Privacy Policy

This policy explains how Moiety AB (trading as homestage.io) processes personal data when you use homestage.io. Moiety AB is the data controller for this processing.

1. Data we collect and why

• Account data (email, name, Google sign-in profile, password hash) — to create and run your account. Legal basis: contract.
• Project content (floor plans, uploaded images, furniture, product links you submit) — to provide the Service, including AI analysis. Legal basis: contract.
• Credit and plan data (credit balance, usage history, subscription status) — to enforce plans and limits. Legal basis: contract.
• Technical and usage data (IP address, device and browser information, logs) — for security, fraud and abuse prevention, and to improve the Service. Legal basis: legitimate interests.
• Support messages — to answer your questions. Legal basis: contract or legitimate interests.
• Where we must keep records (e.g. accounting) the legal basis is legal obligation. Where we ask for consent, you can withdraw it at any time.

2. Who we share data with

• Service providers acting on our behalf: hosting and database, AI model providers that analyse floor plan images and product pages, and a web-scraping service that fetches product pages you link.
• Paddle, our Merchant of Record, for the sale of our products, subscription management, payments, tax compliance and invoicing. Paddle processes payment data under its own privacy policy.
• Professional advisers (legal, accounting) where needed.
• Authorities when required by law.

We do not sell your personal data.

3. International transfers

Some providers process data outside the EU/EEA, for example in the United States. In those cases we rely on adequacy decisions (such as the EU–US Data Privacy Framework) or the EU Standard Contractual Clauses.

4. Retention

• Guest projects and guest sessions are deleted after 7 days.
• Account data and projects are kept while your account is active and deleted when you delete your account.
• Logs are kept for a limited period for security purposes. Accounting records are kept as required by Swedish law.

When data is no longer needed it is deleted or anonymised.

5. Your rights

Under the GDPR you have the right to access, rectify and erase your data, restrict or object to processing, data portability, and to withdraw consent. Contact support@homestage.io; we respond within one month. You may also complain to the Swedish Authority for Privacy Protection (IMY), imy.se, or your local supervisory authority.

6. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and per-user data isolation.

7. Cookies

We use only essential cookies and local storage needed to run the Service — for example to keep you signed in, remember site access and store interface preferences. We do not use advertising or third-party analytics cookies. You can clear them in your browser settings, but parts of the Service may stop working.

8. Contact

Moiety AB (org. no. 559073-3746, VAT SE559073374601)
Björkgatan 15, 973 31 Luleå, Sweden
support@homestage.io