Privacy Policy

Last Updated: July 27, 2026

1. Introduction

This Privacy Policy (this "Policy") is issued by Trazo ("Company," "we," "our," or "us") and governs the collection, use, storage, and disclosure of personal information in connection with the Trazo mobile application (the "Application") and all related services provided by the Company (collectively, the "Service"). This Policy is incorporated by reference into the Company's Terms of Service and applies to all Users of the Service. Capitalized terms not otherwise defined herein shall have the meanings ascribed to them in the Terms of Service.

By accessing or using the Service, the User acknowledges having read and understood this Policy and consents to the data practices described herein. If you do not agree to this Policy, you must discontinue use of the Service.

2. Information We Collect

For purposes of this Policy, "Personal Information" means any information that identifies, relates to, or could reasonably be linked to an identifiable individual. The Company collects the following categories of Personal Information in connection with the provision of the Service:

Authentication information: Upon account creation via Google Sign-In or Sign in with Apple, the Company receives the User's email address and, where provided by the applicable authentication provider, the User's name.
Profile information: Company name, email address, and telephone number voluntarily submitted by the User within the Application's Settings interface.
Uploaded photographs: Exterior images of properties uploaded by the User for the purpose of generating paint color renderings.
Company logo: Where the User subscribes to a premium tier, the User's company logo submitted for application as a watermark on rendered images.
Usage data: Information regarding the User's interaction with the Service, including without limitation the number of Renderings generated within each billing period and associated timestamps.
Device information: Device type, operating system version, and related technical identifiers collected through Firebase services for purposes of authentication and service delivery.
Consent records: A server-side timestamp recording the date and time at which the User accepted the Company's Terms of Service, retained as part of the User's account profile.

3. How We Use Your Information

The Company uses Personal Information collected pursuant to this Policy solely for the following purposes:

To create, authenticate, and administer the User's account;
To provide the Service, including the processing of uploaded photographs to generate AI-assisted paint visualizations;
To enforce applicable subscription tier restrictions, including Render Cap limits;
To communicate with the User regarding account status, subscription terms, billing matters, and support requests;
To maintain, secure, and improve the functionality and performance of the Service; and
To comply with applicable legal obligations.

The Company does not sell, rent, lease, or otherwise disclose Personal Information to third parties for marketing, advertising, or any commercial purpose unrelated to the provision of the Service.

4. Third-Party Services

The Company relies on certain third-party service providers in connection with the delivery of the Service. Such providers may receive or process Personal Information solely to the extent necessary to perform their designated functions. The Company's use of such providers does not constitute a sale of Personal Information. The relevant third-party services are as follows:

Firebase (Google LLC): The Company uses Firebase for user authentication, cloud-based storage of account profile data and usage records, and related infrastructure services. Data stored in Firebase Firestore is hosted on Google Cloud infrastructure in the United States and is subject to Google's privacy practices. For further information, please refer to Google's Privacy Policy.
Google Sign-In: Where the User elects to authenticate via Google, Google LLC acts as the authentication provider and transmits the User's email address and display name to the Company.
Sign in with Apple: Where the User elects to authenticate via Apple, Apple Inc. acts as the authentication provider and transmits the User's email address and display name to the Company, subject to Apple's applicable privacy controls.
Rendering API: Uploaded photographs are transmitted over encrypted connections to the Company's backend rendering infrastructure, where they are processed by AI/ML vision services to generate paint visualizations. Photographs are processed in transit and are not retained on the Company's servers beyond the duration of the individual rendering request.

5. Data Storage & Security

User profile information and usage data are stored in Firebase Firestore, a cloud-hosted database service operated by Google LLC and located in the United States. Rendered images are stored locally on the User's device and are not transmitted to or retained by the Company's servers.

The Company implements commercially reasonable administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, disclosure, alteration, or destruction. Such measures include, without limitation, encrypted data transmission using HTTPS/TLS protocols, Firebase Security Rules restricting unauthorized database access, and secure third-party authentication.

Notwithstanding the foregoing, no method of electronic transmission or storage is completely secure, and the Company cannot guarantee the absolute security of Personal Information. The User assumes the inherent risks associated with the transmission of information over the internet.

6. Your Rights

Subject to applicable law, the User may exercise the following rights with respect to their Personal Information:

Right of Access: The User may request a copy of the Personal Information held by the Company.
Right to Rectification: The User may update or correct account information directly through the Application under Settings → Account, or by submitting a written request to the Company.
Right to Erasure: The User may request deletion of their account and all associated Personal Information by submitting a written request to support@trazopaint.com. The Company shall process verified deletion requests within thirty (30) calendar days.
Right to Data Portability: The User may request a copy of their Personal Information in a portable, machine-readable format.
Right to Object: The User may object to certain processing activities by contacting the Company as set forth in Section 10 of this Policy.

To exercise any of the foregoing rights, please submit a written request to support@trazopaint.com. The Company may require the User to verify their identity before processing any such request.

7. Data Retention

The Company retains Personal Information for so long as the User's account remains active or as otherwise necessary to provide the Service, comply with applicable legal obligations, resolve disputes, and enforce the Company's agreements. Upon receipt of a verified account deletion request, the Company shall delete or permanently anonymize the User's Personal Information within thirty (30) calendar days, except to the extent that applicable law requires or permits longer retention.

8. Children's Privacy

The Service is not directed to children under the age of thirteen (13), and the Company does not knowingly collect Personal Information from any individual under such age. In the event that the Company becomes aware that it has inadvertently collected Personal Information from a child under age thirteen (13), the Company shall take prompt steps to permanently delete such information. If you have reason to believe that a minor under the age of thirteen (13) has submitted Personal Information to the Company through the Service, please contact the Company immediately at support@trazopaint.com.

9. Changes to This Policy

The Company reserves the right to modify this Policy at any time, effective upon the posting of an updated version to this page. The "Last Updated" date appearing at the top of this Policy reflects the effective date of the most recent revision. In the event of a material change to this Policy, the Company will provide notice to the User through the Application or to the email address associated with the User's account. The User's continued use of the Service following the effective date of any modification shall constitute the User's acceptance of the revised Policy.

10. Contact

Questions, requests, or notices regarding this Policy or the Company's data practices should be directed to the Company at the following address:

Email: support@trazopaint.com