Privacy Policy

Last Updated: November 17, 2025

1. Introduction

Agent Lens ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Chrome extension and related services.

2. Information We Collect

2.1 Personal Information

When you sign in to Agent Lens, we collect:

• Email address: Used for authentication and account management
• Google profile information: If you sign in with Google, we collect your name, email, and profile photo
• Authentication tokens: Securely stored to maintain your session

2.2 Image Data

When you process images:

• Uploaded images: Property photos you submit for AI processing
• Processed images: AI-generated staged versions of your photos
• Comments: Optional text descriptions you provide for image processing

2.3 Usage Information

We automatically collect:

• Credit usage: Number of credits purchased and used
• Processing history: Records of images processed (stored for 3 days)
• Transaction data: Payment information through our payment processor
• Technical data: Browser type, device information, and timestamps

3. How We Use Your Information

3.1 Primary Uses

• Authentication: Verify your identity and maintain your account
• Image Processing: Process your images using AI technology
• Billing: Process payments and manage your credit balance
• Service Delivery: Provide access to processed images and history

3.2 Service Improvement

• Analyze usage patterns to improve our AI models
• Monitor service performance and reliability
• Develop new features and enhancements
• Troubleshoot technical issues

4. Data Storage and Retention

4.1 Storage Location

Your data is stored securely using:

• Supabase: Database, authentication, and file storage
• Cloud Storage: Temporary image storage in secure buckets

4.2 Retention Periods

• Account data: Retained while your account is active
• Images (original and processed): Stored for 3 days, then automatically deleted
• Transaction records: Retained for 7 years for legal compliance
• Usage logs: Retained for 90 days

5. Third-Party Services

We use the following third-party services:

5.1 Google OAuth

For authentication services. When you sign in with Google, their privacy policy applies. Visit Google Privacy Policy.

5.2 Supabase

For backend infrastructure, database, authentication, and storage. Visit Supabase Privacy Policy.

5.3 DodoPayments

For payment processing. We do not store your credit card information. All payment data is handled securely by DodoPayments.

5.4 AI Processing Services

piapi.ai and fal.ai: Your images are sent to these services for AI processing. Images are processed and returned, then deleted from their servers after processing completes.

5.5 Yandex Metrika

For website analytics to understand how visitors use our website. Visit Yandex Metrika Terms.

6. Data Security

We implement industry-standard security measures:

• Encryption: All data transmitted using HTTPS/TLS
• Secure storage: Encrypted databases and storage buckets
• Access controls: Limited access to personal data
• Authentication: Secure OAuth 2.0 and OTP authentication
• Regular updates: Security patches and system updates

7. Your Rights (GDPR Compliance)

If you are in the European Economic Area (EEA), you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured format
• Objection: Object to processing of your data
• Restriction: Request limited processing of your data

To exercise these rights, contact us at support@tasksite.app

8. Children's Privacy

Agent Lens is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Know what personal information is collected
• Know whether personal information is sold or disclosed
• Say no to the sale of personal information
• Access your personal information
• Request deletion of personal information
• Not be discriminated against for exercising these rights

Note: We do not sell your personal information to third parties.

10. Cookies and Tracking

The Agent Lens Chrome extension uses local storage to:

• Maintain your authentication session
• Cache your credit balance (for 5 minutes)
• Store processing style preferences

Our website uses Yandex Metrika cookies for analytics. You can disable tracking through your browser settings or using opt-out tools.

11. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses (SCCs)
• Privacy Shield frameworks where applicable
• Other legally approved transfer mechanisms

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting a notice in the extension or on our website
• Sending an email notification (for material changes)

Your continued use of Agent Lens after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

14. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract Performance: To provide the services you've requested
• Legitimate Interest: To improve our services and prevent fraud
• Consent: When you opt-in to optional features or communications
• Legal Obligation: To comply with applicable laws and regulations

15. Data Breach Notification

In the event of a data breach that may affect your personal information, we will:

• Notify you within 72 hours of discovering the breach
• Inform relevant supervisory authorities as required by law
• Provide details about the breach and steps taken to mitigate it
• Offer guidance on protecting your account and data