Security and privacy

Your room photos show where you live. We treat them that way.

Placing furniture means handling images of your private space. That is a responsibility, not a footnote. Here is exactly what we store, how long we keep it, who can reach it, and how you remove it.

What we store

The room photos you upload, the placements you create, your style profile, and the account details needed to run your boards. Nothing about your space is collected that the product does not use.

How it is stored

Room photos and account data are held on access-controlled infrastructure. They are used to power your placements and recommendations, and are not sold.

Access scope

Access is limited to the systems that generate your placements and to a small set of personnel for support and maintenance, under least-privilege access.

Encryption

Encrypted in transit and at rest.

Data moving between your device and URFURNISH is encrypted in transit using current transport encryption. Room photos and personal data at rest are stored encrypted. The aim is simple: an image of your home should never be readable by anyone who is not meant to see it.

  • Transport encryption on every upload and request.
  • Encryption at rest for stored photos and account data.
  • Least-privilege access to the systems that hold them.
Photo deletion policy

Because room photos can reveal a personal living space, deletion is direct and complete. When you delete a photo or placement, it is removed from your account and queued for deletion from storage, including derived renders generated from it.

Delete your account and your uploaded photos are removed as part of closing it, within the retention window described below. Photos are kept only as long as they are useful to you, not indefinitely by default.

Retention

Kept while useful, removed when not.

Active room photosRetained while your account is active and the related placement or board exists, so you can revisit and edit your rooms.
Deleted photosRemoved from your account immediately and purged from storage, including derived renders, within a short retention window.
Account dataRetained for the life of the account and removed when the account is closed, aside from records we are required to keep.
Closed accountsUploaded photos and personal data are removed as part of account closure, within the stated retention window.
On compliance, stated honestly

We describe only what is true today and avoid claiming certifications we do not hold. Our practices - encryption in transit and at rest, least-privilege access, and direct photo deletion - are in place now. As our compliance posture matures, this page will reflect it, and it will never overstate where we are.

Questions about your data

Want the detail before you upload a single photo?

If you need specifics on how your room photos and personal data are handled, reach out and we will walk you through it plainly.

Shoppable