StudioReno Privacy Policy

This Privacy Policy explains how StudioReno ("StudioReno", "we", "us" or "our") collects, uses, discloses and protects your personal information when you use the StudioReno website and application at https://studioreno.io and any related services (the "Service").

We are based in Australia and are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs").

By using the Service, you agree to the collection and use of your information in accordance with this Privacy Policy.

1. Who we are

The Service is operated by StudioReno. If you have any questions, requests or complaints about your privacy, you can contact us at support@studioreno.io.

2. What personal information we collect

We only collect personal information that is reasonably necessary for us to provide and improve the Service. The information we collect includes:

Information you give us when you create an account or use the Service

• your full name;
• your email address;
• your country;
• who you are / your role (for example, whether you are a renovator, home owner, designer, tradesperson or other type of user); and
• any other information you choose to add to your profile, projects, collections, boards or renders.

Content you create or upload

• images, product links, room photos, moodboards, boards, collections and renders you create or upload;
• notes, titles, tags, favourites and status labels you apply to items; and
• where you choose to make a room or render public, the information contained in that published page.

Payment information

• We use Stripe to process payments. When you make a payment or start a subscription, your card and billing details are collected and processed directly by Stripe. We do not store your full card number or security code on our systems. We may receive limited information from Stripe such as your billing name, the country/postcode associated with the card, the last four digits of the card, the card type, and the status of a transaction. Stripe handles your payment data in accordance with its own privacy policy and the PCI-DSS security standards.

Information we collect automatically

• technical and usage information such as your device type, browser, IP address, pages viewed, referring pages, approximate location (derived from IP), and interactions with the Service;
• cookies and similar technologies (see the "Cookies" section below).

Information from third parties

• if you sign in or authenticate through a third-party service, we may receive basic account information (such as your name and email) from that provider; and
• information from analytics and infrastructure providers that help us run the Service.

We generally do not seek to collect sensitive information (such as health information, or information about your race, religion or political views). Please do not submit sensitive information through the Service unless it is necessary, and only where you consent to us handling it for the relevant purpose.

3. How we collect your personal information

We collect personal information:

• directly from you — when you register, set up a profile, create content, contact us, or make a payment;
• automatically — through cookies, analytics and server logs as you use the Service; and
• from third parties — such as our authentication, payment, hosting and analytics providers, where you have interacted with them in connection with the Service.

If it is reasonable and practicable to do so, we will collect your personal information directly from you.

4. Why we collect, hold, use and disclose your personal information

We use your personal information for the following purposes:

• to create and manage your account and verify your identity;
• to provide the Service — including saving your projects, collections, boards and renders, and personalising your experience based on your role and country;
• to process payments and subscriptions through Stripe, and to manage billing, receipts, refunds and chargebacks;
• to operate public/shoppable room pages where you have chosen to publish a render or room;
• to communicate with you — including service messages, account notifications, responses to your enquiries, and (where permitted) product updates and marketing;
• to improve, secure and troubleshoot the Service, including analytics, debugging and preventing fraud or misuse; and
• to comply with our legal obligations and enforce our Terms of Use.

We will only use or disclose your personal information for the purpose for which it was collected, a directly related purpose you would reasonably expect, or another purpose you have consented to or that is otherwise permitted by law.

Direct marketing

Where we send you marketing communications, we will always give you a simple way to opt out (for example, an unsubscribe link). If you ask us to stop sending marketing communications, we will do so.

5. Automated decision-making and AI features

The Service includes AI-assisted features (for example, generating room renders, extracting product information from links, classifying uploaded images, and removing image backgrounds). These features process the content and information you provide in order to produce a result you have requested.

We do not use these features to make decisions that produce legal or similarly significant effects about you without human involvement. If this changes, we will update this Privacy Policy to describe the kinds of personal information used in any automated decision-making, and the kinds of decisions made, in line with the transparency requirements that apply to APP entities from 10 December 2026.

When we use third-party AI providers to deliver these features, the content you submit for processing may be sent to those providers. We take reasonable steps to use reputable providers and to limit what is shared to what is necessary to deliver the feature you requested. See "Who we share your information with" below.

6. Who we share your information with

We do not sell your personal information. We share it only as needed to run the Service, including with:

• Payment processing — Stripe, which processes payments, subscriptions and billing on our behalf;
• Database, authentication and storage — Supabase, which stores your account data and the content you create;
• Hosting and infrastructure — our cloud hosting and content-delivery providers, which serve the website and application;
• AI/processing providers — the third-party AI services that power our render, product-extraction, image-classification and background-removal features;
• Analytics and communications providers — the services we use to understand how the Service is used and to send you account and service emails; and
• Professional advisers, law enforcement or regulators — where reasonably necessary, or where required or authorised by law.

Where you choose to make a room, render or board public, the content on that page (and any information you include in it) will be visible to anyone on the internet and may be indexed by search engines. Please only publish content you are comfortable sharing publicly.

7. Overseas disclosure

Some of our service providers (including Stripe and our hosting, storage and AI providers) may store or process personal information outside Australia, including in the United States and other countries where those providers operate. Where we disclose personal information overseas, we take reasonable steps to ensure it is handled consistently with the APPs, and we choose providers that offer appropriate data-protection commitments.

8. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, keep the Service secure, and understand how the Service is used. Some cookies are essential for the Service to work; others are optional (for example analytics cookies).

You can control or delete cookies through your browser settings, but disabling some cookies may affect how the Service works.

9. How we store and protect your information

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include using reputable infrastructure providers, access controls, encryption in transit, and limiting access to personal information to those who need it.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in serious harm, we will respond in accordance with the Notifiable Data Breaches scheme, including notifying affected individuals and the Office of the Australian Information Commissioner ("OAIC") where required.

We keep your personal information only for as long as it is needed for the purposes described in this Policy, or as required by law, after which we will take reasonable steps to delete or de-identify it.

10. Accessing and correcting your information

You have the right to request access to the personal information we hold about you, and to ask us to correct it if it is inaccurate, out of date, incomplete or misleading. You can also update much of your information directly in your account settings.

To make a request, contact us at support@studioreno.io. We will respond within a reasonable period. There is no fee to make a request, although we may charge a reasonable fee for giving access in some circumstances (we will tell you first). If we refuse access or a correction, we will explain why and how you can complain.

11. Deleting your account and data

You can ask us to delete your account and associated personal information at any time by contacting us at support@studioreno.io. Some information may be retained where we are required or permitted to keep it by law (for example, records relating to payments), or in de-identified form.

12. Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us first at support@studioreno.io and we will try to resolve it. If you are not satisfied with our response, you can complain to the OAIC:

• Website: www.oaic.gov.au
• Phone: 1300 363 992

13. Children

The Service is not intended for children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top, and where changes are significant we will take reasonable steps to notify you. Your continued use of the Service after an update means you accept the updated Policy.

15. Contact us

For any privacy question, request or complaint, contact us at support@studioreno.io.