1. Controller
The controller is Livi Studio. Privacy requests can be sent to Contact details are supplied by the operator of this deployment..
2. Data we process
- Account data such as email address, profile name, language, timezone, and avatar.
- Room photos, project settings, prompts, generated images, and published inspirations.
- Billing identifiers, credit transactions, purchase status, and invoice references.
- Technical and security data such as request identifiers, timestamps, errors, and rate-limit counters.
- Support messages and any information you choose to include in them.
3. Purposes and legal bases
We process account, project, generation, and billing data to provide the service and fulfil our contract with you. We process security, fraud-prevention, reliability, and limited diagnostic data based on our legitimate interests in operating a safe service. Where law requires consent, we request it separately and you may withdraw it prospectively.
4. Service providers and AI processing
The service uses Supabase for authentication, database, storage, and server functions; Stripe for payments and invoices; and configured AI providers, currently OpenAI and Google, to analyze prompts and generate images. The minimum data needed for a requested operation is sent to each provider under its applicable data-processing terms. Shopping searches may use configured search providers and retailer websites.
5. Publishing and visibility
Projects and room photos are private by default. If you explicitly publish an inspiration, its selected image, title, description, tags, product references, display name, and copied avatar may become publicly accessible. Unpublish content before sharing it elsewhere if you no longer want it shown in the public gallery.
6. International transfers
Providers may process data outside your country. Where required, transfers are protected by adequacy decisions, standard contractual clauses, or another legally recognized mechanism.
7. Retention
Account and project content is retained while your account exists, or until you delete it. Operational logs and rate-limit records are kept only as long as reasonably needed for security and reliability. Content reports and moderation decisions may be retained for safety, dispute, and legal-compliance purposes; account deletion removes or anonymizes the associated reporter details and content snapshot. Billing and tax records may be retained by Stripe or the operator for statutory periods. Backups expire on the infrastructure provider's normal rotation.
8. Your choices and rights
Depending on your location, you may request access, correction, deletion, restriction, portability, or object to processing, and may complain to your data-protection authority. You can update profile data and permanently delete your account in Studio settings. Contact Contact details are supplied by the operator of this deployment. for other requests.
9. Security and children
We use access controls, private storage, transport encryption, signed upload URLs, payment processing through Stripe, and request throttling. No online service can guarantee absolute security. Livi Studio is not directed to children under 16.
10. Changes
We may update this policy when the service or legal requirements change. Material changes will be communicated in the service or by email where appropriate.