Privacy Policy

Effective date: May 9, 2026

1. Who We Are

Stagey is operated by RMT Services OÜ(“we”, “us”, “our”), a private limited company registered in Estonia (registration code 16803586), with its registered address at Hobujaama 4, Tallinn, 10151, Estonia.

RMT Services OÜ is the data controller for personal data processed in connection with the Stagey service. Questions about this policy or your data rights can be directed to: rmtsolutions@gmail.com

2. What Data We Collect

2.1 Account Data

When you register, we collect your email address and, if you choose to sign in with a third-party provider (e.g. Google), the basic profile information returned by that provider (name, email, profile picture). Passwords are hashed and never stored in plain text.

2.2 Uploaded Images

You upload photographs of real estate properties to use our editing tools. These images are stored securely and used solely to process your requested jobs and deliver the generated outputs back to you. Images you upload are not used to train our AI models without your explicit consent.

2.3 Generated Outputs

The processed images produced by our tools are stored in your account so you can download them. You may delete them at any time from your account.

2.4 Billing and Payment Data

When you make a purchase, payment is handled by Stripe, Inc.We receive a payment confirmation and a Stripe customer identifier, but we do not receive or store your full card number, CVV, or bank account details. Stripe’s handling of your payment data is governed by Stripe’s Privacy Policy.

2.5 Usage Data

We collect information about how you use the service: which tools you run, job timestamps, credit consumption, and similar operational metadata. This data is used to operate the service, prevent abuse, and improve features.

2.6 Technical Data

Standard server logs capture IP addresses, browser type, device information, and pages visited. This data is retained for up to 90 days for security and diagnostic purposes.

2.7 Communications

If you contact us by email, we retain the correspondence to handle your request and for a reasonable period thereafter.

3. How We Use Your Data

We use the data we collect to:

Create and manage your account
Process and deliver image editing jobs
Process payments and manage your credit balance
Send transactional emails (receipts, password resets, job completion notifications)
Respond to support requests
Detect and prevent fraud, abuse, and security incidents
Comply with legal obligations (e.g. tax record-keeping required under Estonian and EU law)
Improve the platform based on aggregated, anonymised usage patterns

We do not sell your personal data to third parties. We do not use your data for advertising profiling.

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases under the EU General Data Protection Regulation (GDPR):

Contract performance — processing necessary to provide the service you signed up for (account management, image processing, billing)
Legitimate interests — security monitoring, fraud prevention, and service improvement, where these interests are not overridden by your rights
Legal obligation — where we are required to process data to comply with applicable law
Consent — for any optional communications such as product newsletters, which you may withdraw at any time

5. Third-Party Services

To operate the service, we share limited data with the following sub-processors:

Supabase — database and authentication infrastructure. Data is stored on EU-region servers. Governed by Supabase’s Privacy Policy.
Stripe, Inc. — payment processing. Governed by Stripe’s Privacy Policy.
AI inference providers — your uploaded images are sent to third-party AI model APIs solely to generate the requested output. These providers process images transiently and are contractually prohibited from retaining or using your images for their own purposes.
Vercel — hosting and serverless infrastructure for the web application.

All sub-processors are selected to provide appropriate data protection guarantees, including EU Standard Contractual Clauses where data is transferred outside the European Economic Area.

6. Cookies and Tracking

Stagey uses only strictly necessary cookies required to operate the service (session authentication tokens). We do not use third-party advertising cookies or cross-site tracking. If we introduce any optional analytics cookies in the future, we will request your consent before setting them.

7. Data Retention

Account data — retained for as long as your account is active. Upon account deletion, account data is purged within 30 days.
Uploaded and generated images — retained for the duration of your account. You may delete individual images at any time. Images are purged within 30 days of account deletion.
Billing records — retained for 7 years as required by Estonian accounting law.
Server logs — retained for up to 90 days.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Access — request a copy of the personal data we hold about you
Rectification — request correction of inaccurate data
Erasure — request deletion of your data (subject to legal retention requirements)
Restriction — request that we limit how we process your data in certain circumstances
Portability — receive your data in a structured, machine-readable format
Objection — object to processing based on legitimate interests
Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at rmtsolutions@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate or the supervisory authority in your EU member state.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including encrypted data storage, encrypted connections (TLS), and access controls limited to staff who need the data to perform their role. No method of transmission or storage is 100% secure; if you become aware of a security concern, please contact us immediately at rmtsolutions@gmail.com.

10. Children’s Privacy

Stagey is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or through a notice in the application before the changes take effect. The effective date at the top of this page will always reflect the most recent version.

12. Contact

For privacy-related questions or to exercise your rights:

RMT Services OÜ
Hobujaama 4, Tallinn, 10151, Estonia
Registration code: 16803586
Email: rmtsolutions@gmail.com