Privacy Policy

1. Data we collect

We collect only what we need to run the service:

• Account data — your name, email address and password (stored hashed), or your Google account identifier if you sign in with Google.
• Content you add — property details, photos, videos, and the marketing content generated from them.
• Billing data — credit balance and transaction history. Card details are handled by Stripe and never stored on our servers.
• Technical data — basic logs (IP address, timestamps, error diagnostics) needed to operate and secure the service.

2. How we use it

• To provide the service — storing your properties and generating content on your request.
• To process purchases and maintain your credit balance.
• To secure the service, prevent abuse, and diagnose problems.
• To contact you about your account or important service changes.

3. Legal bases (GDPR)

We process your data to perform our contract with you (providing the service), to comply with legal obligations (e.g. tax records), and on the basis of our legitimate interests in operating and securing the product. Where required, we rely on your consent, which you can withdraw at any time.

4. Processors we share data with

We rely on a small number of trusted providers to run RenderBuildSell:

• Microsoft Azure — cloud hosting, database and file storage (EU region).
• Stripe — payment processing for credit purchases.
• Anthropic — the AI models that generate text content.
• Replicate — the AI models that enhance, renovate and animate photos.
• Google — optional "Sign in with Google" authentication.

We do not sell your personal data, and we do not share it for advertising.

5. Retention

We keep your data for as long as your account is active. If you delete content or close your account, we remove the associated data within a reasonable period, except where we must retain records to meet legal obligations (such as invoicing).

6. International transfers

Some processors may handle data outside the European Economic Area. Where that happens, appropriate safeguards (such as the European Commission's Standard Contractual Clauses) are in place.

7. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data, or complete incomplete data.
• Delete your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Lodge a complaint with your supervisory authority (in Portugal, the CNPD).

To exercise any of these, email nuvoraaitech@gmail.com.

8. Cookies

We use only the cookies necessary to keep you signed in and to operate the service. We do not use advertising or third-party tracking cookies.

9. Security

Passwords are hashed, traffic is encrypted in transit, and data is stored with a reputable cloud provider. No system is perfectly secure, but we take reasonable measures to protect your information.

10. Changes

We may update this policy as the service evolves. Material changes will be reflected here with a new "last updated" date.