Privacy Policy
Last updated: January 2025
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, "GDPR"), Defratyka Inc. sp. z o.o. informs users about the processing of their personal data, the means by which such data are obtained, the purposes for which they are used, and the rights granted to them under applicable legislation.
1. Data Controller
Defratyka Inc. sp. z o.o.
ul. Twarda 18
00-105 Warszawa, Poland
NIP: 5252964846
KRS: 0001047678
REGON: 525903514
Phone: +48 531 652 616
Email: support@homestagr.com
2. Scope of This Policy
This Privacy Policy applies to the processing of personal data carried out by Defratyka Inc. sp. z o.o. through:
- The Homestagr website: https://homestagr.com
- The Homestagr web application and dashboard
- WhatsApp Business Platform communications
- Contact and support communications
A "User" is defined as any natural person who interacts with Homestagr through the website, web application, or WhatsApp.
3. Purposes of Data Processing
We process your personal data for the following purposes:
- Service provision: Processing your photos using AI enhancement, generating fly-through videos, and delivering results via WhatsApp or web application.
- Account management: Creating and maintaining your user account, managing subscriptions and credits.
- Payment processing: Processing transactions, billing, and subscription management.
- Communication: Responding to your enquiries, providing customer support, and sending service-related notifications.
- Service improvement: Analyzing usage patterns to improve our services and user experience.
- Legal compliance: Fulfilling legal obligations and protecting against fraud.
4. Personal Data We Collect
Depending on your interaction with our services, we may collect:
- Identifying data: Name, email address
- Contact data: Phone number (for WhatsApp communication)
- Media content: Photos you submit for enhancement or video generation
- Communication data: Messages exchanged through WhatsApp or web chat
- Payment data: Payment method information (processed securely by our payment provider)
- Technical data: IP address, browser type, device information, usage logs
We apply the principle of data minimization, processing only data that are adequate, relevant, and limited to what is necessary for each purpose.
5. Legal Basis for Processing
| Purpose | Legal Basis (GDPR) |
|---|---|
| Photo enhancement and video generation | Contract performance (Art. 6.1.b) |
| Account and subscription management | Contract performance (Art. 6.1.b) |
| Payment processing | Contract performance (Art. 6.1.b) |
| Customer support and communication | Legitimate interest (Art. 6.1.f) |
| Service improvement | Legitimate interest (Art. 6.1.f) |
| Legal compliance | Legal obligation (Art. 6.1.c) |
6. Artificial Intelligence and Automated Processing
Homestagr uses artificial intelligence technologies to provide its core services:
- Photo enhancement: AI models analyze and enhance your photos by removing clutter, improving lighting, and straightening lines.
- Video generation: AI creates fly-through videos from your photos for real estate presentations.
- Chat assistant: An AI-powered assistant helps you interact with our services through natural conversation.
No decisions are made solely through automated means that produce legal or significant effects on you without human oversight. You may request human intervention or ask for explanations regarding any automated processing.
7. Data Sharing and Third Parties
We do not sell your personal data. To provide our services, we work with the following categories of service providers:
- Cloud infrastructure and hosting: For secure data storage and application hosting.
- AI processing services: For photo enhancement and video generation.
- Payment processing: For secure handling of payments and subscriptions.
- Communication platforms: WhatsApp Business Platform (Meta) for messaging services.
- Authentication services: For secure user account management.
All service providers are bound by data processing agreements ensuring confidentiality, adequate security measures, and compliance with GDPR requirements.
8. International Data Transfers
Some of our service providers are located outside the European Economic Area (EEA). When transferring data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions. By using WhatsApp, your communications may involve data transfers to Ireland (WhatsApp Ireland Limited) and the United States (Meta Platforms, Inc.) under the conditions established by the provider. You can review WhatsApp's Privacy Policy for more information.
9. Data Retention
- Account data: Retained for the duration of your account and for a reasonable period thereafter for legal purposes.
- Photos and media: Retained to allow you to access your history. You may request deletion at any time.
- Communication logs: Retained for customer support purposes and deleted after 2 years.
- Payment records: Retained as required by tax and accounting regulations (typically 5-7 years).
10. Security Measures
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of data at rest
- Access controls and authentication mechanisms
- Regular security assessments
- Confidentiality obligations for personnel and providers
In the event of a data breach posing a high risk to your rights, we will notify you and the relevant supervisory authority within the statutory deadlines.
11. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Access: Request information about what personal data we process about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your data when no longer necessary.
- Restriction: Request limitation of processing in certain circumstances.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Withdraw consent: Where processing is based on consent, withdraw it at any time.
To exercise your rights, contact us at support@homestagr.com. We will respond within one month. You also have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO).
12. User Responsibilities
- Accuracy: You are responsible for providing accurate and up-to-date information.
- Third-party content: When submitting photos, ensure you have the right to use them and that they do not infringe on others' rights.
- Age requirement: You must be at least 18 years old to use our services.
- Account security: Keep your login credentials confidential and notify us of any unauthorized access.
13. Cookies and Similar Technologies
Our website uses cookies and similar technologies to provide functionality, analyze usage, and improve your experience. These include essential cookies for authentication and optional analytics cookies. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.
14. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the "Last updated" date. Continued use of our services after such changes constitutes acceptance of the revised policy.
15. Contact Us
For any questions about this Privacy Policy or to exercise your rights, please contact us:
Defratyka Inc. sp. z o.o.
ul. Twarda 18
00-105 Warszawa, Poland
Phone: +48 531 652 616
Email: support@homestagr.com