GDPR Compliance

Our commitment to the UK GDPR

StageRight AI, operated from the United Kingdom, is the data controller for personal data processed through www.stagerightai.com. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page summarises how, and sits alongside our Privacy Policy, which describes the data we collect in detail.

Lawful bases for processing

We only process personal data where we have a lawful basis:

• Contract: providing the staging service you have signed up for.
• Legitimate interests: keeping the platform secure, preventing fraud and improving the service.
• Legal obligation: retaining tax and accounting records.
• Consent: optional features such as voice instructions, and any future marketing or analytics, which we will always ask about first.

Your rights

Under the UK GDPR you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure: ask us to delete your data. You can also delete uploaded photos and generated images yourself at any time from your account.
• Portability: receive your data in a structured, commonly used, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Restriction: ask us to limit how we use your data while a query is being resolved.

Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand.

Data retention

We keep account data while your account is active. Uploaded photos and generated images stay in your private storage until you delete them or close your account. Billing records are retained for the period required by UK tax law. Deleted data may remain in encrypted backups for a short period before it is purged.

International transfers

Our hosting, database, authentication and file storage run in EU data centres. Some of our AI processing providers are based in the United States. Transfers to them are safeguarded by standard contractual clauses, together with the UK addendum where applicable, and we limit what is shared to the content needed to generate your images.

How to exercise your rights

Email gdpr@stagerightai.com from the address linked to your account, telling us which right you want to exercise. We will respond within one month of receiving your request. We may ask for information to verify your identity before acting. Exercising your rights is free of charge in almost all cases.

Complaints

If you are unhappy with how we handle your data, please contact us first so we can put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.

Contact

For data protection requests or questions about this page, email us at gdpr@stagerightai.com and we will respond promptly.