Privacy Policy

How we handle your data

Last updated: July 2026

The short version

You upload a photo. We use it to generate a redesigned version of your space. The photo is processed by AI models and then discarded — we never store it. The generated render is kept for 7 days, then deleted automatically.

Signing in is optional. If you don't sign in and don't make a purchase, we hold no personal information about you at all. If you sign in or buy renders, this policy explains exactly what we collect and why.

Who we are

viznr is operated by RSR Ventures Limited, a company based in British Columbia, Canada — for the purposes of this policy and applicable privacy law, RSR Ventures Limited is the data controller responsible for the processing described below.

What we process

Your room photo
Sent in memory to our servers and forwarded to third-party AI providers (see below) to generate a redesigned image. It is never written to disk or stored in any database by viznr. Once the request completes, it is gone.
Questionnaire answers
Style preferences, room type, and any free-text notes you type are sent alongside the photo to help the AI understand your intent. These travel in the same request and are discarded the same way.
Generated renders
Each AI-generated image is stored on Vercel Blob under a random, unguessable URL (a UUID). These are deleted automatically after 7 days. You can download renders at any time before then using the Download button.
Account data (if you sign in)
Signing in is optional and never required to use the free tier. If you do, authentication is handled entirely by Clerk, our identity provider. Depending on how you sign in, Clerk collects and stores your email address, and — if you use Google sign-in — your name and profile picture as provided by Google. viznr itself does not currently store any additional account data beyond what Clerk manages; today, signing in does not change your daily free-tier limit (a server-side, per-account limit for signed-in users is in development but not yet active).
Purchase data
Credit-pack purchases are handled entirely by Stripe via Stripe Checkout. We never see or store your card number — Stripe collects and processes it directly. Stripe shares your checkout email address with us so we can send your restore code (see below) and so Stripe can email you a receipt. We store a purchase's Stripe checkout session ID and remaining credit balance (via Upstash Redis, see below) — not your name, email, or card details.
Restore code
After a purchase, we generate a signed "restore code" that lets you recover your credit balance on a new device or after clearing cookies. It's emailed to your checkout email via Resend and stored in your browser as a cookie for about 400 days. Anyone with the code can redeem your remaining credits, so treat it like a password.
Usage quota cookie
A small signed cookie tracks how many free renders you've generated today (to enforce the free-tier daily limit). It contains no personal information — only a date and a count. It expires within 48 hours.
Server logs and rate limiting
Standard Vercel platform logs record request metadata (IP address, timestamp, HTTP status) for up to 30 days as part of normal infrastructure operation. We also use Upstash Redis to rate-limit requests by IP address, to prevent abuse of the free tier and the API.

Why we process this data (legal basis)

For users in the UK, EU, or other jurisdictions with similar legal-basis requirements, we rely on:

  • Contractual necessity — processing your photo, answers, and payment is required to deliver the render or purchase you asked for.
  • Consent — you consent to your photo being sent to third-party AI providers by uploading it and starting a render.
  • Legitimate interest — rate limiting, fraud prevention, and server logging, to keep the service available and secure.

Third parties we share data with

To operate viznr, your data passes through the following processors. Each has its own privacy practices — we encourage you to review them.

We do not sell your data, and we do not share it with advertisers.

International data transfers

viznr is operated from Canada, and the processors listed above are based primarily in the United States. If you are located in the UK, EEA, or Switzerland, using viznr means your data is transferred outside those regions. We rely on the safeguards each processor has in place for international transfers (such as Standard Contractual Clauses) as described in their own privacy policies linked above.

Photos of people

Our moderation system blocks photos that contain clearly visible or identifiable people. This is a technical limit, not a guarantee. Do not upload photos where people feature as the main subject, and avoid photos where identifiable faces appear even incidentally.

Room photos may incidentally reveal personal information about a home (art, books, belongings). By uploading, you confirm you have the right to share the photo and accept that it will be processed as described above.

Data retention

  • Your uploaded photo: not retained — discarded after each request.
  • Your questionnaire answers: not retained — discarded after each request.
  • Generated renders: 7 days, then automatically deleted.
  • Usage quota cookie: up to 48 hours.
  • Restore-code cookie and credit balance: stored for up to 12 months, matching the credit expiry window described in our Refund Policy.
  • Account data (if signed in): retained by Clerk for as long as your account exists; deleting your account removes it.
  • Server logs: up to 30 days (Vercel platform default).

Your rights

Wherever you are, you can ask us to delete a generated render before its 7-day expiry, or ask what data (if any) we hold about you, by emailing support@rsrventures.ca.

If you are in the UK or EEA, you additionally have the right to access, correct, delete, restrict, or port your personal data, to object to our processing, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection supervisory authority (in the UK, the Information Commissioner's Office).

If you are in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) applies to how we handle your data, and you may complain to the Office of the Privacy Commissioner of Canada if you believe we haven't met our obligations.

Note on international representatives: RSR Ventures Limited has not appointed a formal EU or UK representative under Article 27 of the GDPR/UK GDPR. Contact us directly at the email above for any privacy request or concern.

Cookies and tracking

We use a small number of functional cookies: the usage-quota cookie and restore-code/credit cookie described above, and — if you sign in — a session cookie set by Clerk to keep you signed in. We do not use advertising cookies, tracking pixels, analytics SDKs, or third-party scripts of any kind. No data is shared with advertisers.

Children's privacy

viznr is not directed at, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

Material changes will be reflected in a new "Last updated" date at the top of this page. Continued use of the app after a change constitutes acceptance of the updated policy.

Contact

Questions about privacy? support@rsrventures.ca