Privacy Policy

Effective: July 25, 2026

This policy explains what Alpha Entropy Labs LLC collects when you use Realmatize™, and why.

What we collect

Account data — your email address (from signup or Google sign-in), a salted hash of your password (never the password itself), optional two-factor secrets, and your preferences.
Content you submit — room photos, item photos and text requests are processed to produce your design plan. They are kept in memory for the run; they are stored only if you save a plan to a project.
Saved projects — plans you save (image + shopping list) are stored until you delete them or your account, and are private to your account.
Billing — subscriptions are processed by Stripe; we store your tier, subscription status and Stripe customer id, never card numbers.
Usage & logs — credit counters, rate-limit counters, and standard server logs (IP address, user agent, timestamps) kept for security and abuse prevention and retained for up to 12 months.

How your content is processed

To generate a plan, your photo and request are sent to our AI and search processors: Google (Gemini image generation — the default engine), OpenAI (optional image engine, content moderation), Anthropic (image understanding), and DataForSEO and/or SerpApi plus retailer websites (product search). Payments are processed by Stripe; emails are delivered via Amazon Web Services, which also hosts the Service. We additionally use PostHog (product analytics — which features are used, associated with your account) and Sentry (error reporting) to operate and improve the Service. These providers process data on our behalf under their own terms. We do not sell your personal data, and we do not use your photos to train models.

Cookies

We use a first-party session cookie to keep you signed in, and PostHog sets first-party analytics cookies/local-storage identifiers so we can see how features are used. Stripe/Cloudflare set cookies where their widgets are used (checkout, bot protection), and page fonts are loaded from Google Fonts (Google receives your IP address when they load). We don't use advertising cookies.

Retention and deletion

Account data and saved projects are kept until you delete them. Deleting your account (Account → Delete account) immediately removes your projects, saved plans, sessions and billing profile from our systems; backups age out on a rolling schedule. You can also request deletion or a copy of your data at the address below.

Your rights

Depending on where you live (e.g. GDPR, CCPA), you may have rights to access, correct, export or delete your personal data, and to object to certain processing. Contact us and we'll honor applicable requests. We don't discriminate for exercising them.

Security

Traffic is encrypted in transit (TLS); passwords are salted and hashed (PBKDF2); sessions expire server-side; optional two-factor authentication is available on every account. No system is perfectly secure — report concerns to the address below.

Changes & contact

We'll post material changes here and update the date above.
Alpha Entropy Labs LLC · support@realmatize.com