Privacy Policy

This Privacy Policy explains how Lumakaizo LLC, the owner and operator of MyProjectPreview ("we," "our," or "us"), collects, uses, discloses, and protects information when you visit our website, join our waitlist, use our software, receive emails from us, or view a project preview or proposal shared through our service (collectively, the "Service").

1. Information We Collect

1.1 Information You Provide

We collect information you choose to provide, which may include:

• Waitlist information: email address and the signup source or page where you joined.
• Account and profile information: name, email address, phone number, company name, logo, business details, website links, and notification preferences.
• Project and proposal information: client names, project addresses, descriptions, uploaded photos, reference materials, line items, pricing, proposal terms, approvals, and client feedback.
• AI preview inputs and outputs: prompts, project photos, reference images, generated previews, summaries, sales-pitch text, and related metadata needed to operate the AI features.
• Communications: support requests, replies to our emails, feedback, and other messages you send us.
• Billing information: subscription plan, billing status, invoices, payment processor customer identifiers, and related account records. Full payment-card details are handled by Stripe and are not stored on our servers.

1.2 Information Collected Automatically

When you use the Service, we may collect:

• Device and log data: IP address, browser type, operating system, referring URL, pages or routes visited, access times, server logs, error logs, and security events.
• Performance data: first-party web-vitals metrics such as page path, metric name, value, rating, and navigation type. These metrics are sent to our own endpoint for operational monitoring.
• Rate-limit and abuse-prevention data: request metadata, including hashed IP-derived keys, used to protect authentication, AI, email, waitlist, and other endpoints from abuse.
• Cookies and local storage: authentication/session cookies from Supabase, theme preference, and cookie notice acknowledgement. We do not use advertising cookies or cross-site tracking pixels.

1.3 Information from Third Parties

We may receive information from third-party services that support the Service:

• Supabase for authentication, database, storage, and session services.
• Google Gemini for AI image generation, image analysis, and text generation.
• Stripe for payment processing, subscription status, invoices, and billing portal actions.
• Resend for email delivery and delivery-status information.
• Hosting, logging, security, and infrastructure providers used to run the Service.

2. How We Use Information

We use information to:

• Provide, maintain, secure, and improve the Service.
• Operate the waitlist, deliver the free guide, and send launch-related updates.
• Create, store, generate, and share project previews, proposals, and related materials at your direction.
• Process AI requests and return generated previews, summaries, suggestions, and sales-pitch content.
• Authenticate users, manage accounts, enforce plan limits, and provide customer support.
• Process billing, subscriptions, invoices, refunds, failed-payment notices, and account changes.
• Detect, investigate, and prevent spam, fraud, abuse, security incidents, and unauthorized access.
• Send transactional emails and, where permitted, product, launch, and marketing communications.
• Comply with legal obligations and enforce our Terms of Service.

3. AI Processing

Some features send project photos, reference images, prompts, project descriptions, client feedback, and related inputs to AI service providers so they can generate or analyze content for you. AI-generated previews and text are probabilistic and may contain errors, artifacts, or unrealistic details. Do not upload content unless you have the rights and permissions needed to process it through the Service.

We do not use AI outputs to make eligibility, credit, employment, housing, insurance, or other legally significant decisions about individuals.

4. How We Share Information

We do not sell personal information. We may share information as follows:

4.1 At Your Direction

When you use a share link, client portal, email feature, or proposal review flow, we share the project and proposal information you choose to make available to the intended recipient. Anyone with access to an active share link may be able to view the associated content.

4.2 Service Providers

We share information with vendors that process information for us, including infrastructure, hosting, database, storage, authentication, AI, payment, email delivery, logging, and security providers. These providers may process information only as needed to provide their services to us.

4.3 Legal, Safety, and Business Purposes

We may disclose information if we believe it is reasonably necessary to comply with law, respond to lawful requests, protect rights and safety, investigate abuse, enforce our terms, or complete a merger, acquisition, financing, reorganization, or sale of assets.

5. Contractor and Client Data

Contractors control the project and client information they upload, enter, or share through the Service. If you use the Service to process information about clients, homeowners, employees, subcontractors, or other third parties, you are responsible for providing any required notices, obtaining any required consents, and ensuring you have a lawful basis to upload and share that information through the Service.

If your business needs a data processing agreement or similar privacy addendum, contact us before using the Service for regulated or sensitive personal information.

6. Cookies and Tracking

We use cookies and local storage for authentication, security, preferences, and essential Service functionality. We do not use advertising cookies, social-media pixels, or third-party cross-site behavioral tracking on the launch site. You can control cookies through your browser settings, but disabling essential cookies may prevent parts of the Service from working.

7. Marketing Communications

If you join the waitlist or request updates, we may email you the free guide, launch announcements, onboarding information, and occasional product updates. You can opt out by following the instructions in our emails or contacting us at privacy@myprojectpreview.com. We may still send transactional or service-related messages, such as account, billing, security, or proposal notifications.

8. Data Retention

We keep personal information for as long as needed to provide the Service, operate the waitlist, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and keep appropriate business records. Project and account information is generally retained while an account is active. Waitlist information is retained until launch-related follow-up is complete or you ask us to remove it. Some information may remain in backups, logs, invoices, or security records until those systems expire or are overwritten in the ordinary course.

9. Security

We use reasonable technical and organizational safeguards designed to protect personal information, including HTTPS/TLS in transit, access controls, role-based database protections, server-side secret handling, rate limiting, and secure third-party infrastructure. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

10. International Transfers

We and our service providers may process information in the United States and other countries where our providers operate. If privacy law requires a transfer mechanism for your jurisdiction, we rely on appropriate safeguards such as contractual commitments or other lawful transfer mechanisms.

11. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict certain personal information; object to certain processing; withdraw consent where processing is based on consent; opt out of marketing; and appeal a decision about a privacy request.

California and other U.S. state residents may also have rights to know the categories of personal information we collect, the sources and purposes of collection, the categories of recipients, and whether we sell or share personal information for cross-context behavioral advertising. We do not sell personal information or share it for cross-context behavioral advertising.

To exercise privacy rights, contact privacy@myprojectpreview.com. We may need to verify your request before acting on it. We will not discriminate against you for exercising privacy rights.

12. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us and we will take appropriate steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update this page and may provide additional notice where required by law.

14. Contact Us

Questions or privacy requests can be sent to privacy@myprojectpreview.com.