Privacy Policy

This Privacy Policy explains how Finalook ("Finalook", "we", "us"), operated by Reformity Inc. (Nexus AI GTA) in Ontario, Canada, collects, uses, and protects information when you use our website and application (the "Service"). By using the Service you agree to this policy.

1. Information we collect

• Account information — your email address and password (passwords are stored and managed by our authentication provider, not by us in plain text).
• Business profile — company name, contact phone and email, business address, default tax/deposit/warranty/terms, and a logo you choose to upload.
• Project content — photos you upload, the AI renders generated from them, and quote details you enter (including client names, addresses, and contact details you choose to add).
• Usage data — number of renders generated and similar product-usage information used to enforce plan limits.
• Payment information — handled by our payment processor (Stripe). We do not store full card numbers; we retain limited subscription details such as plan and status.

2. How we use information

We use information to provide and operate the Service (generating renders, building quotes, sending quotes and approval links), to manage accounts and subscriptions, to enforce usage limits, to communicate with you, and to maintain the security and integrity of the Service.

3. Service providers

We share information only as needed with trusted providers that process it on our behalf:

• Supabase — database, authentication, and file storage.
• Vercel — application and website hosting.
• Google (Gemini) — AI image generation from the photos you submit.
• SendGrid — transactional email (quotes and approval notifications).
• Stripe — payment processing and subscription billing.

We do not sell your personal information.

4. Client data you provide

When you add a client's photo, name, address, or contact details to a quote, you are responsible for having the right to use that information and for obtaining any consent required. You act as the controller of your clients' information; Finalook processes it on your behalf to deliver the Service.

5. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data (see "Your rights"). Some records may be retained where required for legal, tax, or security purposes.

6. Your rights

Subject to applicable Canadian privacy law (including PIPEDA), you may request to access, correct, or delete your personal information, or to close your account. To make a request, contact us at hello@finalook.ai.

7. Cookies & sessions

We use essential cookies and local browser storage to keep you signed in and to operate the Service. We do not use them for third-party advertising.

8. Security

We use reasonable technical and organizational measures to protect your information, including access controls and encrypted connections. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by notifying you.

10. Contact

Questions about this policy? Email hello@finalook.ai.