LightLoad Privacy Policy

1. Information We Collect

Account information. Your account is your verified email address. When you verify your email, we create your account and associate your renders, credits, and history with it. We store your email address to deliver results and service messages; for internal identification we use a keyed cryptographic hash of your normalized address.

Photos you upload. When you use the Service to visualize a project, you upload photographs (typically of your home or property). We remove embedded metadata (such as EXIF location data) from uploaded photos during processing.

Generated images. We store the AI-generated visualizations (“renders”) produced from your photos, along with related project information such as your markup and instructions.

Quote requests. If you request a quote from a contractor, we collect the contact information and notes you provide and deliver them — together with your photo and render — to that contractor.

Addresses. You may optionally save an address to find contractors near you; contractors provide a business address for directory placement. Addresses are converted to map coordinates by our geocoding provider and stored with your profile. Providing an address is never required to use the visualization features.

Contractor account information. Contractors provide business details and authenticate through our identity provider. Payment details are provided directly to our payment processor; card numbers never touch LightLoad’s systems.

Technical information. We process IP addresses transiently to enforce abuse and rate limits; our limit records store only bucketed hashes, not raw IP addresses.

2. How We Use Information

We use the information described above to:

• operate the Service — generate renders, deliver results, maintain your account, and route quote requests to the contractor you chose;
• process payments and maintain accurate credit records;
• protect the Service — bot protection, abuse and rate limiting, and content moderation of uploaded and generated images;
• improve and train our services and models — we may use uploaded photos and generated renders to improve LightLoad’s features and to train or fine-tune the models that power the Service (see Section 9 for your deletion rights);
• communicate with you as described in Section 6.

We do not use your content in our public marketing without your express permission for that specific use.

3. How We Share Information

With your contractor. The Service exists to connect you with a contractor: your renders, and — only when you request a quote — your contact information, photo, and notes, are shared with the contractor whose storefront you used. Contractors also see anonymous render activity (item and date), never your contact information without a quote request.

With service providers. We share information with vendors who process it on our behalf: hosting (Railway), file storage and bot protection (Cloudflare), AI image generation and content moderation (OpenAI — your photos and instructions are transmitted to OpenAI to produce your render), payment processing (Stripe), email delivery (Resend), contractor authentication (WorkOS), product analytics (PostHog — anonymous event data only, as described in Section 5), error monitoring (Sentry — with personal information removed), and address geocoding (Geoapify — address strings you provide).

We do not sell your personal information, and we do not share it with third parties for their own advertising purposes.

Legal. We may disclose information if required by law or to protect the rights, safety, or property of LightLoad, our users, or others.

4. Cookies and Browser Storage

We use a small, fixed set of cookies and browser-storage entries: session cookies that keep you signed in (30 days, revocable), short-lived records that let an in-progress project or purchase resume safely, and the cookies our bot-protection provider (Cloudflare Turnstile) sets to distinguish people from bots. We use no advertising cookies and no cross-site tracking.

5. Analytics and Error Monitoring

We measure product usage with exactly five anonymous events (storefront viewed, item clicked, upload started, render delivered, quote requested). These events carry no name, email, photo, or address — where an account is involved, only a cryptographic hash. We do not build individual behavioral profiles, and we do not record your screen or replay your sessions. Error reports sent to our monitoring service are scrubbed of emails, photo links, and other personal information before they leave our systems.

6. Communications

We send transactional email — render results, verification codes, receipts, and (for contractors) lead alerts — as part of operating the Service. We send marketing email only if you opt in, and every marketing message includes a working unsubscribe.

7. Data Retention

• Photos and renders are kept while your account exists, so your history remains available to you. They are deleted when you ask us to delete them or when your account is deleted.
• Emailed result links expire 72 hours after delivery; your account’s own view of a render persists.
• Unfinished projects (uploads never submitted for rendering) are deleted automatically after 24 hours.
• Quote/lead records are retained by LightLoad as business records; on your deletion request we remove your personal information from them.
• Payment and credit ledger records are retained as required for financial integrity; on account deletion they are de-identified, not erased.
• Anonymous analytics events and operational audit records are retained for business analysis and accountability.

8. Security

Uploads travel directly to our storage provider over encrypted connections using short-lived signed URLs; sessions are stored as keyed hashes and are revocable; access to renders requires either your account or a short-lived emailed link. No system is perfectly secure, but the Service is built so that a single leaked record reveals as little as possible.

9. Your Choices and Rights

• Access and export: email privacy@lightload.co and we will provide a copy of your data.
• Deletion: email privacy@lightload.co and we will delete your account and associated personal information.
• We complete these requests within 30 days.
• Marketing: opt out any time via the unsubscribe link in any marketing message.

10. Children

The Service is not directed at children and may not be used by anyone under 18. We do not knowingly collect information from children.

11. Changes to This Policy

We will post any changes to this page and update the effective date. For material changes, we will provide additional notice.

12. Contact

privacy@lightload.co