Privacy Policy
Last updated 27 October 2026. Draft prepared for launch; not yet reviewed by counsel.
This policy explains what SharperListings collects, why, who processes it, how long we keep it, and what you can do about it.
What we collect
- Account: your email address and name from your sign-in provider, and a user id.
- Photos: the photographs you upload, the versions we produce, masks you draw, and a change log for each version. Location data embedded in uploads is removed from every output.
- Listing imports: if you paste a listing URL, the public photos on that page and the URL itself.
- Payments: purchase records (pack, amount, date). Card details go directly to Stripe and never reach our servers.
- Usage: page views and a handful of product events (sign-up, batch started, edit requested, purchase) through Vercel Analytics, which does not use cookies or track you across sites.
Why we use it
To provide the Service you asked for, to charge for it, to keep it secure, to answer support requests, and to understand which features are used. We do not sell personal data and we do not show advertising.
Who processes it
| Provider | What it does | What it sees |
|---|---|---|
| Clerk | Sign-in | Email, name, sign-in events |
| Stripe | Payments | Card and billing details, purchase amounts |
| Supabase | Database and private file storage | Account records, photos, versions, change logs |
| Vercel | Web hosting and analytics | Requests to the app, anonymous usage counts |
| Modal | Image processing compute | Photos while they are being processed |
| Replicate | Hosts the image models (Google Nano Banana Pro, ByteDance Seedream, Real-ESRGAN) | The photo being enhanced or edited, at reduced resolution for edits |
| OpenAI | Image moderation | A preview of each upload, to screen for prohibited content |
No training on your photos. Each provider processes your images only to return your result. Under the terms we use with them, API inputs and outputs are not used to train their models. If we add a provider that cannot make that commitment, we will say so here before using it.
How long we keep it
- Originals and outputs: 90 days after you last opened them, then eligible for deletion.
- Account and purchase records: while your account exists, plus what tax law requires for payment records.
- Account deletion: self-serve from the account page, 7-day grace period, then permanent deletion of your data and sign-in identity within 30 days.
Your rights
You can download your originals and outputs at any time, correct your name and email through your sign-in provider, and delete your account yourself. If you are in the EU, UK or California you have additional rights to access, portability, correction and erasure; write to the address on the account page and we will respond within 30 days.
Security
Photos are stored in private buckets and served only through short-lived signed links. Access to the database is scoped to your workspace. Secrets are held by the hosting providers, not in code. We review our security practices before each major release.
Children
The Service is for adults managing rental properties and is not directed at children under 16.
Changes
If this policy changes materially we will announce it in the app before the change takes effect. The date at the top is the last revision.