Privacy Policy

This policy explains what data PropShot ("we", "us") collects, how we use it, who we share it with, and your rights. By using PropShot you agree to this policy.

What we collect

• Account info: your email address (used to sign you in).
• Photos you upload: processed so you can edit them. Photos are stored for 7 days and then automatically deleted from our systems. This is enforced in code, not policy.
• Edit history: which tools you applied to each photo, kept for the same 7-day window as the photo itself.
• Payment info: handled by Stripe. We never see or store full card numbers. We see the amount, currency, and the Stripe transaction ID. Current pricing — including per-photo overage and the Twilight surcharge — is on the Pricing page.
• Usage data: count of previews you've used (for the per-account free-preview cap, which resets when you purchase a pack), and basic error logs to debug issues.
• Abuse-prevention hash: a salted one-way hash of your email is stored so we can prevent the same email from repeatedly creating and deleting accounts to reset the free-preview cap. The hash is not reversible back to your email. It is the only thing we retain after you delete your account.

How long we keep your data

• Photos (originals and edited versions): deleted after 7 days. Download the files you want to keep within that window.
• Account / email: kept active for as long as your account exists. You can delete your account at any time, which removes the email record.
• Payment records: retained by Stripe under their standard retention (typically multi-year, for tax and accounting compliance). We retain only the Stripe transaction ID and amount, also under standard retention.

How we use your data

• To deliver the service — process your photos and let you download the results.
• To bill you for paid features (full-resolution exports).
• To prevent abuse (rate limits on free previews).

We do not sell your data. We do not use your photos to train AI models.

Third parties we share data with

The 7-day deletion rule applies through every third party listed below: photos sent for processing are not retained by the provider beyond what's needed to deliver the result.

• Supabase — hosts your account record and short-term photo storage during the 7-day window. supabase.com/privacy
• fal.ai — runs the image-processing models. Photos are sent to fal.ai for processing and discarded after the operation completes. fal.ai/privacy-policy
• Stripe — handles all payment processing. stripe.com/privacy
• Vercel — hosts the app and serves traffic. vercel.com/legal/privacy-policy
• Google — only if you choose "Sign in with Google" — Google verifies your identity and shares your email + name with us.
• Cloudflare (Turnstile) — bot-protection challenge run on the login and contact pages. Cloudflare receives technical signals about your browser/device to score the request as human or bot. No content from the page is sent. cloudflare.com/privacypolicy
• Resend — transactional email provider used only for system alerts to the operator and replies to your contact-form submissions. Your email address is included in the message header so we can reply. resend.com/legal/privacy-policy

Your rights

• Access: request a copy of the data we have about you.
• Deletion: request deletion of your account.
• Export: download your photos at any time from the app during their 7-day retention window.

Cookies and local storage

We use cookies and browser local storage to keep you signed in and remember which photos you have in progress. We do not use third-party advertising cookies.

Children

PropShot is intended for licensed real-estate professionals. Not directed at users under 18.

Changes to this policy

If we make material changes we'll post the updated date at the top of this page.

Contact us

For privacy or data requests — access, deletion, export, or anything else covered in this policy — use our contact form and choose "Privacy / data request" as the topic.