Menu
PricingArticlesContact
Language
Log in

Privacy Policy

Last updated: April 15, 2026

1. Introduction

This Privacy Policy describes how SUMAAI Inc. (“SUMAAI,” “we,” “our,” or “us”), a Japanese corporation (Kabushiki Kaisha) located at Minamiazabu 3-20-1, Azabu Green Terrace 5F, Minato-ku, Tokyo 106-0047 JAPAN, collects, uses, discloses, and protects your personal information when you access or use our website at https://www.virtualstaging.art and our AI-powered virtual staging services (collectively, the “Service”).

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: When you create an account, we collect your name, email address, and password. If you sign up via a third-party authentication provider (e.g., Google), we receive your name and email address from that provider.
  • Payment Information: When you purchase credits or subscribe to a plan, our payment processors (Stripe and Payoneer) collect your payment details. We do not store full credit card numbers on our servers.
  • Uploaded Content: Photographs of real estate properties and land plots that you upload for virtual staging.
  • Communications: Information you provide when you contact our support team via Help Scout, including your name, email address, and the content of your messages.

2.2 Information Collected Automatically

  • Usage Data: We collect information about how you interact with the Service, including pages visited, features used, timestamps, and referring URLs.
  • Device and Browser Information: IP address, browser type and version, operating system, device type, and screen resolution.
  • Cookies and Similar Technologies: We use cookies, pixels, and similar tracking technologies to operate and improve the Service. See Section 7 (Cookies and Tracking Technologies) for details.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, operate, and maintain the Service, including processing your uploaded photographs through our AI staging pipeline.
  • To process transactions and manage your account, credits, and subscriptions.
  • To communicate with you, including responding to support requests and sending service-related notifications.
  • To analyze usage patterns and improve the Service, including the quality of AI-generated results.
  • To detect, prevent, and address fraud, abuse, and technical issues.
  • To comply with legal obligations.
  • To serve targeted advertisements through Google Ads (using anonymized or aggregated data).

4. How We Process Your Uploaded Images

When you upload a photograph for virtual staging, the image is processed through our AI pipeline. This involves sending your images to the following third-party AI service providers for processing:

  • Google (Gemini API)
  • OpenAI
  • FAL
  • VirtualStagingAI (virtualstagingai.app)
  • AI Home Design (aihomedesign.com)

These providers process your images solely for the purpose of generating staged output on our behalf. We select providers based on the specific staging task to deliver the best possible results. Your original uploads and generated outputs are stored on Cloudflare R2 infrastructure in the Asia-Pacific region and are retained until you choose to delete them.

Important: We do not use your uploaded images or AI-generated outputs for marketing, training, or any purpose other than delivering the Service to you, unless you provide explicit consent.

5. Third-Party Service Providers

We share personal information with the following categories of service providers, each of whom processes data solely to perform services on our behalf:

  • Hosting and Infrastructure: Render (application hosting, Singapore data center), Cloudflare (CDN and image storage)
  • Payment Processing: Stripe, Payoneer
  • Analytics: Google Analytics 4
  • Email and Communications: SendGrid (transactional email)
  • Customer Support: Help Scout
  • Error Monitoring: Sentry
  • Advertising: Google Ads
  • AI Processing: As described in Section 4 above.

Each provider is contractually obligated to process your data only as necessary to provide services to us and in accordance with applicable data protection laws.

6. International Data Transfers

SUMAAI Inc. is based in Japan. Your data may be transferred to and processed in Japan, Singapore (where our application servers are hosted), the United States, and other countries where our service providers operate.

For EU/EEA Users: Japan has received an adequacy decision from the European Commission, meaning transfers of personal data from the EU/EEA to Japan are considered to provide an adequate level of data protection. For transfers to other countries (such as the United States), we rely on Standard Contractual Clauses or other appropriate safeguards as required by the GDPR.

For Users Outside the EU: By using the Service, you consent to the transfer of your information to Japan and other countries as described in this Policy.

7. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

  • Essential Cookies: Required for the Service to function, such as authentication tokens and session management.
  • Analytics Cookies: Used via Google Analytics 4 to understand how users interact with the Service.
  • Advertising Cookies: Used by Google Ads to serve relevant advertisements and measure campaign effectiveness.

When you first visit the Service, we will present a cookie consent banner that allows you to accept or reject non-essential cookies. You can update your preferences at any time through the cookie settings accessible on our website. You may also control cookies through your browser settings, though this may impair certain functionality.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

  • Account Data: Retained for the duration of your account. When you request account deletion, we will delete your personal information within 30 days, except where retention is required by law.
  • Uploaded Images and Generated Outputs: Retained until you delete them through the Service interface.
  • Payment Records: Retained as required by applicable tax and accounting regulations.
  • Usage Logs: Retained for up to 24 months for analytics and security purposes, then anonymized or deleted.

9. Your Rights

9.1 Rights for All Users

Regardless of your location, you may:

  • Access the personal information we hold about you.
  • Request correction of inaccurate personal information.
  • Delete AI-generated images through the Service interface.
  • Request account deletion by contacting support@virtualstaging.art.

9.2 Additional Rights for EU/EEA Users (GDPR)

If you are located in the European Union or European Economic Area, you also have the right to:

  • Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
  • Right to Restriction: Request that we restrict processing of your data in certain circumstances.
  • Right to Data Portability: Receive a copy of your personal data in a structured, commonly used, machine-readable format.
  • Right to Object: Object to processing of your personal data for direct marketing or where processing is based on our legitimate interests.
  • Right to Withdraw Consent: Where processing is based on your consent, withdraw that consent at any time.

To exercise these rights, contact us at support@virtualstaging.art. We will respond within 30 days. If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

Legal Basis for Processing (GDPR): We process your personal data on the following legal bases: (a) performance of a contract (to provide the Service); (b) legitimate interests (analytics, fraud prevention, service improvement); (c) consent (non-essential cookies, marketing communications); and (d) legal obligations (tax and accounting records).

9.3 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

  • Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your information.
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
  • Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We share limited information with Google Ads for targeted advertising purposes, which may constitute “sharing” under the CPRA. You may opt out of this sharing through our cookie consent tool.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To submit a request, contact us at support@virtualstaging.art. We will verify your identity before processing your request and respond within 45 days.

Categories of Personal Information Collected: Identifiers (name, email, IP address); commercial information (purchase history, credits); internet activity (usage data, browsing history on our Service); geolocation data (approximate, from IP address).

We do not sell personal information. We share data with service providers solely for business purposes as described in Section 5.

10. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL), access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Children’s Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe a child under 18 has provided us with personal information, please contact us at support@virtualstaging.art and we will promptly delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Service with a revised “Last Updated” date and, where required by law, by email. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

SUMAAI Inc.

Minamiazabu 3-20-1, Azabu Green Terrace 5F,

Minato-ku, Tokyo 106-0047 JAPAN

Email: support@virtualstaging.art

For EU/EEA residents: If you are not satisfied with our response to your privacy inquiry, you have the right to lodge a complaint with your national data protection authority.