Privacy Policy

This Privacy Policy describes how Allur Real Estate Media ("Allur," "we," "us," or "our") collects, uses, and shares personal information when you use www.allurmedia.com and the related services (the "Services"). It applies to listing agents and their teams, Photo Lab users, photographers who apply to work with us, people who book a shoot, visitors to a public listing page, and anyone who contacts us.

This Policy is part of our Terms of Service. If you do not agree with it, do not use the Services.

1. Information We Collect

Account and profile

If you create an account, we collect:

• name, email address, and a password, which we store only in hashed form;
• phone number, if you provide one;
• a profile photo, if you upload one; and
• the fact that an account is a guest session, a client, a photographer, or an administrator.

A guest session is tied to the email address used to start it. It is not a full account until you set a password.

Brand kit

If you save a brand kit, we collect your brokerage name, real-estate license number (such as a California DRE number), phone number, brand color, logo, and headshot. We use those assets on listing pages and marketing files you generate. We do not place your logo or headshot on the MLS originals package.

Listing campaigns

When you create a listing, we collect the information you enter and the files you upload, including:

• property address, unit, and coordinates derived from that address;
• property type, beds, baths, square feet, price, and market status;
• photographs and other media, which must be JPEG for listing photos;
• copy you write or edit, including MLS remarks, headlines, descriptions, and captions; and
• your choices about which photos are hidden, which edits you apply, and when a page is published.

Photo Lab

When you use Photo Lab, we collect the photographs you upload, your selected enhancement type and settings, any instructions you submit, generated images and previews, automated review findings, job status, and associated account identifiers and timestamps. Photographs may contain personal information about occupants or other individuals, property interiors, or information embedded in the uploaded file. Do not upload content you are not authorized to provide or include sensitive personal information in enhancement instructions.

We maintain credit balances and records of promotional grants, reservations, completed enhancements, credit restorations, purchases, refunds, reversals, and administrative adjustments. To prevent repeated introductory allowances, we derive and store a one-way hash of a normalized verified email address. Normalization may treat recognized aliases as the same mailbox. This identifier is pseudonymous rather than necessarily anonymous and may be retained separately from the account record for the fraud and abuse-prevention purposes described in this Policy.

Photography bookings

If you book a shoot, we collect the property address, requested dates and times, property type, package, add-ons, access notes, and, for a guest booking, your name and email address. If a photographer is assigned, we share the details that person needs to perform the shoot.

Photographer applications

If you apply to photograph for Allur, we collect your name, email address, phone number, biography, service area, equipment, portfolio address, and credentials you choose to submit, such as an FAA certificate number.

Contact and chat

If you use the contact form, we collect your name, email address, phone number if you provide one, and your message. Live chat on our public marketing pages is provided by Crisp. Crisp may receive your IP address, the pages you visit on those pages, and the messages you send in the chat. Chat is not loaded on public listing pages or in the admin area.

Inquiries from a listing page

If you submit the form on a published listing page, we collect your name, email address, phone number if you provide one, your message, and whether you arrived from the page or from the listing QR code. We store that inquiry and email it to the listing agent. We also keep it in that agent's campaign. Do not include sensitive information, such as a Social Security number or a financial account number, in a message.

Listing activity

When someone other than the listing agent opens a published listing page, or follows its QR code, we count that view or scan. To avoid counting the same browser repeatedly within 24 hours, we store a one-way hash derived from the IP address, browser type, and listing. We do not store the raw IP address in that activity record, and we do not use these counts for advertising. The agent can see the totals. If the agent creates a seller-report link, anyone with that link can see the property address, a headline, a lead photo, and the same totals. The report does not include an inquirer's name, email, phone number, or message.

Information collected automatically

When you use the Website, we or our service providers may receive:

• browser type, device type, and operating system;
• IP address, which our host and security tools may use for security and rate limits;
• the page address and the time of the request; and
• error and diagnostic data if a page fails.

We do not use advertising cookies, advertising pixels, or cross-site behavioral advertising.

2. How We Use Information

We use personal information to:

• create and secure your account, including email verification, sign-in, and password reset;
• run a listing campaign: organize media, produce a readiness check, draft copy, apply edits you request, and build files you download;
• provide Photo Lab enhancements, conduct automated image reviews, maintain enhancement history, and deliver previews and downloads;
• administer free and purchased image credits, prevent duplicate trial claims, verify purchases, and reconcile refunds and payment disputes;
• publish, unpublish, and host a listing page you approve;
• deliver buyer inquiries to the listing agent and show the agent activity counts;
• schedule, perform, and deliver a photography booking, including assignment to a photographer;
• process payments and refunds for Photo Lab credits, subscriptions, and photography bookings;
• send transactional email about your account, a campaign, a booking, or an inquiry;
• respond to a contact form or chat;
• detect abuse, fraud, and security incidents; and
• comply with law and enforce our Terms.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not use it to train a general-purpose model of our own. Where an artificial-intelligence provider processes content to perform a feature, that processing is described in Section 4.

3. Public Listing Pages

A listing page shows the property information, photographs, copy, and agent branding that the agent chooses to publish. Anyone with the link can view it. Publishing is the agent's instruction to make that material public. Visitors should not send sensitive personal information through the inquiry form. The inquiry goes to the listing agent, who is responsible for how they use it after they receive it.

4. Media Analysis, Edits, and Draft Copy

We use Google's Gemini API to operate listing and Photo Lab features. Google receives the content needed for the task and does not receive your password or payment card.

• Photo analysis. When you upload listing photographs, we send those images to Google so the Services can identify rooms, note visible issues, and suggest whether a photo is a candidate for staging or decluttering.
• Image edits. When you request virtual staging, digital decluttering, virtual twilight, sky replacement, or another digital edit, we send the selected photograph and your instructions to Google to generate and review the edited image. This includes Photo Lab requests that are not associated with a listing. Edited files that you include in a listing's MLS package are visibly labeled; Photo Lab provides labelled and unlabelled download options.
• Draft copy. When we draft or refresh listing copy, we send the property address, city, property type, beds, baths, size, price, room labels and visible features, nearby place names, image-edit disclosures, and any copy already saved on the listing. We do not send your account password.

Photo Lab uploads and results are stored in private object storage and are made available through account-authorized access and time-limited links. They are not automatically added to a public listing or marketing gallery. Authorized personnel and service providers may access them as reasonably necessary to provide support, investigate abuse, secure the Services, or comply with legal obligations. A recipient of a download or an access link may be able to retain a copy. We do not use your uploaded photographs or generated results in Allur's own public advertising without your authorization.

Google's handling of that content is governed by Google's terms and privacy policy. Nearby place names are looked up from the listing's coordinates through Mapbox, using categories such as school, grocery, park, and coffee. That lookup uses the property location, not the location of your phone or computer.

5. How We Disclose Information

We disclose personal information to:

• The listing agent, when a visitor submits an inquiry, and when we show that agent their own campaign, files, and activity counts.
• A photographer we assign, to the extent needed to perform a booked shoot, such as the property address, time, and access notes.
• Service providers who process information on our instructions, listed in Section 6.
• Authorities and advisors, when we believe disclosure is required by law, legal process, or a request from a government authority, or is necessary to protect the rights, safety, and security of Allur, our users, or the public.
• A successor, if we are involved in a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this Policy or give you notice of a material change.

We may also disclose information at your direction — for example, when you publish a page, download a file, or share a seller-report link.

6. Service Providers

• Stripe — payment processing for Photo Lab credit purchases, subscriptions, and photography bookings, including optional storage and reuse of payment methods as described in Section 7. Privacy policy
• Resend — delivery of transactional email. Privacy policy
• Cloudinary — storage and delivery of photos, video, logos, headshots, and other files. Cloudinary may process files outside your country of residence. Privacy policy
• Cloudflare R2 — object storage for uploaded photographs, generated images, previews, and download derivatives, including private Photo Lab media. Privacy policy
• Mapbox — address suggestions while you type, and nearby-place lookup from a listing's coordinates. Privacy policy
• Google — Gemini, for the analysis, edits, and draft copy described in Section 4, Google Analytics 4, for website usage measurement, and Google Fonts, which your browser requests when it loads our pages. Privacy policy
• Crisp — live chat on our marketing pages, not on listing pages. Privacy policy
• Sentry — error monitoring. Sentry may receive diagnostic data such as a stack trace, browser type, and the page address. A page address can occasionally contain a one-time token. We do not use Sentry for advertising. Privacy policy
• Cloudflare Turnstile — bot checks on the contact form, listing inquiry forms, account creation, guest checkout, and photographer registration. Cloudflare may receive device and browser signals, and we send the IP address so Cloudflare can verify the check. Privacy policy
• Telegram — operational notices to our team about photography bookings, which can include the client email, property address, package, and amount. They do not include a payment card number. Telegram is not used for listing-page inquiries. Privacy policy

The Website may link to sites we do not operate. Their privacy practices are their own.

7. Payment Data

Stripe processes payments for Photo Lab credits, subscriptions, and photography bookings. Payment-card details entered in Stripe's payment interface are transmitted directly to Stripe. Allur does not store full payment-card numbers or card security codes on its servers. We provide Stripe with account information necessary to associate a transaction with you, such as your name, email address, and internal account or order reference.

We retain transaction and reconciliation information, including account and order identifiers, Stripe customer and payment references, purchased credit quantities, amounts, currencies, payment status, and refund or dispute records. Where available, we may receive and display limited payment-method information, such as card brand, last four digits, and expiration date, to identify a saved method. These records are used for fulfillment, accounting, customer support, fraud prevention, and disputes.

If you choose to save a payment method during Photo Lab checkout, Stripe retains the method and associates it with the Stripe customer record linked to your Allur account so it can be offered on future purchases. Selecting this option is voluntary and is not required to purchase credits. It does not itself authorize automatic Photo Lab purchases. Questions or requests concerning a saved method may be directed to hello@allurmedia.com. Stripe also processes payment and device information under its own privacy policy, including for security and fraud prevention.

8. Cookies and Similar Technologies

We use cookies and local storage that are needed to run the Services:

• an HTTP-only cookie that keeps a signed-in session. It is not readable by page scripts, and it is rotated when the session refreshes;
• local storage for session state in the browser; and
• a functional cookie that Cloudflare Turnstile may set after a successful bot check on a form.

Stripe may also use cookies or similar technologies when its payment interface is loaded, including to complete payments and prevent fraud. These functional technologies support sign-in, payments, booking, and forms. Blocking them may limit those features. We do not use advertising cookies.

We also use Google Analytics 4 to measure use of the Website. Its script loads following a user interaction or a delay after page load. Google may receive the page URL, referring page, browser and device information, and information associated with analytics cookies or similar identifiers. This measurement is separate from the listing activity counts described in Section 1. Your browser settings or content-blocking tools may restrict these technologies. Google's privacy policy describes its processing of this information.

9. Communications

We send transactional messages that are part of the Service, such as email verification, password reset, booking confirmation, shoot updates, campaign notices, and inquiry notifications to the listing agent. You cannot opt out of those messages while the account, booking, or published page they concern is active.

Promotional email, if we send it, includes an unsubscribe link. You may also email hello@allurmedia.com. We honor opt-out requests, though a message already queued may still arrive. Unsubscribing from promotional email does not stop transactional messages.

10. Retention and Account Closure

We keep personal information for as long as your account is active and as needed to provide the Services, comply with law, resolve disputes, prevent fraud, and enforce our agreements. Photo Lab purchase records, credit ledgers, refund and dispute records, photography booking records, and invoices may be retained for accounting, tax, security, and legal purposes after the relevant service or account relationship ends.

Photo Lab does not currently provide individual enhancement deletion controls. Closing an account disables access but does not immediately erase stored images, history, or financial records. You may request deletion of personal information using the contact details below. Subject to applicable law, we retain the normalized-email trial identifier for as long as reasonably necessary to prevent repeated promotional claims and fraud. That retention does not waive any applicable privacy right. We assess retention according to the purpose of collection, service requirements, legal obligations, outstanding disputes, and security needs; backup copies are deleted or overwritten in the ordinary course.

You may close your account from Account Settings. Closing the account signs you out and marks the account closed so it can no longer be used to sign in. You may also email us to request deletion of personal information. We will delete or de-identify information we are not required to keep. We may retain records required for legal, tax, security, and dispute-resolution purposes, and we may retain a listing or booking record tied to a completed transaction. Closing an account does not, by itself, recall a listing page that other people have already viewed or a file you have already downloaded and shared.

11. Security

We use HTTPS for the Website and our API. Passwords are hashed. Payment card numbers are handled by Stripe and are not written to our database. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a unique password and tell us if you believe your account has been compromised.

12. California Privacy Rights

This section applies to California residents. It supplements the rest of this Policy. In the last 12 months we have collected the categories of personal information described above, which correspond to these categories in the California Consumer Privacy Act, as amended by the CPRA:

• identifiers, such as name, email address, phone number, IP address, and account records;
• commercial information, such as Photo Lab credit purchases, enhancement and credit activity, subscriptions, photography packages, prices, and refund records;
• professional information, such as brokerage, license number, and photographer credentials;
• internet or network activity, such as a page request, a hashed listing-page view, and a QR scan;
• visual information, such as uploaded and enhanced Photo Lab images, listing photographs, logos, headshots, and avatars;
• geolocation derived from a property address you enter, not continuous tracking of your device; and
• inferences drawn from a photograph in order to label a room or flag a quality issue.

We collect these categories from you, from your browser, and — if you inquire on a listing page — from the form you submit. We disclose them for a business purpose to the service providers in Section 6, to a listing agent when you send that agent an inquiry, and to a photographer assigned to a shoot. We do not sell personal information, and we do not share it as "share" is defined in the CCPA. We do not use or disclose sensitive personal information for purposes that would give you a right to limit that use under the CCPA. Please do not send us Social Security numbers, driver's license images, or financial account numbers.

Subject to exceptions in the law, a California resident may request that we:

• Know and access the categories and specific pieces of personal information we hold about you;
• Delete personal information we collected from you;
• Correct inaccurate personal information; and
• Not discriminate against you for exercising these rights. We will not deny the Services, charge a different price, or provide a different level of service because you exercised a privacy right.

To make a request, email hello@allurmedia.com with the subject line "California privacy request." We will verify the request by matching the information you provide to information we already hold, such as your email address and listing or booking details. An authorized agent may submit a request with proof of authorization and, where the law allows us to require it, verification of your identity. We will respond within 45 days. If we need more time, we will tell you why and may take up to 45 additional days when the law permits.

You may also close your account from Account Settings, as described in Section 10. We may deny a deletion request where the law allows us to retain the information, including to complete a transaction, to detect security incidents, to comply with a legal obligation, or to make or defend a legal claim.

13. Children

The Services are not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe we have, email us and we will delete it.

14. Changes to This Policy

We may update this Policy as our practices or the law change. We will post the revised Policy on this page and change the date above. If a change materially reduces your rights, we will provide a more prominent notice, such as an email to the address on your account or a notice on the Website, before the change takes effect where that is reasonable.

15. Contact Us

Privacy questions and requests may be sent to:

Allur Real Estate Media
hello@allurmedia.com