Privacy policy

Last updated 26 September 2026

Terms of useHome

1. Who we are

COMMERCE COLLECTIVES PTY LTD (ABN 57 669 401 432) (“we”, “us”) operates this service. For privacy questions, access requests and complaints, email privacy@livedinlook.com.

We follow the Australian Privacy Principles even where a small business exemption might otherwise apply. If that changes, this policy still describes what we do.

2. What we collect

Account details

When you sign in with Google we collect:

• your name;
• your email address;
• your Google account identifier;
• your Google profile image, if Google provides one.

We only create an account when Google has verified the email address.

Billing details

If you subscribe or buy a credit pack, we store a Stripe customer identifier, your plan, billing interval, subscription status, renewal timing, and credit balances. Stripe collects your card or other payment details. We do not store your full card number.

Listings and photos

To stage a property we collect what you choose to give us:

• property address;
• room labels;
• style preset and any custom styling instructions;
• the photos you upload;
• the previews and 4K images we generate.

A property address, joined with your account, is personal information. A photo is personal information if it shows a person or if it can reasonably identify someone. Please do not upload photos of people, identity documents, or other sensitive information. We do not ask for sensitive information such as health information, and we do not want it in a listing.

Technical logs

Our hosting provider may record technical logs when you use the service, such as IP address, browser type, and the pages or API routes requested. We use those logs to run, secure and debug the service. We do not use a separate advertising or analytics product.

3. How we collect it

We collect personal information:

• directly from you, when you sign in, enter a listing, upload a photo, or pay;
• from Google, when you choose “Continue with Google”;
• from Stripe, when a payment or subscription event tells us to update your account;
• from our own generation process, which creates the staged images stored on your listing.

If we receive personal information we did not ask for, and we are not allowed to keep it, we will destroy or de-identify it where it is lawful and reasonable to do so.

4. Why we collect, hold, use and disclose it

We use personal information to:

• create and secure your account;
• provide virtual staging, including previews, regenerations and 4K exports;
• take payment, manage subscriptions and credit balances, and prevent fraud;
• show you your listings and billing status;
• respond to support, access and privacy requests;
• keep the service reliable and investigate misuse;
• meet legal, tax and accounting duties.

We do not sell or rent personal information. We do not use your photos or prompts to market third-party products.

5. How we hold it

Account, listing and billing records are stored in a MongoDB Atlas database. Photos and generated images are stored with Vercel Blob. The service on the public internet is provided over HTTPS.

Image files are stored at web addresses. Those addresses are not listed publicly by us, but they are not a login-protected vault: anyone who has an image address can open that file. Do not upload an image if you need it to stay confidential from anyone who might obtain the address.

We keep personal information while your account is open and we need it to provide the service. We also keep billing and transaction records for as long as Australian tax and corporation record-keeping rules require, which is generally five years. When information is no longer needed, we delete it or de-identify it, unless the law requires us to keep it.

6. Who we share it with, including overseas

We disclose personal information to service providers who help us run Lived-In Look. Some of those providers are outside Australia. The kinds of recipients, and the countries we expect them to handle information in, are:

• Google (United States, and other countries where Google operates) for sign-in, and as a possible model provider for image generation.
• Stripe, including Stripe Payments Australia (Australia and the United States), for payments, subscriptions, invoices and the billing portal.
• Vercel (United States) for hosting the application and storing image files.
• MongoDB Atlas (the region configured for our database, which may be outside Australia, including the United States) for account and listing records.
• OpenRouter, and the model providers it routes to, including OpenAI and Google (United States, and other countries where those providers operate), to generate and upscale staged images.

Before we disclose personal information overseas we take reasonable steps to see that the recipient handles it consistently with the Australian Privacy Principles. Those steps include choosing established providers and relying on their published privacy and security terms.

Image generation is a specific overseas disclosure. To create a staged photo we send the photo, the property details you entered for that listing, and your style instructions to overseas artificial intelligence providers. We do not control those providers’ systems. If you upload a photo or start a generation, you consent to that disclosure. Australian Privacy Principle 8.1 will not apply to that disclosure, which means we may not be able to ensure the provider handles the information in line with the Australian Privacy Principles. Do not upload a photo if you do not agree to that.

We may also disclose personal information if the law requires it, or if it is reasonably necessary to investigate suspected unlawful activity or to establish or defend a legal claim.

7. Marketing

We do not send our own marketing email. Stripe may send receipts and billing notices about payments you make. If we later send commercial electronic messages, we will comply with the Spam Act 2003 (Cth): we will identify ourselves, say how to contact us, and include a working unsubscribe.

You can use the service without agreeing to marketing. We do not make consent to marketing a condition of an account.

8. Cookies

We use a sign-in cookie so you stay logged in. It is a session cookie set by our authentication system. It is not an advertising cookie, and we do not use it to track you across other sites. You can block cookies in your browser, but sign-in will not work if you do.

9. Access and correction

You can see your listings, photos and billing status while you are signed in. You can ask us for access to other personal information we hold about you, and you can ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading.

Email privacy@livedinlook.com with the request. We may need to confirm you are the account holder before we act. We aim to respond within 30 days. If we refuse access or correction, we will tell you why, unless the law says we should not, and we will explain how to complain.

Your name, email and profile image come from Google. Changing them in your Google account and signing in again updates the copy we hold. Changing a listing in the product updates the address, style and room details we hold for that listing.

10. Deletion

You can ask us to delete your account and the listings and images stored against it. We will delete that material unless we need to keep a record for tax, billing, security, or to establish or defend a legal claim. Download images you want to keep before you ask us to delete the account. Closing an account is also covered in the terms of use.

11. Security and data breaches

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Those steps include encrypted connections on the public internet, account-based access to listings, and leaving card data with Stripe. No method of storage or transmission is completely secure.

If we have reasonable grounds to believe an eligible data breach has occurred under the Notifiable Data Breaches scheme, we will assess it promptly and, where the scheme requires, notify the Office of the Australian Information Commissioner and the people affected. The notice will describe the breach, the kind of information involved, and the steps we recommend you take.

12. Complaints

If you think we have handled your personal information in a way that breaches the Australian Privacy Principles, email privacy@livedinlook.com. Tell us what happened and how we can contact you. We will acknowledge the complaint and aim to respond with an outcome within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

13. Children

Lived-In Look is a paid service for adults working with property listings. It is not directed at children, and we do not knowingly create accounts for anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

14. Changes to this policy

We may update this policy when our practices change. The new version will be posted on this page with a new date. If a change is significant, we will take reasonable steps to let account holders know, such as a notice in the product.

15. Contact

COMMERCE COLLECTIVES PTY LTD
Email: privacy@livedinlook.com