Privacy policy

Version 2026-10-30. Draft for legal review before launch.

Who we are

Curbhue is operated by NexusOps, Toronto, Ontario, Canada. Our privacy officer can be reached at privacy@curbhue.com. This policy covers Curbhue.com and the visualizer we provide inside contractor websites (marked "Visualizer by Curbhue").

What we collect

• The photo you upload. We remove location (GPS) and camera data before storing it.
• The designs we create from your photo and the materials and colors you picked.
• If you fill in the form: your name, email, phone (optional unless you ask to be contacted), postal or ZIP code, project type and timeline.
• Consent records: the exact wording you agreed to, the time, the page, your IP address and browser type. The law requires us to be able to prove consent.
• If you add your email to get more free designs: that email, and whether you ticked the separate box to receive our emails. Giving your email for more designs does not sign you up for anything.
• Technical data for security and abuse prevention, such as a hashed version of your IP address, and a random ID kept in your browser to count your free designs. We do not use advertising cookies or tracking pixels.

Why we use it

• To create and show your design.
• To let you download it.
• To pass your request to a contractor, only if you tick the contact box.
• To prevent abuse, control costs and keep the service secure.
• To count usage in aggregate (for example, how many designs were made today).

Who we share it with

• The contractor you choose to hear from. Only if you tick the contact box. The box names the contractor. They become responsible for your details under their own privacy policy.
• AI model providers. Your photo and a description of the changes are sent through OpenRouter to the image model that creates the design. We use paid tiers configured not to train on your data, and we never use your photos to train AI models ourselves. We do not run facial recognition.
• Hosting and storage. Our hosting, database and file storage providers (Vercel and Neon) store data on our behalf.
• Bot protection. Cloudflare Turnstile checks that a person, not a script, is making designs. Cloudflare receives technical data from your browser for this check.

We do not sell your personal information.

Where your data is processed

Our providers may store or process data in the United States and other countries. Data held outside Canada may be accessible to courts and authorities there.

How long we keep it

• Original photos: deleted automatically after 30 days, or immediately when you choose "Delete it now".
• Designs: deleted after 90 days.
• Contact details you sent without asking to be contacted: 12 months.
• An email given only for more free designs: 90 days. If you also ticked the box to receive our emails, until you unsubscribe.
• Contact details forwarded to a contractor: 24 months from your last contact with us.
• Consent records: for as long as the consent lasts, plus 3 years.
• Location and camera data from photos: never stored.

How we protect it

Storage is private. Images are only reachable through short-lived signed links. Data is encrypted in transit, access is limited to the server, and we keep only what we need. If a breach creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada.

Your choices and rights

• Withdraw consent to be contacted at any time: unsubscribe, reply STOP, or email us.
• Ask for access to, correction of, or deletion of your information. We answer within 30 days.
• Quebec residents can also ask for data portability.
• If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or the Commission d'accès à l'information in Quebec.

Photos of people and property

Please upload photos of homes you own or are allowed to photograph, and avoid capturing people or licence plates. We never show your photo publicly.

Children

The service is meant for adult homeowners and is not directed to anyone under 18.

Changes

We will post any changes here with a new version date. If a change affects how we use information you already gave us, we will ask again where the law requires it.