Privacy Policy
Last updated 26 September 2026
This policy explains what information Moonsill collects when you use our website and app, why we use it, who we share it with, and the choices and rights you have. In short: we use your photos to create your designs, we never sell your data, and you can delete everything at any time.
Who we are
Moonsill is run by [Your full legal name or company name], [Postal address for legal notices] (“we”, “us”). We are the controller of your personal data. For anything about privacy, email privacy@moonsill.com.
What we collect
| Information | Why we use it | Legal basis |
|---|---|---|
| Photos you upload and the designs we create from them | To redesign your room and show you the result | Performing our contract with you |
| Your style and room choices | To create the design you asked for | Performing our contract with you |
| Account details: email address, and your name if you sign in with Apple or Google | To create and secure your account and keep your designs and credits | Performing our contract with you |
| Credits and purchase history (plan, amount, date). Card details go straight to Stripe or Apple; we never see them | To give you what you paid for, handle refunds and keep tax records | Contract and legal obligation |
| IP address and basic technical data (browser, device type, error logs) | To keep the service secure, stop abuse and limit free use fairly | Our legitimate interest in running a safe, fair service |
| Anonymous usage statistics (pages visited, country, device type) | To understand what works and improve the product | Your consent, which you can withdraw at any time |
| Messages you send us | To answer you | Our legitimate interest in providing support |
Please upload photos of rooms only. Avoid photos that show people, documents or anything private. If one slips in, you can delete it at any time.
What we don’t do
- We don’t sell or rent your personal data, and we don’t share it for advertising.
- We don’t use your photos to train AI models, and we don’t let our providers do so.
- We don’t show your photos or designs to anyone else, or use them in our marketing, without asking you first.
- We don’t make decisions about you that have legal or similarly significant effects based solely on automated processing.
Who we share it with
We use trusted providers to run Moonsill. They may only use your data to provide their service to us, under contracts that protect it.
| Provider | What they do for us |
|---|---|
| Vercel | Hosts the website and app, and provides privacy-friendly usage statistics |
| Bytescale | Receives and stores the photos you upload |
| Replicate | Runs the AI model that creates your design |
| Supabase | Stores accounts, credits, and your saved photos and designs |
| Upstash | Counts requests per IP address to limit abuse |
| Stripe | Takes card payments on the website |
| Apple and Google | Sign-in, if you choose it; Apple also handles purchases in the iPhone app |
We may also disclose information if the law requires it, to protect people’s safety, or as part of a sale or merger of our business (in which case this policy continues to apply).
International transfers
Some providers process data outside your country, including in the United States. Where data leaves the European Economic Area or the UK, we rely on the European Commission’s adequacy decisions (such as the EU-US Data Privacy Framework) or Standard Contractual Clauses to protect it.
How long we keep it
- Uploaded photos at our upload provider: deleted within 30 days.
- Your account, and the copies of your photos and designs saved to it: kept until you delete them or your account. Deleted items are removed from our systems and backups within 30 days.
- Purchase records: kept for as long as tax and accounting law requires, usually up to 10 years.
- Security logs: kept for up to 90 days.
Your rights
Depending on where you live, you have the right to:
- get a copy of your personal data, including in a portable format;
- correct data that is wrong;
- delete your data (you can delete your account yourself from your account page);
- object to or restrict how we use it;
- withdraw consent at any time, for example through cookie settings;
- complain to your local data protection authority.
To use any of these rights, email privacy@moonsill.com. We reply within one month and may need to confirm it’s really you.
California residents
You have the right to know, delete and correct your personal information, and to not be discriminated against for using these rights. We do not sell or share personal information as those terms are defined in the CCPA, and we do not use sensitive personal information to infer characteristics about you.
Cookies
We use only the cookies needed to run the service, plus anonymous statistics if you agree. See our Cookie Policy.
Security
We encrypt data in transit, limit who can access it, and use providers with strong security practices. No system is perfectly secure, so if we ever have a breach that puts you at risk, we will tell you and the authorities as the law requires.
Children
Moonsill is not meant for anyone under 16. We do not knowingly collect data from children. If you believe a child has used Moonsill, contact us and we will delete their data.
Changes
If we change this policy, we will update the date at the top. For important changes, we will tell you by email or in the app before they take effect.
Contact
[Your full legal name or company name], [Postal address for legal notices].
Email: privacy@moonsill.com