Privacy Policy

This policy explains what FinishProof collects, why, and what we deliberately do not collect. The short version: your part photos are processed entirely in your browser and are not uploaded unless you explicitly save a job to the cloud or send a proposal.

Photos & designs

All photo editing and AI segmentation run locally in your browser. Photos never touch our servers during editing. Two explicit actions store content with us: (1) saving a job to the cloud stores that job's photos and design in your account so you can reopen it; (2) sending an approval link stores the rendered mockup images so your customer can view them. Deleting a job or account removes that stored content.

What we collect

• Account data: email, shop name, hashed password (scrypt — we cannot read it).
• Shop profile: contact line, logo, and defaults you choose to save.
• Proposals: job titles, customer names you enter, pricing, mockup images, and customer responses.
• Payments: handled by Stripe. We never see card numbers; we store Stripe identifiers and subscription status.
• Product events: anonymous milestones (e.g. "a photo was added") with no photo data or content, used to improve onboarding, plus basic page-view counts and the referral source you arrived from.
• Support: messages and chat transcripts you send to support.

What we don't do

• No selling or sharing of personal data with data brokers or advertisers.
• No third-party advertising trackers or cross-site tracking cookies.
• No training AI models on your photos or designs.

Cookies

We use one essential cookie: your sign-in session. Preferences (like dismissed tips) live in your browser's local storage and stay on your device.

Service providers

Stripe (payments and deposit payouts), Resend (transactional email such as password resets and approval notifications), our hosting provider, and Hugging Face's CDN (your browser downloads the AI model files from there; no photo data is sent). Each processes data only to provide their service.

Your customers' data

When your customer opens an approval link, we process the name and comments they submit and, if they pay a deposit, Stripe processes their payment. We act as a processor of that information on your behalf; it is visible to you and used for nothing else.

Retention & deletion

Data is retained while your account is active. You can delete jobs anytime; account deletion (via support) removes your account data within 30 days, except records we must keep for legal or accounting reasons.

Security

Passwords are scrypt-hashed, sessions are httpOnly cookies, traffic is encrypted in transit, and the database is backed up automatically. No system is perfectly secure; report concerns via support and we'll respond quickly.

Changes & contact

Material changes will be announced in the app or by email. Questions or data requests: use the in-app support chat.