Privacy Policy

Last updated: September 17, 2026

This is a plain-language statement of how we handle your data. InstantStaged is operated by Powered By Piland LLC, a North Carolina limited liability company. The service is offered to businesses in the United States and your data is processed in the United States.

What we collect

When you use InstantStaged, we collect:

Your email address and first name
Your uploaded listing photos and the AI-generated staged outputs
Records of your purchases and credit usage
Basic usage records such as when you signed in and which features you used, and standard server logs including your IP address

We do not collect payment card numbers; those go directly to our payment processor. We do not sell personal information, and we do not share it with advertisers.

How we use your data

We use the data you provide to:

Provide and maintain the virtual staging service
Process your payments and manage your account and credits
Send you transactional emails such as sign-in links, purchase confirmations, and credit expiry notices
Prevent abuse and keep the service secure
Understand how the service is being used so we can improve it

Cookies

We use a small number of cookies that keep you signed in and keep the service working. We do not use advertising or cross-site tracking cookies. If we add a product analytics tool in the future, we will update this section before it goes live.

How we store and protect your images

Your photos and generated images are stored in private cloud storage. Access is limited to you through your account, to our operators for support, security, and abuse prevention, and to the service providers listed below that process them on our behalf. When you view or download a photo, we provide it through a short-lived signed link that expires within an hour. If you share a listing through the unlisted gallery link, anyone who has that link can view those before-and-after images until you stop sharing.

Who processes your data for us

We rely on a small number of service providers, each of which processes data only to provide its service to us:

Supabase, which hosts our database, authentication, and image storage
Google, whose Gemini image model generates the staged versions of your photos. We use the paid Gemini API, and Google states that it does not use content from paid API requests to train its models
Stripe, which processes payments. We never store or see your card numbers
Loops, which sends our transactional emails
Vercel, which hosts the application and keeps standard server logs

We may also disclose data if required by law, to enforce our terms, or to protect the rights and safety of our customers and the public.

Transactional emails

Sign-in links, receipts, credit expiry notices, and other transactional emails are sent through a third-party email service. These emails contain only information related to your account and purchases. We do not send marketing email unless you have separately opted in, and any marketing email includes an unsubscribe link.

How long we keep your data

We keep your data for as long as your account is active. Specifically:

Your purchased photos and original uploads are kept while your account is open
Version trails are kept for 30 days after a photo's last run
Unpurchased preview content is deleted after 60 days
Accounts inactive for 24 months may be closed after we send you email notice
Purchase and credit records are kept for seven years for financial record-keeping

Your rights and choices

You can see your credits and purchases on your account page and delete your account there at any time. When you delete your account, your listings, photos, and profile are removed from our systems. Your purchase and credit records are kept for financial record-keeping, with your identity removed from them. You can also email support@instantstaged.com to ask for a copy of the personal information we hold about you, to correct it, or to have it deleted, and we will respond within 30 days. We will not treat you differently for exercising these rights.

Security incidents

We protect your data with access controls, encryption in transit, and private storage. No system is perfectly secure. If a security incident affects your personal information, we will notify you by email as required by law.

Children

The service is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.

Changes to this policy

We may update this policy. The date at the top shows when it last changed. If a change materially affects how we use your data, we will email the address on your account before it takes effect.