Privacy Policy

1. Data controller

This service is operated by tekso (the “data controller”). tekso is registered in [jurisdiction]. For any privacy question or to exercise your rights, contact us at support@tekso.org.

2. What data we collect

We collect the following information when you use tekso:

• Room photos — the images you upload to generate redesigns.
• Email address — used to create and manage your account.
• Google account info — when you sign in with Google, we receive your name, email, and profile picture.
• Billing information — handled by our payment processor; we store order and subscription records but not full card numbers.

3. How we use your data

• AI generation — your room photos are sent to our AI provider to produce redesigned images.
• Account management — your email and Google account info let you sign in, manage credits, and access your generation history.
• Billing and support — to process payments, provide refunds, and respond to requests.

4. Legal basis for processing (GDPR Art. 6)

Where the EU General Data Protection Regulation applies, we rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b)) — to provide the service you request: generating images, managing your account, and fulfilling purchases and subscriptions.
• Legitimate interests (Art. 6(1)(f)) — to secure the service, prevent fraud, analyze usage, and comply with our legitimate business needs, balanced against your rights.
• Consent (Art. 6(1)(a)) — where required, such as for non-essential cookies or optional marketing communications. You may withdraw consent at any time.

5. Third parties we share data with

• Volcengine Ark (Seedream models) — our AI image provider. It processes the room photos you upload to generate AI redesigns.
• SiliconFlow — text-only: powers the free text-to-image preview and rewrites your prompt text. It does not receive the photos you upload.
• Waffo — our payment processor and merchant of record (MoR). It handles credit card and billing information for purchases and subscriptions.
• Supabase — our database and hosting provider. It securely stores your account and application data.

6. International data transfers

tekso is operated from servers located in the United States. If you access the service from outside the United States — including from the European Economic Area (EEA) or the United Kingdom — your personal data will be transferred to and processed in the United States. Where we transfer personal data from the EEA or UK to the United States, we rely on appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, together with technical and organizational measures, to protect your data.

7. Data retention

• AI task results — kept for 30 days, then deleted.
• Feedback — kept for 90 days, then deleted.
• Credit transactions — stored permanently for accounting and dispute resolution.
• Original room photos — deleted immediately after generation.

8. Your rights

Subject to applicable law, you have the right to:

• Access — obtain confirmation of and a copy of your personal data.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your account and associated data.
• Restriction — ask us to limit processing in certain circumstances.
• Objection — object to processing based on legitimate interests, including profiling.
• Data portability — receive your data in a structured, commonly used, machine-readable format.
• Withdraw consent — withdraw any consent at any time, without affecting prior lawful processing.

To exercise these rights, contact us at support@tekso.org. You also have the right to lodge a complaint with your local supervisory authority.

9. California privacy rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect and how we use and share it, the right to access your information, the right to request deletion of your personal information, and the right to opt out of the “sale” or sharing of your personal information for cross-context behavioral advertising. We do not sell your personal information in the traditional sense. You may submit a request via the Do-Not-Sell / Do-Not-Share link on this page (to be provided) or by contacting support@tekso.org. We will not discriminate against you for exercising these rights.

10. Cookies

We use a session cookie provided by Better Auth to keep you signed in. This cookie does not track you across other websites. Where we use non-essential cookies, we will request your consent through our cookie banner.