Privacy Policy

Last updated: August 14, 2026

Stager Tech ("we," "us," "the app") is software for professional home stagers and their teams. We help you manage projects, inventory, proposals, invoices, crew check-ins, and staging workflows. This policy explains what we collect, why, and how to remove your data.

Data we collect

  • Account info. Email address, password, and display name. Passwords are hashed by our authentication provider — we never see them in plaintext.
  • Project + business data you enter. Projects, addresses, inventory items, accounts, contacts, proposals, invoices, tasks, comments, damage reports, and similar records. Stored in the cloud under your account.
  • Photos you take in-app. Inventory and crew check-in photos. Stored under your account. If you use an AI feature on a photo (for example, identifying a piece of furniture from a picture), that photo is sent to Anthropic to produce the result — see "Sharing" below.
  • 3D room scans (iOS). On supported iPhones and iPads the app can use Apple's RoomPlan framework to capture the geometry of a room. The result is a 3D model file of the interior of a private residence; it is uploaded to our cloud storage, attached to the project, and shown on the web and — if you choose to share it — on a client-facing page. We do not use scan data for advertising, marketing, or data mining, and we do not use it to train machine-learning models.
  • Your clients' and crew's information. When you add a client, contact, or crew member, or when someone opens a proposal, invoice, contract, or client-portal link you sent, we store what that record contains and what they did with it: names, email addresses, phone numbers, property addresses, the drawn signature image and typed name captured when a document is signed, together with the signing record we keep as evidence of that signature — the IP address the signing request came from, the browser user-agent string, the email address we had sent the document to, a fingerprint (SHA-256 hash) of the exact document content that was on screen at the moment of signing, and, for a counter-signature, the signed-in account that made it — and how many times a document was opened along with the timestamps of those views, of acceptances, and of payments. You are responsible for having a basis to give us this information; we process it on your behalf.
  • Email from a connected mailbox. If you connect Gmail, we store copies of incoming client email in your workspace: the sender, the recipients, the subject line, the full message body, and the file name, type, and size of any attachments. We also store an AI-generated category and one-line summary for each message. Unmatched mail that looks like a new enquiry is stored as a Lead Inbox card holding the sender's name, email address, subject, and that summary. See "Google Gmail" under Sharing.
  • Submissions to your public pages. When someone fills in your lead form, requests a booking, or joins a waitlist, we store what that form asked for — which commonly includes name, email address, phone number, property address, staging dates, expected list price, room list, uploaded photos, and how they heard about you — together with the IP address of the submission, which we record to rate-limit abuse.
  • Device token for push notifications. If you allow notifications on iOS, a Firebase Cloud Messaging / APNs token is stored for that device so we can deliver pushes to it.
  • IP address. The IP address of requests to our public document and portal links is recorded to rate-limit abuse and is written to our server logs. When someone signs a document, their IP address and browser user-agent are also stored permanently as part of that document's signing record, so the signature can be evidenced later. IP addresses are never linked to an advertising profile.
  • Location (iOS only, when granted). If you opt in, crew check-ins are tagged with a single coarse location reading (accuracy target about 100 metres) taken at the moment of check-in, so your team can see where on-site work happened. We do not run background or continuous location tracking. If you deny location, the check-in is still recorded, without coordinates. Optional and revocable in iOS Settings.
  • Calendar (iOS only, when granted). Install and destage dates can be added to your calendar. Optional and revocable in iOS Settings.
  • Notifications (iOS only, when granted). Some reminders for installs and tasks are scheduled and shown entirely by your device. We also send remote push notifications from our servers — for example, when you are assigned to a job — through Firebase Cloud Messaging and Apple Push Notification service. Optional and revocable in iOS Settings; the stored device token is deleted when it is revoked or stops being valid.

We do not collect advertising identifiers, third-party analytics, contacts, microphone audio, or browsing history. We do store an image of a handwritten signature when a signer chooses to draw one; we store it only to display and evidence the signed document, and we do not analyse signature dynamics, use signatures for identity verification or biometric matching, or share them with anyone other than the parties to the document. We do not track whether an email we send on your behalf was opened.

Where data is stored

All cloud data is stored with Firebase (a Google Cloud service), our backend provider. Firebase processes data on our behalf under Google Cloud's data processing terms. Our infrastructure runs on Google Cloud. Our service providers may process information in other countries under their own contractual and legal safeguards.

Sharing

We do not sell your data, and we do not share it with anyone for advertising. Data is shared only with the people you choose and with the service providers below, each of which receives only what that feature needs and processes it under its own privacy policy:

  • Anyone you share a link with. Each share link carries a long random token that acts as the key: anyone who has the link can open the page, there is no password, and links do not expire. A page shows only the content you chose to include and does not expose other parts of your account — but be deliberate about what you include, because some pages can carry sensitive detail (a pull list can display a property's lockbox or alarm code; a crew page can display crew names, notes, photos, and approximate locations). You can revoke a proposal link, a Smart File link, or a client-portal link at any time from inside the app; revoking stops the public page without deleting the document, the signature, or the payment history, and can be undone. Scene links, pull lists, crew pages, and calendar feeds cannot be revoked individually today.
  • Firebase / Google Cloud — hosting, authentication, database, and file storage. Receives everything stored in your account. Necessary for the service to function.
  • Anthropic (Claude) — the AI features. When you use one, the text and files it works on are sent to Anthropic's API: proposal and follow-up drafting sends your project, client, and line-item details; photo recognition sends the photograph; template and contract import sends the document you uploaded. If you connect a Gmail mailbox, the sender, subject, and first 3,000 characters of each new incoming message are sent to Anthropic automatically — roughly every ten minutes, whether or not you are signed in — so we can label it with a category and a one-line summary and surface new enquiries in your Lead Inbox. Apart from that, nothing is sent to Anthropic unless you use an AI feature. Anthropic processes all of it as our provider under its commercial API terms and does not train on it.
  • Mapbox — address autocomplete, geocoding, and drive-time estimates. Receives the address text you type into an address field, and the start and end coordinates of a route when the app estimates travel time between a warehouse and a job site.
  • RentCast — property lookup. Receives a property address, and returns beds, baths, square footage, and listing details we use to prefill a project.
  • Google Maps — Street View and map imagery. Receives the full street address of a looked-up property in order to find and render its exterior photo.
  • OpenStreetMap Foundation — map tiles on the projects map. Your browser loads these directly from OpenStreetMap's tile servers, which means those servers see your IP address and the map area you are looking at.
  • Resend — email delivery. Receives the recipient address and the contents of emails the app sends on your behalf (proposals, invoices, reminders, automations).
  • Google Gmail — only if you connect your own Gmail account. We ask Google for two permissions: permission to send mail as you (gmail.send), so proposals and invoices come from your real address and land in your Sent folder, and permission to read messages in that mailbox (gmail.readonly). Our servers check the connected mailbox for new incoming mail roughly every ten minutes, on a schedule, including when you are not signed in. A message that matches one of your projects is copied into that project's email history — sender, recipient, subject, full body, and attachment details. A message that matches nothing is not copied in full, but if our AI classifier judges it a lead, a question, or a scheduling request, we create a Lead Inbox card holding the sender's name and email, the subject line, and a one-line summary. Disconnecting deletes the stored access and refresh tokens and stops all future access; it does not delete messages already copied into your workspace — email help@stagertech.com to have those removed. You can also revoke access at myaccount.google.com/permissions.
  • Stripe — payments. Two separate things happen here. For your own subscription, Stripe receives your email, name, plan, and internal account references and returns a customer ID and subscription status. Separately, if you choose to collect payments from your own clients, we ask Stripe to create a Stripe connected account in your name and send Stripe your email address to start it; Stripe then collects your business details, bank account, and government identity documents directly, and we never see them. We store the resulting Stripe account ID, the email on it, whether charges and payouts are enabled, and the date you connected, and we keep a private index linking that Stripe account ID to your workspace so Stripe's account-status notifications can be matched to it. When one of your clients pays, we send Stripe the amount, the line-item descriptions, the paying client's email address, and internal reference IDs; the money settles to your connected account, and Stager Tech takes a 1% platform fee that Stripe deducts automatically. Card and bank details go to Stripe's own hosted forms directly and never reach our servers.
  • Zapier (and HoneyBook) — only if you set up that connection. New enquiries, bookings, stage changes, and paid invoices from your HoneyBook account are forwarded to us through Zapier and land in your Lead Inbox. We receive and store the contact's name, email, phone, and company; the project name, address, stage, and amount; the invoice amount and paid date; and a verbatim copy of the full payload Zapier sends.
  • Apple (Apple Push Notification service) — delivering push notifications to iOS devices. Receives a per-device push token and the notification payload (for example, the address and date of a job you were assigned to).

Stager Tech's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Gmail data for advertising, do not sell it, and do not use it to train or improve generalized AI models.

We may also disclose data if we are legally required to, or to investigate abuse of the service.

Your rights

You can request deletion of your account and all associated data at any time by emailing help@stagertech.com. Deletion is processed within 7 days. You can also delete individual records (projects, inventory items, photos, scans) from inside the app at any time.

There is no self-serve "delete my account" button today. "Reset all data" inside the app clears your workspace records but does not delete your login, documents already sent to clients (and any signatures on them), crew check-in history, lead-form submissions, payment records, or photos, videos and 3D scans already uploaded — those stay reachable at their existing links until we remove them for you.

Two limits are worth stating plainly. Records we have already handed to a provider to do its job — an email Resend has delivered, a payment Stripe has processed — stay with that provider under its own retention rules and its legal obligations, and deleting your account here does not reach back into them. And a proposal or contract someone signed is kept for the term of that agreement if we are required to, rather than deleted on request.

Children

Stager Tech is for professional home stagers and is not directed at children under 13. We do not knowingly collect data from children.

Changes

If we update this policy, the "Last updated" date above will change. For a material change — a new category of data, or a new provider that receives it — we will also announce it in the app. If a change materially affects how we handle personal information, we will give notice by email or in-app at least 14 days before it takes effect. Check this page for the current version.

Contact

Questions, deletion requests, or anything else: help@stagertech.com