Privacy Policy

• Account data — your email address, and (optionally) name and account type, when you sign up.
• Photos you upload — the images you submit for transformation, and the generated results. These may show the interior or exterior of a property.
• Listing & lead data (brokers) — listings you create and the contact details (name, email, phone) of people who submit a lead or style request on a public listing page, together with the consent they gave at submission.
• Billing data — handled by Stripe; we store only a customer/ subscription reference and plan status, never your card number.
• Usage & technical data — basic event logs (page views, scans), and a short-lived IP-derived value used only for security and rate limiting.

• To provide the service you signed up for — performance of a contract.
• To process payments and manage subscriptions — contract.
• To notify a broker of a new lead and to capture a lead's details — consentgiven by the visitor at submission, and the broker's legitimate interestin following up.
• To keep the service secure and prevent abuse — legitimate interest.

We use a small number of trusted providers to run WWILL. Each processes data only on our instructions:

• Supabase — database, authentication and file storage (EU region).
• Vercel — application hosting and delivery.
• Stripe — payment processing.
• OpenAI (and, as a fallback, Google) — the AI image model. The photo you submit is sent to the provider to generate the result.
• Resend — transactional email (e.g. lead notifications).

Some providers may process data outside the EEA under appropriate safeguards (e.g. Standard Contractual Clauses). We do not sell your personal data.

We keep account, project and listing data for as long as your account is active. Leads are retained for the broker who captured them until they delete the lead or close their account. Security and rate-limit logs are short-lived. You can ask us to delete your data at any time (see below); brokers can delete an individual lead, with its activity, directly from the lead page.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased ("right to be forgotten");
• export your data in a portable format;
• object to or restrict certain processing; and
• withdraw consent at any time, where processing is based on consent.

To exercise any of these, email us at privacy@whatwoulditlooklike.com. You also have the right to lodge a complaint with your local supervisory authority (in Norway, Datatilsynet).

Questions about this policy or your data? Email privacy@whatwoulditlooklike.com.