Privacy Policy

1. Introduction

egami ("we", "us", "our") operates egami.ai and app.egami.ai (collectively, "the Service"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Service.

We are committed to complying with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Canada.

2. Information We Collect

Account Information

• Name and email address (via Google OAuth sign-in)
• Profile picture (provided by Google)
• Account preferences and settings

Uploaded Content

• Product images you upload for processing (furniture photos, fabric swatches, etc.)
• Generated images created through the Service
• Project and folder organization data

Usage Data

• Features used, generation history, and interaction patterns
• Browser type, device information, and IP address
• Pages visited and time spent on the Service

Payment Information

Payment processing is handled by our third-party payment processor. We do not store credit card numbers or full payment details on our servers.

3. How We Use Your Information

• Service delivery: Processing your images, generating outputs, and managing your account.
• Service improvement: Analyzing usage patterns to improve features and performance.
• Communication: Sending account-related notifications, support responses, and (with your consent) product updates.
• Security: Detecting and preventing fraud, abuse, and unauthorized access.
• Legal compliance: Meeting legal obligations and responding to lawful requests.

4. Image Data and AI Training

Your images are never used to train our AI models.

Uploaded images are processed solely to deliver the requested output (lifestyle scenes, fabric swaps, relighting, etc.). Temporary processing data is deleted promptly after generation is complete.

Your generated images are stored in your account for your access and are not shared with third parties.

5. Data Storage and Security

• All data is stored on enterprise-grade cloud infrastructure with encryption at rest and in transit (TLS 1.2+).
• Images are stored on Cloudflare R2 with access controlled via signed URLs.
• Database records are stored on Neon PostgreSQL with automated backups.
• Access to production systems is restricted to authorized personnel only.

6. Third-Party Services

We use the following third-party services to operate:

• Google OAuth: Authentication and sign-in.
• Cloudflare R2: Image storage and delivery.
• Neon: Database hosting.
• RunPod: AI image generation processing.
• Vercel: Application hosting and deployment.

Each third-party service is subject to its own privacy policy. We only share the minimum data necessary for each service to function.

7. Cookies and Tracking

We use cookies for:

• Essential cookies: Authentication session management and security.
• Analytics cookies: Understanding how the Service is used (aggregated, anonymized data).

We do not use advertising cookies or sell your data to advertisers.

8. Data Retention

• Account data is retained for as long as your account is active.
• Uploaded and generated images are retained until you delete them or close your account.
• Usage logs are retained for up to 12 months for security and analytics purposes.
• Upon account deletion, all personal data and images are permanently removed within 30 days.

9. Your Rights

Under Canadian privacy law (PIPEDA), you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate personal information.
• Deletion: Request deletion of your account and associated data.
• Withdrawal of consent: Withdraw consent for optional data processing (e.g., marketing emails).
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, contact us at hello@egami.ai.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

11. International Data Transfers

Your data may be processed on servers located outside of Canada (e.g., through our cloud infrastructure providers). Where data is transferred internationally, we ensure appropriate safeguards are in place to protect your information in accordance with Canadian privacy law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service. Continued use after changes constitutes acceptance.

13. Contact

For privacy-related questions or requests, contact us at hello@egami.ai.