI service described above. Receives the house photo you upload, an optional reference image, and a text prompt, and returns the generated “after” image. policies.google.com/privacy
• Supabase — authentication, storage for your photos, and our application database. supabase.com/privacy
• Google Maps Platform — receives the address text or place ID you submit in Find by Address, returns autocomplete suggestions and Street View imagery. policies.google.com/privacy
• Vercel — hosts the web app and serves API requests. Standard request logs only. vercel.com/legal/privacy-policy
• Apple — distributes the iOS app via the App Store and handles crash reporting if you have it enabled in iOS settings.

We do not sell, rent, or trade your data, and we don’t use your photos or generated images to train any third-party AI model beyond the single API call that fulfils your request.

6. How long we keep it

• Account, project, and generation data: kept until you (or the business owner) ask us to delete it.
• Public share links: active until you revoke them in the app. Revoking immediately removes public access; the underlying generation row stays in your project.
• Server request logs: Vercel’s default retention (currently ~24 hours of detailed logs; aggregated metrics longer).
• Backups: our database is backed up on a rolling basis by Supabase. Deleted records are purged from active storage immediately and from backups within 30 days.

7. Your rights

You can request any of the following at any time by calling (416) 474-3996:

• Access — get a copy of your data.
• Correction— fix anything that’s wrong (e.g. your name).
• Deletion — delete your account and every photo, generation, project, and share link tied to it. Honored within 5 business days.
• Portability — receive your generated images and project metadata in a standard format.
• Opt out— remove yourself from a business account; if you’re the only member, the business is deleted with you.

8. Security

We use industry-standard encryption in transit (TLS 1.2+) and at rest (handled by Supabase and Vercel). All authenticated API routes verify a per-session JSON Web Token. Photos are stored in access-controlled buckets with row-level security policies — only members of your business can read your business’s photos.

No system is perfectly secure. If you spot a vulnerability, please email us at the address below before disclosing publicly.

9. Children

VisualBuild is built for professional contractors. It is not directed to children under 13 and we do not knowingly collect data from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

10. International users

Our servers operate in the United States. By using the service you consent to the transfer of your data to and processing in the United States. If you are in the EEA, UK, or another jurisdiction with cross-border data-transfer rules, the same deletion right in §7 applies and is your fastest remedy.

11. Changes to this policy

We may update this policy from time to time. The effective date at the top tells you when the current version was published. Material changes will be announced in-app and on this page at least 14 days before they take effect.

12. Contact

For privacy questions, deletion requests, or anything else related to your data:

• Phone: (416) 474-3996 (Mon–Fri, 9am–6pm ET)
• Or open the app, tap your profile menu, and use the “Sign out” & contact information shown there.

We typically respond within one business day.