Privacy Policy - Vikaba

1. Information We Collect

Account data: Name, email address, and hashed password when you register.
Uploaded content: Room photos you upload for AI redesign.
Usage data: Design generation history, feature usage, and session data.
Payment data: Processed securely by Stripe. We do not store credit card numbers.
Device data: Browser type, IP address, and device identifiers for analytics and security.

2. How We Use Your Information

We use your data to: provide and improve the Service, process payments, generate AI designs and cost estimates, send account-related communications, and ensure platform security. We do not sell your personal data to third parties.

3. AI Processing

Uploaded photos are sent to third-party AI providers (Replicate) for design generation and cost estimation. These providers process data per their respective privacy policies. We do not use your uploads to train AI models.

4. Data Storage & Security

Data is stored in PostgreSQL databases and Cloudflare R2 object storage. All data is encrypted in transit (TLS) and at rest. Passwords are hashed using bcrypt. We implement industry-standard security measures, but no system is 100% secure.

5. Data Sharing

We share data only with: service providers (Stripe, Replicate, Cloudflare) as needed to operate the Service; law enforcement when required by law; and with your consent for public designs you choose to share.

6. Your Rights

You can: access and download your data, update your profile information, delete your account and all associated data, and opt out of non-essential communications. To exercise these rights, visit Settings or contact us at privacy@vikaba.com.

7. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (with your consent) to understand usage patterns. You can disable non-essential cookies in your browser settings.

8. Data Retention

We retain your data as long as your account is active. Upon account deletion, all personal data and uploads are permanently deleted within 30 days. Anonymized analytics data may be retained indefinitely.

9. Changes

We may update this policy periodically. Material changes will be communicated via email. Continued use of the Service constitutes acceptance of the updated policy.

10. Contact

Questions about privacy? Contact us at privacy@vikaba.com.