Privacy Policy

What we collect: Your email address, if you join the waitlist or create an account.

Why: To notify you of early access, product updates, and account-related communications.

Where it goes: Waitlist submissions are routed through Formsubmit and stored via Cloudflare email routing. Account emails are stored in our database (Cloudflare D1 or Supabase Postgres, depending on deployment region). We do not sell or share your email with third parties for marketing purposes.

Retention: Until you request deletion.

What we collect: Photographs you upload for AI rendering.

Why: To generate your requested AI visualization.

Where it goes: Your photo is sent to Replicate (our AI model provider) for processing. Replicate processes your image to produce the render and does not store inputs beyond the active generation request. Source photos are not retained long-term by TunedRides after the render has been delivered. Generated renders are temporarily stored in Cloudflare R2 so you can download them; they are deleted after 30 days unless you save them to your account gallery.

We do not use your photos to train AI models.

What we collect: Nothing. Stripe handles all payment processing.

How it works:When you subscribe, you enter your payment details directly into Stripe's secure form. TunedRides never sees, stores, or processes raw card numbers, bank details, or CVV codes. We store only a Stripe customer ID and subscription status to manage your account.

For Stripe's privacy practices, see stripe.com/privacy.

What we collect: Anonymized usage data — which pages are visited, how long sessions last, what features are used.

How: We use Google Analytics with IP anonymization enabled. No full IP addresses are stored. We do not use analytics data to build individual profiles or run targeted advertising.

Why: To understand which features are working, which pages are confusing, and where to focus development effort.

We use two categories of cookies:

• Functional cookies: Required for the Service to work — session management, authentication state, render job tracking. These cannot be disabled without breaking the Service.
• Analytics cookies: Google Analytics tracking. You can disable these via your browser settings or a browser extension without affecting Service functionality.

We do not use advertising, retargeting, or cross-site tracking cookies.

Under GDPR, you have the right to: access the data we hold about you; correct inaccurate data; request deletion of your data; object to processing; and lodge a complaint with a supervisory authority.

To exercise any of these rights, email [email protected] with the subject "Data request." We will respond within 30 days.

Right to deletion: We will delete your account, associated renders, and email address from all our systems within 14 days of a valid deletion request. Note that anonymized analytics data cannot be linked back to you and therefore cannot be individually deleted.