Privacy Policy

Last updated: January 27, 2026

1. Data Controller

The data controller for your personal information is Altara. For privacy concerns, you can contact our Data Protection Officer at privacy@altara.studio.

2. Information We Collect

We collect the minimum amount of data necessary to provide our services:

• Identity Data: Name and email address (provided via Google/OIDC authentication).
• Visual Data: Photographs of rooms ("Anchor Images") you upload for renovation.
• Usage Data: Information about how you interact with our tools, including generated styles and error logs.
• Payment Data: We do not store credit card details. Payment processing is handled by our secure third-party provider (Stripe).

3. How We Use Your Data

We process your data for the following legal bases:

• Contractual Necessity: To generate the renovation images you request and manage your project portfolio.
• Legitimate Interest: To improve our AI models, detect abuse, and ensure the security of our platform.
• Consent: For marketing communications (which you can opt-out of at any time).

4. AI & Data Processing

Image Processing: Your uploaded images are processed by our secure AI infrastructure hosted on Google Cloud Platform (Europe/US regions). We use this data solely to generate your requested output. We do not sell your private photos to third-party data brokers.

5. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct inaccurate data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your account and all associated data (images, projects).
• Right to Portability: Receive your data in a structured, commonly used format.

To exercise these rights, please contact support@altara.studio or use the "Delete Account" feature in your profile settings.

6. Data Security

We employ a "Zero-Trust" security architecture. Your data is encrypted both in transit and at rest. Access to backend services is strictly controlled via cryptographic tokens, ensuring that your content is only accessible to you and the processes you initiate.

7. Cookies

We use essential cookies to maintain your login session and preferences. We may use analytical cookies (with your consent) to understand how our website is used.

8. Third-Party Subprocessors

We utilize the following trusted subprocessors:

• Google Cloud Platform: Cloud hosting and AI computation.
• Stripe: Payment processing.
• Sentry: Error tracking and debugging.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our platform.