OUR COMMITMENT
Your photos are yours. Period.
- We will never sell, license, or transfer your photos or customer data to third parties.
- We will never use your photos for AI training without your explicit opt-in.
- You can delete your account and data at any time.
This isn’t legal compliance language. This is who we are.
Who We Are
- Aubni operates the Aubni platform.
- Based in California, USA.
- Contact: privacy@aubni.com
- Mailing address: [BUSINESS ADDRESS]
What Data We Collect
When you sign up
- Name, email, password (hashed — we never see plaintext).
- Business name, role, photography volume (optional).
When you use Aubni
- Photos you upload (RAW, JPEG, panoramas).
- Property metadata you provide (addresses, MLS info, listing context).
- Editing adjustments and AI feedback you provide.
- Tour viewer interaction analytics (anonymized).
- Usage data (API calls, feature usage, time-on-page) — aggregated for product improvement.
When you pay
- Stripe handles all payment processing.
- Stripe sees your full card details; we only receive the last 4 digits and a tokenized reference.
- Billing address (collected by Stripe for tax compliance).
Automatic technical data
- IP address (used for security/abuse prevention, then anonymized).
- Browser type, OS, device info.
- Page navigation analytics (Vercel Analytics).
- Cookies (see Cookie Policy section below).
How We Use Your Data
To provide the service
- Process your photos through our AI editing pipeline.
- Generate virtual tours and floor plans.
- Deliver finished products to your clients.
- Maintain your account and bill you correctly.
To improve Aubni
- Aggregated, anonymized usage patterns inform product decisions.
- Performance monitoring and bug investigation.
- Feature popularity tracking (which add-ons are popular, which features go unused).
For AI model improvement (with your opt-in only)
- Founding 50 members opt in as a condition of the program.
- All other users can opt in via account settings.
- See “AI Training Data” section below for full details.
To communicate with you
- Transactional emails (job complete, payment received, account changes) — these are not optional, they’re functional.
- Product updates and announcements (you can opt out anytime).
- Marketing emails (only if you opt in).
AI Training Data
This is where Aubni differs from generic photo services. Read this section in full.
DEFAULT POLICY
- Your photos are NOT used to train our AI models.
- Your editing adjustments are NOT used to train our AI models.
- Your data is processed for your benefit only.
Optional opt-in for AI training
- Founding 50 members: AI training participation is required as a condition of the Founding 50 Year-1 cohort rate. This is the explicit deal — your contributions help us build a better editing AI for the photographer community, and in exchange, you get $100/mo Edit Pro for your first 12 months. After Year 1 your subscription graduates to standard Pro pricing.
- Other users: You can opt in via account settings at any time. The more diverse photographers contributing edit feedback, the better our AI gets at understanding the wide range of styles real estate photographers actually use. Opt-in users will receive periodic updates on how their contributions are improving the model.
What “opt in” means specifically
- Your edited photos (RAW + final pairs) become part of our training dataset.
- Your adjustment patterns (which sliders you moved, by how much) inform our AI’s style intuition.
- Your photos are never used in marketing, never published, never identifiable to others.
- Your client property addresses and MLS data are stripped before any training use.
What you can do at any time
- Opt out via account settings (effective immediately for new uploads).
- Request deletion of your historical training contributions — we’ll permanently delete your stored training samples and edit signature data within 30 days.
- Important honesty:aggregated, anonymized patterns derived from your contributions during your active opt-in period may persist in our existing model weights. This is the nature of machine learning — once data has been used to train a model, it’s not retroactively removable from those weights. We don’t retain your data in re-trainable form longer than necessary, but we want to be transparent about this technical reality.
What we will never do
- Sell, license, or transfer your data to other AI companies.
- Use your photos in marketing materials without your written consent.
- Train competitor models with your data.
- Use your data after you opt out (for new training runs).
Data Sharing and Third Parties
We share data only with service providers necessary to operate Aubni:
- Stripe (payment processing) — receives billing info, returns tokenized references.
- Resend (transactional email) — receives recipient email and email content.
- Cloudflare R2 (file storage) — stores your uploaded photos and generated outputs.
- Supabase (database) — stores your account, subscription, and metadata.
- Modal (AI compute) — processes your photos through editing/tour pipelines, doesn’t retain after processing.
- Anthropic (Claude API for Image IQ and other AI features) — processes specific images for analysis, doesn’t retain after processing.
- fal.ai (virtual staging compute) — processes specific images for staging, doesn’t retain after processing.
- Vercel (hosting and analytics) — serves the platform, anonymized analytics.
We do NOT share data with
- Advertisers (we don’t run ads).
- Data brokers.
- AI model competitors.
- Marketing platforms (beyond your opt-in subscriber lists).
Legal disclosure
- We may disclose data if required by valid legal process (subpoena, court order).
- We will notify you when legally permitted to do so.
- We push back on overbroad requests.
Data Retention
While your account is active
- We retain everything needed to provide the service.
- Tour hosting runs for 12 months across all 360 tiers. After expiration, tours are removed from public viewers.
- Edit photo outputs are retained 30 days (Starter), 60 days (Pro), or 90 days (Studio). After expiration, outputs are auto-archived and removed from active dashboards.
After cancellation
- Account marked inactive for 30 days (recovery window).
- After 30 days: account and all associated data permanently deleted.
- Note: tours and floor plans created during an active subscription remain hosted for 12 months from their creation date, even after subscription cancellation, in accordance with the hosting commitment at time of creation.
- Exceptions: data subject to legal hold, or financial records required for tax/audit purposes (kept up to 7 years per IRS requirements).
You can request deletion at any time via account settings or by emailing privacy@aubni.com.
International Users
Aubni is available globally. By using Aubni, you consent to data being processed in the United States.
If you’re in the European Union, United Kingdom, or another jurisdiction with data protection laws (GDPR, UK GDPR, CCPA, etc.), you have additional rights:
- Right to access your data.
- Right to correct inaccurate data.
- Right to delete your data (with limitations noted above for AI training data).
- Right to data portability (export your account data).
- Right to object to processing.
- Right to withdraw consent at any time.
- Right to lodge a complaint with your local data protection authority.
Exercise these rights via privacy@aubni.com — we respond within 30 days.
For EU/UK customers: Aubni is the data controller. Our service providers (Stripe, Cloudflare, etc.) act as data processors under our agreements with them.
For California residents:The CCPA gives you specific rights. We don’t sell personal information. We honor “Do Not Sell My Personal Information” requests automatically — they’re already not sold.
Children's Privacy
Aubni is not intended for users under 18. We do not knowingly collect data from children. If you become aware a child has created an account, contact us and we’ll delete the data.
Security
- All data encrypted in transit (TLS 1.3+).
- Photos stored encrypted at rest (Cloudflare R2).
- Database access limited to authorized personnel.
- Stripe handles all payment data (PCI DSS Level 1 compliant).
- Regular security audits as we scale.
In the event of a data breach affecting you
- We notify affected users within 72 hours of discovery — faster than legally required.
- We work with security professionals to remediate.
- We document the incident and share findings publicly when possible.
Changes to This Policy
We may update this policy. Material changes are communicated via email at least 30 days before taking effect. The “Last Updated” date at the top reflects the most recent revision.
Contact Us
For privacy questions, data requests, or concerns:
- privacy@aubni.com
- [BUSINESS ADDRESS]