1. Privacy at a Glance

General Notes

The following notes provide a simple overview of what happens to your personal data when you visit our website or use our service via WhatsApp. Personal data is any data that can be used to personally identify you.

Data Collection on Our Website and via WhatsApp

The data processing on this website and through our WhatsApp service is carried out by the website operator. You can find their contact details in the „Information on the Controller“ section of this privacy policy.

Your data is collected, on the one hand, when you provide it to us. This includes, for example, photos and messages that you send us via WhatsApp. Other data is collected automatically or with your consent when you visit the website by our hosting provider’s IT systems (e.g., IP address, browser, or time of the page view).

2. General Information and Mandatory Information

Controller

The controller responsible for data processing is:

OHDE MEDIA LLC
1209 Mountain Road PL NE STE N
Bernalillo County
Albuquerque, NM, 87110, USA

Email: info@lumestate.net

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, email addresses, phone numbers, image data).

Storage Period & Image Data Deletion

Your master data (phone number, language preferences, and credit balance) as well as your transaction history will be stored as long as your user account is active. If you request the deletion of your account, this data will be deleted, provided that no statutory retention periods (e.g., under tax law for billing data) prevent deletion.

A strict security rule applies to your photos: All image files and consolidated ZIP files submitted or generated via WhatsApp are temporarily stored on our secure servers to allow you to download them. To maximize your privacy, all these files are completely and irretrievably deleted from our systems exactly 24 hours after your request has been processed. Permanent storage of your property photos does not take place.

Your Rights (Data Subject Rights)

You have the right at any time to:

  • Receive information free of charge about the origin, recipient, and purpose of your stored personal data.

  • Request the correction or deletion of this data.

  • Revoke any consent given for data processing at any time for the future.

  • File a complaint with the competent supervisory authority.

3. Data Processing When Using Our WhatsApp Service

Our primary service (image editing and virtual staging) is handled via the messenger service WhatsApp.

WhatsApp Business Cloud API (Meta Platforms Ireland Ltd.)

We use the official WhatsApp Business Cloud API. The provider is Meta Platforms Ireland Access Industries, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When you send us a message or photos via WhatsApp, your phone number, your WhatsApp profile name, and the content of the message (text and image files) are processed on Meta’s servers. Meta also transfers data to its parent company, Meta Platforms Inc. in the USA. Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses and the EU-US Data Privacy Framework.

The use of WhatsApp is based on Art. 6 (1) (b) GDPR (performance of a contract and pre-contractual measures), as you send us the images for processing within the framework of a user relationship.

4. Automation and Infrastructure (Make.com)

Celonis (Make.com)

To automate our workflows, verify your credit balance, and forward the image data to the AI interface, we use the Make.com platform (Provider: Celonis Inc., 11 Avenue of the Americas, New York, NY 10036, USA / Celonis SE, Theresienhöhe 28, 80339 Munich, Germany).

Make processes the incoming image data, texts, and your phone number from WhatsApp on our behalf. Data processing is based on Art. 6 (1) (b) GDPR. We have concluded a Data Processing Agreement (DPA) including EU Standard Contractual Clauses with Celonis. Permanent storage of your photos on Make’s servers does not take place.

5. Image Processing and AI Services

Google Gemini API (Google Ireland Limited)

In order to optimize the photos you submit (e.g., sky replacement, brightness correction) or to perform virtual staging, the image files are transmitted via an API interface to the Google Gemini API service.

The provider for users in the European Economic Area (EEA) is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the data on secure servers. Insofar as data is transferred to the USA, Google relies on the EU-US Data Privacy Framework and standard contractual clauses.

Only the raw image data and, if applicable, your text-based editing instructions are transmitted. No personal data such as your phone number or name is shared with Google. Processing serves to fulfill the contract concluded with you (Art. 6 (1) (b) GDPR).

Important for your privacy: Under the commercial Google Gemini API interface we use (Google Cloud Enterprise Terms), it is contractually guaranteed that your uploaded photos and prompts are not used to train Google’s AI models.

6. Payment Service Providers

Stripe

If your credit balance is exhausted, you can top up your account directly via a secure payment link provided in WhatsApp. Payment processing is handled by the payment service provider Stripe (Stripe Payments Ireland, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland).

For the purpose of payment, your payment data (e.g., credit card details, selected credit amount) is processed directly by Stripe. We only receive an automated confirmation of successful payment from Stripe in order to unlock your credits in our database. The transfer of your data to Stripe is based on Art. 6 (1) (b) GDPR (performance of a contract).

7. Data Collection on Our Website (Hosting)

STRATO

Our website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

When you visit our website, STRATO automatically collects so-called server log files (including your IP address, date and time of access, browser type, and the operating system used). This is technically necessary to display the website to you in a stable, performant, and secure manner. The processing is based on our legitimate interest in the error-free provision of our website (Art. 6 (1) (f) GDPR). We have concluded a Data Processing Agreement (DPA) with STRATO.