Privacy Policy

Last updated: April 18, 2026

At HouseVision AI, operated by sole proprietor Jose Bravo (hereinafter, "THE COMPANY", "we", "us", "our"), we take your privacy and the security of your personal data very seriously.

This Privacy Policy describes in a transparent manner how we collect, use, store, disclose, and safeguard the personal information of our users (hereinafter, the "USER") obtained through our website housevisionai.com and the SaaS Artificial Intelligence services we offer (collectively, the "Services").


1. Data Controller

In accordance with the provisions of Regulation (EU) 2016/679 (GDPR), the Data Controller responsible for processing your personal data is:


2. Information and Consent

By accepting this Privacy Policy, the USER grants their informed, express, free, and unequivocal consent for the personal data provided through the platform to be processed securely, confidentially, and strictly for the purposes detailed herein.


3. What Personal Data Do We Collect?

We collect the following types of personal information:

  1. Account and Registration Information: Username, email address, and password (stored using irreversible cryptographic encryption). We also support secure authentication through external providers (Google Auth or Facebook Login). We do not collect or store raw passwords.
  2. Profile Information: Optional information that the user chooses to add voluntarily to their profile, such as their corporate profile photo URL and agency details.
  3. Service Usage Information: Technical specifications of properties you manage (exact location, built area, rooms, baths, and specific extras), original uploaded photos ("Uploaded Images"), AI-generated renders, voice scripts, and active video projects. (Note: You are strictly prohibited from uploading images showing faces or identifiable individuals).
  4. Billing and Payment Information (Processed by Third Parties): THE COMPANY does not collect or store full credit card or bank account details. All payment transactions and subscriptions are managed securely and in encrypted format by our certified payment gateway Stripe. We only store subscription tokens and customer IDs to verify your active plan and credit balance.
  5. Contact Information: Name, email address, and messages submitted through our support or contact forms.
  6. Navigational Data: IP address, browser type, operating system, and website telemetry collected via cookies (please refer to our Cookie Policy).

4. Purposes of Data Processing

Your personal data will be processed by THE COMPANY for the following purposes:

  • Registration & Access Management: Creating, maintaining, and verifying your active user profile securely.
  • Providing the Services: Enabling the use of our Virtual Staging editor, AI-powered Magic Script generators, cinematic video rendering, and private property database hosting.
  • Subscription & Billing Management: Processing monthly/annual payments, generating invoices, and managing credit balances.
  • Customer Support: Responding to billing inquiries, technical incidents, or commercial requests.
  • Service Communications: Sending strictly transactional emails (Magic Links, payment receipts, security alerts, or terms updates).
  • Marketing Communications: Sending newsletters, promotions, or product updates about HouseVision AI, provided the USER has granted explicit consent. Consent can be revoked at any time through your profile settings or the unsubscribe link in any email.

5. AI Model Training Disclaimer (Privacy Guarantee)

We contractually guarantee that THE COMPANY does not use, nor allows third parties to use, your original uploaded images or generated outputs to train, fine-tune, optimize, or improve any proprietary or third-party Artificial Intelligence models.

Your files and input data are processed transiently and instrumentally for the sole purpose of rendering and returning the requested design and video assets. Your business data is strictly private and does not feed public or external algorithms.


6. Legal Basis for Processing

The legal basis for processing your personal data by THE COMPANY is:

  1. Contract Performance (Art. 6.1.b of the GDPR) when you register, purchase subscriptions, and make use of the platform's tools.
  2. Consent (Art. 6.1.a of the GDPR) granted by the USER when filling out contact forms, enabling non-essential cookies, or subscribing to our marketing campaigns.
  3. Legitimate Interests (Art. 6.1.f of the GDPR) to secure the Portal, protect our infrastructure against bot attacks, prevent payment fraud, and analyze basic product performance.

7. Processors and Third-Party Disclosures (Data Processors)

We do not disclose your personal data to third parties, except under legal obligation. However, to provide our advanced technical Services, we collaborate with leading Data Processors that strictly comply with GDPR standards:

  • Google Cloud Platform & Firebase: Secure cloud infrastructure hosting our application, database (Firestore/Realtime Database), asset storage, and authentication.
  • Google AI (Vertex AI / Gemini): High-end natural language processing and cadastral analysis for our AVM price estimator and script generator.
  • OpenAI / Replicate: Neural visual generation engines used to render photorealistic virtual staging models and video tours.
  • Resend: High-speed transactional email platform used to safely deliver Magic Links, invoices, and system notifications.
  • Stripe: Global encrypted payment processor managing recurring billing, payments, and invoices securely.

All international data transfers resulting from these cloud integrations are protected under the EU-US Data Privacy Framework or standard Standard Contractual Clauses (SCCs) approved by the European Commission.


8. Data Retention and Safe Deletion

We retain your Personal Data only as long as necessary:

  • Original uploaded photos: Automatically and permanently deleted from our temporary processing servers immediately after the AI has finished generating the requested render.
  • AI-Generated Renders & Videos:
    • Free Trial Users: Conserved in your dashboard history for a maximum period of 365 days from creation, after which they are automatically deleted from our storage servers.
    • Premium Subscription Users: Retained indefinitely in your active project gallery as long as your subscription is active. The user can manually delete any render at any time.
  • User Account Information: Kept while your account remains active. After account deletion, data is blocked and held for a maximum of 3 years to address Spanish statute of limitations and liability claims.
  • Invoices and Financial Logs: Held for a minimum legal period of 7 years in compliance with Spanish tax and accounting regulations.

9. Your Privacy Rights (GDPR)

Under the GDPR, you have the right to Access, Rectification, Erasure (Right to be Forgotten), Objection, Portability, and Restriction of Processing by emailing [email protected]. To process your request, please write from the same email address associated with your user account to verify your identity securely.

You also have the right to withdraw your consent at any time, and to file a formal complaint with the Spanish Data Protection Agency (AEPD) through their website www.aepd.es.


10. Data Security

We implement industry-standard technical and organizational security measures to protect your personal data from accidental loss, alteration, unauthorized access, or disclosure. This includes encrypted SSL/TLS connections for all data transfers, strict Firebase security rules, passwordless authentication, and daily automated backups.