HouseVision AIHouseVision AI

Privacy Policy

Last updated: October 7, 2026

At HouseVision AI, operated by sole proprietor Jose Bravo (hereinafter, "THE COMPANY", "we", "us", "our"), we take your privacy and the security of your personal data very seriously.

This Privacy Policy describes in a transparent manner how we collect, use, store, disclose, and safeguard the personal information of our users (hereinafter, the "USER") obtained through our website housevisionai.com and the SaaS Artificial Intelligence services we offer (collectively, the "Services").

1. Data Controller

In accordance with the provisions of Regulation (EU) 2016/679 (GDPR), the Data Controller responsible for processing your personal data is:

2. Information and Consent

By accepting this Privacy Policy, the USER grants their informed, express, free, and unequivocal consent for the personal data provided through the platform to be processed securely, confidentially, and strictly for the purposes detailed herein.

3. What Personal Data Do We Collect?

We collect the following types of personal information:

  1. Account and Registration Information: Username, email address, and password (stored using irreversible cryptographic encryption). We also support secure authentication through external providers (Google Auth or Facebook Login). We do not collect or store raw passwords.
  2. Profile Information: Optional information that the user chooses to add voluntarily to their profile, such as their corporate profile photo URL and agency details.
  3. Service Usage Information: Technical specifications of properties you manage (exact location, built area, rooms, baths, and specific extras), original uploaded photos ("Uploaded Images"), AI-generated renders, voice scripts, and active video projects. (Note: You are strictly prohibited from uploading images showing faces or identifiable individuals).
  4. Billing and Payment Information (Processed by Third Parties): THE COMPANY does not collect or store full credit card or bank account details. All payment transactions and subscriptions are managed securely and in encrypted format by our certified payment gateway Stripe. We only store subscription tokens and customer IDs to verify your active plan and credit balance.
  5. Contact Information: Name, email address, and messages submitted through our support or contact forms.
  6. Navigational Data: IP address, browser type, operating system, and website telemetry collected via cookies (please refer to our Cookie Policy).

4. Purposes of Data Processing

Your personal data will be processed by THE COMPANY for the following purposes:

  • Registration & Access Management: Creating, maintaining, and verifying your active user profile securely.
  • Providing the Services: Enabling the use of our Virtual Staging editor, AI-powered Magic Script generators, cinematic video rendering, and private property database hosting.
  • Subscription & Billing Management: Processing monthly/annual payments, generating invoices, and managing credit balances.
  • Customer Support: Responding to billing inquiries, technical incidents, or commercial requests.
  • Service Usage Analysis: Internally analyzing account activity (tools used, credit consumption, access dates and subscription status) to improve the platform, detect incidents and provide proactive support. This analysis is carried out only by authorized staff of THE COMPANY, does not include the content of images or generated texts, and is not used to make automated decisions with legal effects on the USER.
  • Service Communications: Sending strictly transactional emails (Magic Links, payment receipts, security alerts, or terms updates).
  • Marketing Communications: Sending newsletters, promotions, or product updates about HouseVision AI, provided the USER has granted explicit consent. Consent can be revoked at any time through your profile settings or the unsubscribe link in any email.

5. AI Model Training Disclaimer (Privacy Guarantee)

We contractually guarantee that THE COMPANY does not use, nor allows third parties to use, your original uploaded images or generated outputs to train, fine-tune, optimize, or improve any proprietary or third-party Artificial Intelligence models.

Your files and input data are processed transiently and instrumentally for the sole purpose of rendering and returning the requested design and video assets. Your business data is strictly private and does not feed public or external algorithms.

6. Legal Basis for Processing

The legal basis for processing your personal data by THE COMPANY is:

  1. Contract Performance (Art. 6.1.b of the GDPR) when you register, purchase subscriptions, and make use of the platform's tools.
  2. Consent (Art. 6.1.a of the GDPR) granted by the USER when filling out contact forms, enabling non-essential cookies, or subscribing to our marketing campaigns.
  3. Legitimate Interests (Art. 6.1.f of the GDPR) to secure the Portal, protect our infrastructure against bot attacks, prevent payment fraud, analyze basic product performance, and analyze how registered accounts use the service in order to improve it and provide proactive support. The USER may object to this last processing by writing to [email protected].

7. Processors and Third-Party Disclosures (Data Processors)

We do not disclose your personal data to third parties, except under legal obligation. However, to provide our advanced technical Services, we collaborate with leading Data Processors that strictly comply with GDPR standards:

  • Google Cloud Platform & Firebase (Google): Application hosting, user authentication, database (Firestore), storage of images, documents and videos (Cloud Storage) and the video rendering service (Cloud Run, Madrid region).
  • Google Gemini API (Google): Artificial Intelligence models that generate texts (listings, dossiers and video scripts), analyze property photos and perform most Virtual Staging edits.
  • fal.ai (Features & Labels, Inc., USA): AI model execution platform through which some Virtual Staging edits are processed with OpenAI image generation models. The affected images are sent to fal.ai and, through it, to OpenAI, solely to generate the requested result.
  • Render (Render Services, Inc., USA): Hosting of our internal automated valuation (AVM) and property-portal listing import services.
  • Stripe: Payment processor managing subscriptions, recurring billing and invoicing information.
  • Resend: Delivery of transactional emails (account verification, password reset, email change) and contact form messages.
  • Upstash: Temporary storage of IP addresses to limit the use of free tools and prevent abuse.
  • Google Analytics (Google): Website audience measurement, only if the USER consents in the cookie banner (see the Cookie Policy).
  • OpenStreetMap Foundation: Property location maps are loaded from OpenStreetMap servers, which means the USER's browser shares its IP address with them.

All international data transfers resulting from these cloud integrations are protected under the EU-US Data Privacy Framework or standard Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Data Retention and Safe Deletion

We retain your Personal Data only as long as necessary:

  • Properties, photos and generated content (uploaded photos, AI-edited images, texts, dossiers and videos): kept in the USER's account, regardless of the plan, while the account is active, so the USER can keep using them. The USER can delete their properties and associated content at any time from the platform.
  • Processing by AI providers: images and texts sent to the Artificial Intelligence providers (section 7) are used solely to generate the requested result, under their paid service terms, and are not used to train their models.
  • Account data, credit history and usage records: kept while the account is active.
  • Account deletion: when the USER deletes their account from the platform, their properties, photos, generated content, credit history and usage records are deleted immediately. Only the data required by tax and commercial law (billing records) or necessary to handle an ongoing claim will be kept, duly blocked, for the applicable limitation periods.
  • IP addresses used for rate limiting of free tools: kept temporarily, only for the duration of the limit window (hours).
  • Billing data: invoices and payment data (managed by Stripe) are kept for the periods required by Spanish commercial and tax law (generally, six years).

9. Your Privacy Rights (GDPR)

Under the GDPR, you have the right to Access, Rectification, Erasure (Right to be Forgotten), Objection, Portability, and Restriction of Processing by emailing [email protected]. To process your request, please write from the same email address associated with your user account to verify your identity securely.

You also have the right to withdraw your consent at any time, and to file a formal complaint with the Spanish Data Protection Agency (AEPD) through their website www.aepd.es.

10. Data Security

We implement industry-standard technical and organizational security measures to protect your personal data from accidental loss, alteration, unauthorized access, or disclosure. This includes encrypted SSL/TLS connections for all data transfers, strict Firebase security rules, passwordless authentication, and daily automated backups.