Privacy Policy

Effective 2026-08-01.

Almond Tree Media Inc. operates RealtyPhoto.ai and is the data controller. This policy follows Canadian privacy law (PIPEDA and BC's PIPA).

1. What we collect

• Account data — email, name/display name, password (hashed by our auth provider).
• Your Content — photos you upload and their enhanced versions.
• Billing data — plan, credit history, transaction records. Card data is handled by Stripe; we never store full card numbers.
• Usage data — logs, device/browser info, feature usage, and error logs (support and abuse prevention).

2. How we use it

To provide and improve the Service, process payments, send service/transactional emails, prevent abuse, and meet legal obligations. We do not sell your personal information, and we do not use Your Content to train AI models.

3. Service providers

We share data with providers only as needed to run the Service:

• Supabase — database, authentication, storage
• Cloudflare R2 — image file storage
• AI providers — image processing (receive the photos you choose to enhance)
• Stripe — payments and tax
• Railway — application hosting
• Resend — transactional email (e.g. welcome, receipts, account notices)
• PostHog — product analytics (feature usage, session data) to improve the Service

4. Where data is stored

Data may be processed in Canada and the United States. By using the Service you consent to cross-border processing as described.

5. Retention

Account data is kept while your account is active. Image files follow your plan's retention schedule. Billing records are kept as required by tax law. Backups may persist for a limited period after deletion.

6. Support access to your content

If you contact support about a specific photo or enhancement, an administrator may view the relevant uploaded and enhanced photos in your account to diagnose the issue. This access is logged and limited to what is needed to resolve your request.

7. Your rights

You may access, correct, or delete your personal data, and close your account, by contacting business@almondtreemedia.ca. We respond within the timeframes required by applicable law.

8. Security

We use industry-standard measures (encryption in transit, access controls). No system is perfectly secure; we cannot guarantee absolute security.

9. Children

The Service is not directed to children and is intended for business/professional use by adults.

10. Changes & contact

We will post changes here and notify you of material changes. Privacy questions: business@almondtreemedia.ca