Legal
Privacy Policy
Last updated: July 13, 2026
Your privacy matters to us. This Privacy Policy explains what personal information we collect, how we use and share it, how we handle the photos you upload, and the rights and choices available to you.
We are based in Vancouver, British Columbia, Canada, and we handle personal information in accordance with Canadian privacy law and other applicable regulations.
1. Introduction
This Privacy Policy explains how AI Paint Visualizer (“AI Paint Visualizer,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use our websites, applications, and related services (collectively, the “Service”). It also describes the choices and rights you have regarding your information.
We are based in Vancouver, British Columbia, Canada, and we handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia’s Personal Information Protection Act (PIPA), and, where applicable, other privacy laws such as the EU and UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended (CCPA/CPRA).
By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service. This Policy is part of and should be read together with our Terms of Service.
2. Who we are and how to reach us
AI Paint Visualizer is the party responsible for your personal information (the “data controller” for GDPR purposes and the organization accountable for it under Canadian law).
For any privacy question or request, or to contact our Privacy Officer, email hello@paintvisualizer.ai. Our mailing region is Vancouver, British Columbia, Canada.
3. Information we collect
Information you provide
- Account information — such as your name, email address, and password (stored in hashed form) when you register.
- Photos and Content you upload — the interior or exterior images you submit, along with the colors and surfaces you select, and the previews (Output) generated from them. Photos may incidentally contain personal information (for example, images of your home or people) depending on what you upload.
- Payment information — when you subscribe, our third-party payment processor collects your payment details. We receive limited billing information (such as the last four digits of a card, card type, billing country, and transaction status) but do not store full card numbers.
- Communications — the content of messages you send us (for example, support requests) and your marketing preferences.
Information we collect automatically
- Usage data — actions you take in the Service, such as features used, previews generated, and pages viewed.
- Device and technical data — IP address, browser type, device type, operating system, language, referring pages, and approximate location derived from your IP address.
- Cookies and similar technologies— as described in the “Cookies” section below.
Information from third parties
We may receive information from service providers that help us operate the Service, such as payment processors (billing and fraud signals) and analytics providers (usage metrics). If you sign in through a third-party login provider, we may receive basic profile information you authorize them to share.
4. How we use your information
We use personal information to:
- provide, operate, and maintain the Service and your Account;
- process the photos you upload to generate color previews (Output);
- process payments, manage subscriptions, and send billing-related messages;
- provide customer support and respond to your requests and inquiries;
- secure the Service, prevent fraud and abuse, and enforce our Terms of Service;
- understand how the Service is used and improve its features, performance, and reliability;
- send you service announcements and, where permitted, marketing communications you can opt out of; and
- comply with legal obligations and establish, exercise, or defend legal claims.
5. How we handle your photos and AI processing
The photos you upload are processed — by us and by trusted AI infrastructure providers acting on our behalf — to detect surfaces and generate recolored previews. This processing is necessary to provide the core function you request.
- Purpose limitation. We use your uploaded photos to deliver the Service to you and, in de-identified or aggregated form, to monitor and improve quality and performance.
- No model training without consent. We do not use your uploaded photos to train generative AI models for other customers without your consent.
- Retention.We retain your photos and Output for as long as needed to provide the Service and as described in the “Data retention” section. You can delete your images from your Account, and you can contact us to request deletion.
6. Legal bases for processing (EEA/UK)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:
- Performance of a contract — to provide the Service, your Account, and the previews you request.
- Legitimate interests — to secure and improve the Service, prevent fraud, and communicate with you, provided these interests are not overridden by your rights.
- Consent — for optional cookies, certain marketing, and any processing that requires consent; you may withdraw consent at any time.
- Legal obligation — to comply with laws that apply to us.
9. Data retention
We keep personal information only as long as necessary for the purposes described in this Policy, including to provide the Service, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and the reason we hold it. When information is no longer needed, we delete, anonymize, or securely dispose of it. If you delete your Account or your uploaded images, we will delete or de-identify the associated Content within a reasonable period, except for residual copies retained in routine backups or as required by law.
10. How we protect your information
We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, or loss. These measures include encryption of data in transit, access controls, and use of reputable infrastructure providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your Account credentials confidential. If we become aware of a breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law.
11. International data transfers
We are based in Canada, and we use service providers that may store or process personal information in Canada, the United States, and other countries. As a result, your information may be transferred to, and processed in, jurisdictions with different data-protection laws than your own, and it may be accessible to courts, law enforcement, and authorities in those jurisdictions in accordance with their laws. Where required, we put appropriate safeguards in place for international transfers, such as standard contractual clauses, and we take reasonable steps to ensure your information receives a comparable level of protection.
12. Your privacy rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you.
- Correction — ask us to correct inaccurate or incomplete information.
- Deletion — ask us to delete your personal information, subject to legal exceptions.
- Portability — request a copy of certain information in a portable format.
- Restriction and objection — ask us to limit or object to certain processing.
- Withdraw consent — withdraw consent where we rely on it, without affecting prior processing.
- Non-discrimination — where applicable, you will not receive discriminatory treatment for exercising your rights.
To exercise your rights, email us at hello@paintvisualizer.ai. We may need to verify your identity before responding, and we will respond within the timeframes required by applicable law. You may authorize an agent to make a request on your behalf where the law permits.
13. Children’s privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us at hello@paintvisualizer.ai and we will take appropriate steps to delete it. Where a higher age of consent applies in your jurisdiction, we comply with that requirement.
14. Third-party links and services
The Service may contain links to third-party websites and services that we do not operate or control. This Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use.
15. Marketing communications
With your consent where required, we may send you marketing emails about features, tips, and offers. You can opt out at any time by using the unsubscribe link in our emails or by contacting us at hello@paintvisualizer.ai. We will still send you non-promotional service messages, such as billing and security notices.
16. Changes to this Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service and update the “Last updated” date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
17. Contact and complaints
If you have questions, concerns, or complaints about this Policy or our handling of your personal information, please contact our Privacy Officer at hello@paintvisualizer.ai. We will investigate and respond to your concern.
If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority. In Canada, you may contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia. In the EEA or UK, you may contact your local data-protection authority.