Privacy Policy

1. Introduction

This Privacy Policy explains how MB Kimarta (“we”, “us”, or “our”), the operator of restylai, collects, uses, and protects your personal information when you use our AI interior-design service. We are committed to protecting your privacy and to complying with applicable data-protection laws, including the General Data Protection Regulation (GDPR) for users in the European Economic Area.

2. Information we collect

Personal information. When you create an account or make a purchase, we collect your name, email address, and billing details.

Payment information. Payments are processed securely by our third-party payment processor (Stripe). We do not store your full card details on our servers; the processor handles them in accordance with its own privacy policy and PCI-DSS standards.

Usage data. We collect information about how you interact with the Service, including IP address, browser and device type, and pages visited.

Room photos and generated content. We temporarily process the photos you upload in order to generate your redesigned images and videos. We do not use your uploaded photos or generated results to train AI models. Anonymous free renders and free-account content are automatically deleted within 30 days; paid-account content is retained while your account is active and deleted on request or after account closure.

You may browse the public site anonymously, and you can generate a limited number of free, watermarked redesigns without an account.

3. How we use your information

We use your information to:

• provide, operate, and improve the AI redesign and video service;
• process your transactions and deliver the credits, images, and videos you purchase;
• communicate with you about your orders and account;
• respond to support requests;
• send important notices about changes to our terms, policies, or service;
• detect, prevent, and address fraud, abuse, and security issues; and
• comply with legal obligations and enforce our policies.

We will not sell, exchange, or transfer your personal information to third parties for their own marketing, except as necessary to provide the Service or as required by law.

4. Payment processing

Payments are processed through a PCI-DSS compliant third-party processor. We currently use Stripe for card payments (privacy policy: stripe.com/privacy). When you make a purchase, your payment details are collected and processed directly by the processor; we receive only the limited information needed to fulfil your order, such as confirmation of payment and basic transaction details. We do not have access to your full card number or sensitive payment data.

5. Data security

We use industry-standard measures to protect your information: all data transmissions are encrypted with SSL/TLS, payment data is handled by PCI-DSS compliant systems, and access to personal information is restricted to authorized personnel. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

6. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, maintain your session and cart, and analyze site usage so we can improve the Service. You can control cookies through your browser settings; disabling them may limit some functionality.

7. Third-party service providers

We share information with trusted providers who help us run the Service, including payment processing (Stripe), cloud hosting and infrastructure, AI image and video generation (Google Cloud Vertex AI), email delivery, and analytics. To generate your redesign, the contents of your uploaded photo are sent to our AI generation provider solely to produce your result. These providers are contractually required to keep your information confidential and to use it only for the purposes we specify. We do not sell or rent your personal information.

8. Your rights under GDPR

If you are in the European Economic Area, you have the following rights:

• Access: request a copy of the personal data we hold about you;
• Rectification: request correction of inaccurate or incomplete data;
• Erasure: request deletion of your personal data (“right to be forgotten”);
• Restriction: request that we restrict processing of your data;
• Portability: receive your data in a structured, machine-readable format;
• Objection: object to processing of your data; and
• Withdraw consent: where processing is based on consent.

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

9. Data retention

We retain personal information only as long as necessary to provide the Service and comply with legal obligations. Uploaded photos and generated renders are deleted on the schedule described in section 2. Account information is retained until you request deletion or as required by law.

10. International data transfers

Your information may be transferred to and processed in countries other than your own. Where it is, we ensure appropriate safeguards are in place to protect it in accordance with applicable data-protection laws.

11. California privacy rights

California residents have rights under CalOPPA and the CCPA, including the right to know what personal information is collected, used, or shared; to request deletion; to opt out of the sale of personal information (we do not sell personal information); and not to be discriminated against for exercising these rights. You can update your account information at any time by signing in to your account.

12. Children’s privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe we have collected information from a child under 13, please contact us and we will delete it.

13. Terms of Service

Please also review our Terms of Service, which establish the use, disclaimers, and limitations of liability governing the Service.

14. Your consent

By using restylai, you consent to this Privacy Policy.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will indicate changes by updating the “Last updated” date above. We encourage you to review this policy periodically.

16. Contact us

If you have questions about this Privacy Policy or wish to exercise your data-protection rights, please contact us at [email protected].