Privacy

What happens to your room photo

You pick a photo on your phone or computer. It stays in memory while you use this tab. StayPut does not write the photo, a product screenshot, or a generated image into this browser’s storage. Sharing stayputrooms.com does not share your rooms. We do not post your photos publicly, and saving a room is not permission to use it in advertising. StayPut has no marketing library of customer photos. Moving one there would take a separate opt-in, which this app does not offer.

Is it sent to an AI provider?

Yes. StayPut uses xAI to generate a restyle or a Try It preview. Try It sends your room photo and the product photo to xAI’s image edit API and gets the preview back as image data. That request does not ask xAI to publish a public URL. Restyle then stores the generated After as a private xAI File. Product-reading calls use xAI’s Responses API with storage for later retrieval turned off. We do not send your photos to Amazon, Target, Walmart, or Wayfair.

Training

StayPut does not use your room photos to train our models. We do not sell them. We have not opted in to let xAI train on StayPut requests. xAI’s published API policy says they do not train on API inputs or outputs without explicit permission.

Turning off response storage is not Zero Data Retention. xAI’s published default is to keep API inputs and outputs for about 30 days for abuse review, then delete them. StayPut cannot delete those audit copies. Zero Data Retention is not turned on for StayPut. It would disable the file storage this app uses for restyle images. The app does not read a live zero-data-retention header, so this page does not claim that setting is active.

Guest photos

If you do not sign in, your original room photo stays in memory for this visit. StayPut does not keep a guest original-photo library on our servers. After you restyle, the generated After image is stored privately in xAI Files with a 48-hour expiry. StayPut also refuses to show that temporary image after 48 hours, even if the file is still at the provider. Then it expires. Other visitors cannot open it. Saving is what keeps a room.

Signed-in photos

If you sign in, a generated After starts as a private xAI File for 48 hours — the same as a guest After. Saving does not upload another xAI file and does not create a file with no expiry. It copies those existing image bytes into StayPut’s private database as a JPEG. That copy is binary. It is not a data URL and it is not a base64 text copy. An older saved After that is still text is rewritten to that JPEG the next time you open the room. StayPut does not send the old text back. A file that cannot be read, or cannot fit under 800,000 bytes, stays with the room and is not returned. Each saved After is limited to 800,000 bytes, and an account keeps at most 24 saved rooms, so those After bytes stay within 19,200,000 bytes. The copy stays until you tap Remove or delete the account. StayPut does not generate a new photo when you save. The xAI file still expires. Every xAI file StayPut uploads has an expiry, so a file that was never recorded cannot remain indefinitely. Original photos, restyles, and buy lists for saved rooms stay under My rooms until you tap Remove or delete the account. Only that account can open them. A saved room is not a license for StayPut to advertise with it. The database provider encrypts stored data at rest with AES-256, and object-storage backups use server-side encryption. Neon’s published backup note says those backup copies are kept for 30 days. Instant-restore history is separate: 6 hours on the Free plan, up to 7 days on Launch, and up to 30 days on Scale. StayPut does not choose that window and cannot purge it. Removing a room or deleting the account deletes the bytes from active storage immediately.

Deleting

Signed in: My rooms → Remove deletes that room and its private database copy, including the saved JPEG bytes. If the 48-hour xAI file is still there, StayPut also asks xAI to delete it. If StayPut cannot confirm that provider delete, it will ask you to try Remove again. My rooms → Delete account permanently deletes the sign-in, saved rooms, temporary jobs, and the provider files StayPut can reach. It does not delete xAI’s abuse-review copies. If deletion stops, the account stays disabled for new Restyle, Try It, and Save work. StayPut continues that deletion on a later request to the service. You do not have to come back and tap Delete account for it to resume. This is not a clock: if nobody uses StayPut, the retry waits until the next request. You can still tap Delete account to retry immediately, or email us. needs_review deletions stay stopped until that explicit retry. Guest: temporary After images expire after 48 hours. Signing out clears the in-memory photos on this device. Budget and style preferences may remain in browser storage. They are not photos.

Account information

Sign-in is Google or X. We store the account id and the email or handle that provider shares, so rooms attach to you. We do not require a StayPut password.

What StayPut itself keeps

On our servers we keep a short usage count so daily limits work. For a signed-in restyle that count is the account id. For a guest restyle it is the id in the HttpOnly stayput_guest cookie, the same id that owns the job. Try It uses an account id or a one-way guest code. StayPut does not use the first X-Forwarded-For address as that key. The count is not the picture. Guest original photos are used to generate the image and are not stored in a StayPut photo library. Generated Afters live privately in xAI Files for 48 hours, then StayPut stops serving that provider file and asks the provider to delete it. A saved room also keeps a private JPEG in the room row until you Remove it or delete the account. That saved copy is not a data URL and it is not a permanent xAI file. We keep the sign-in id and the email or handle Google or X sends until you delete the account. We do not keep payment details; StayPut does not take payment. Page-view analytics go to Vercel with the path only, plus a source and campaign label. They do not include photos.

Try It

For Try It, your room and product photos are sent to xAI to create the preview. StayPut does not store those source photos, the generated preview, the product ASIN, or the shopping link. The preview stays in memory for this visit and is not written to browser storage. StayPut keeps a pseudonymous usage record — an account id or a one-way guest code, not the photos — so per-visitor and global limits can be enforced. Your room photo is not sent to Amazon.

Shopping

Amazon shopping links go through Amazon Associates. BIG Wall Décor, Welax, and VEVOR links, where StayPut uses them, go through Awin. TOV Furniture and Costway links go through Rakuten Advertising. Target, Walmart, and Wayfair are optional searches and are not affiliate links. As an Amazon Associate I earn from qualifying purchases. When you open an affiliate link, the retailer and affiliate network may receive ordinary link and click information under their own privacy policies. StayPut does not send them your uploaded room photo.