Privacy

Last updated 16 September 2026

1. Who this is about

InstaBrush is run from Maine, United States. This page covers instabrush.app and the app served from it. It explains what we hold, why, who else touches it, and for how long.

2. What you give us

• Your email address, and a name if you give one. The email identifies the account and is where a password reset goes.
• Your password, which we do not store. It is handled by our authentication provider and we never hold it in a readable form.
• Your photographs, and the brushwork you do on them.
• Shoot names, which you choose. They are usually an address or a client, so treat them as you would any other note about a property.
• Anything you write in the contact form, together with the IP address the message arrived from. The address is kept only to make spam and abuse traceable.

Payment details never reach us. Stripe takes them directly and we hold only a customer reference and what your invoices say.

3. What the service records as it runs

• A row per photograph: its filename, when it ran, which agent was chosen, the resolution, whether it succeeded, and what it cost us.
• What was detected in each photograph: the room, and the list of things to remove. It is kept so a shoot can be reopened without paying to look at it again.
• Your credit ledger: every grant, hold, charge and refund. This is your billing history and it is what lets a wrong number be read back line by line.
• Your preferences, such as keyboard shortcuts, so they follow you between computers.

4. What we do not do

• We do not use your photographs to train any model, ours or anyone's.
• We do not sell, rent or trade anything you give us.
• We do not show your photographs to anyone outside the processors named below, except where the law requires it of us.
• We do not run advertising, and we do not build a profile of you.

5. Who else processes it

Making a clean plate means sending your photograph to whichever company is running the model. There is no version of this service where that does not happen. These are the companies involved, and what each one gets:

Each holds your data under its own terms while it has it. We may change providers, and if a model is withdrawn or repriced we may have to. This list is updated when we do.

If a photograph contains something you are not permitted to send to a third-party processor, do not upload it.

6. How long it is kept

• Photographs, plates and brushwork: 7 days, then deleted automatically. If you need a photograph, download it.
• The record of what was run: filenames, dates, counts and costs. Kept for as long as your account exists, because it is your billing history.
• Contact messages, until we clear them.
• Invoices, for as long as tax and accounting rules require, which is generally several years and is not ours to shorten.

7. Deleting your account

There is a button for it on your account page. It cancels any subscription, deletes your photographs and files, and removes your account, your ledger and your shoots. You do not have to ask us and we do not ask why.

Three things survive it, and we would rather say so than have you find out:

• A one-way hash of your email address, so a free trial cannot be taken repeatedly by deleting and re-registering. It cannot be turned back into your address, and it is not used for anything else.
• Invoice records held by Stripe, which we cannot delete because we are required to keep them.
• Backups, for up to 35 days. The database is copied on a schedule so that a fault on our side cannot lose your billing history. Deleting your account removes you from the live database straight away, but you remain inside the frozen copies made before you left until the oldest one holding you rotates out. Those copies are encrypted, are only ever opened to recover from a failure, and are never read to answer a question about you.

8. Your rights over it

Depending on where you live you may have a formal right to see what we hold, correct it, take a copy of it, or have it erased. We do not ask which jurisdiction you are in before honouring one:

• See it. Your shoots and your credit history are on the site, and you can ask for the rest.
• Correct it. Names and shoot names are editable in the app.
• Erase it. The delete button, above.
• Take it with you. Ask, and we will send what we hold in a readable format.

Ask through the contact form. We aim to answer within a few days and will not charge you for it.

8a. If you are in California

The CCPA gives Californians a specific set of rights. You have all of them, and so does everybody else — the list in section 8 is not offered by jurisdiction.

In the language the law uses: we collect identifiers (your email address), commercial information (which plan you are on and what you have been charged), internet activity (the technical records in section 3), and the photographs you upload. Why, and for how long, is sections 2, 3 and 6.

We have never sold your personal information, and we have never shared it for cross-context behavioural advertising. There is no opt-out link on this site because there is nothing to opt out of. We do not run advertising, we have no advertising partners, and we do not build profiles.

We also will not treat you differently for exercising any of this. There is no worse price and no reduced service for asking us to delete your data — the delete button in section 7 is the same button for everybody.

Ask through the contact form. If somebody is making a request on your behalf, say so and we will verify it with you before acting.

9. Cookies and counting visits

We do not use cookies, and there is no consent banner because there is nothing to consent to. We run no advertising trackers and build no profile of you.

The site does keep a few things in your browser's own storage: the token that proves who you are, a second one that renews it so you are not signed out every hour, which shoot you had open, and whether you had a panel folded open or shut. They stay on your computer, they are not sent anywhere except back to us as proof of who you are, and clearing your browser data removes them.

Signing out, or changing your password, ends those sessions on our side as well — so the renewal token stops working rather than merely being deleted from one browser. A session you leave alone expires on its own after 30 days.

We do count visits, using Cloudflare Web Analytics. It was chosen because of the paragraph above: it sets no cookie, stores nothing in your browser, and gives a visitor no identifier that follows them between pages or between days. What we see is how many people arrived, which pages they landed on, roughly where in the world they were, and which site sent them. We cannot see who you are or follow you anywhere.

10. Security

Everything travels over HTTPS. Files in storage are reached through links we sign that expire within the hour, rather than through public URLs. The key to each object is worked out from your account on a token we verified, never from anything a browser asked for, so one customer cannot name their way into another's photographs.

No service can promise it will never be breached. If one happens and it affects you, we will tell you.

11. Where it is processed

We are in the United States and so is every provider above, so if you are writing to us from elsewhere your data is processed in the United States and possibly in other countries those providers operate from.

12. Children

This is a tool for professional photographers and photo editing companies. It is not for anyone under 18, and we do not knowingly hold information about children.

13. Changes to this page

When this changes, the date at the top changes with it. If a change matters, meaning a new processor, a shorter or longer retention, or anything that widens what we do with your files, we will tell account holders rather than leave it to be noticed.

14. Contact

Write to us through the contact form. The terms of service cover the commercial side.