Privacy Policy

1. Information We Collect

• Account Information: Name, email address, and password when you register.
• User Content: Room photographs and design preferences you upload.
• Usage Data: Pages visited, features used, clicks, and session duration.
• Device Data: Browser type, operating system, IP address, and device identifiers.
• Payment Data: Processed securely by Stripe; we do not store full card details.
• Communications: Messages you send us via support or email.

2. How We Use Your Information

• To provide, operate, and improve the Service.
• To generate AI design recommendations personalized to your uploads and preferences.
• To process payments and manage subscriptions.
• To send transactional emails and, with your consent, marketing communications.
• To comply with legal obligations.
• To detect and prevent fraud or abuse.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we process personal data on the following legal bases:

• Contract: Processing necessary to provide the Service you signed up for.
• Legitimate Interests: Service improvement, security, and fraud prevention.
• Consent: Marketing emails and non-essential cookies (where applicable).
• Legal Obligation: Compliance with applicable laws.

4. Your Rights (GDPR)

If you are located in the EEA or UK, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate personal data.
• Erasure ("Right to be Forgotten"): Request deletion of your personal data.
• Restriction: Request that we limit how we process your data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or direct marketing.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us. We will respond within 30 days.

5. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of the personal information we collect, use, or disclose.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information to third parties.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

6. Cookies & Tracking

We use cookies and similar technologies to operate the Service, remember your preferences, and analyze usage. You can control cookies through your browser settings. We do not use third-party advertising cookies without your consent.

7. Data Sharing & Third Parties

We do not sell your personal data. We share data only with:

• Service Providers: Cloud hosting, AI processing, payment processing (Stripe), and email services — under strict data processing agreements.
• Professional Designers: Only information you choose to share when initiating a collaboration.
• Legal Authorities: When required by law, court order, or to protect rights and safety.

8. International Data Transfers

Herv AI is based in the United States. If you access the Service from the EEA or UK, your data may be transferred to and processed in the US. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission for such transfers.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and data at any time via Account Settings. Certain data may be retained for up to 7 years where required by law.

10. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, and access controls. No method of transmission over the Internet is 100% secure, but we commit to promptly notifying affected users of any confirmed data breach as required by law.

11. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal data, please contact us and we will delete it promptly.

12. Contact Us

For any privacy-related questions or to exercise your data rights, reach out to us: