Privacy policy

This policy explains what personal data we process when you use Stagendo (the web app at https://app.stagendo.com), why we do it, who we share it with, how long we keep it and what rights you have. Terms such as account, account owner, plan, credits, inputs and outputs mean the same as in our terms of service.

1. Who we are and how to contact us

The controller of your personal data is Virtuell s.r.o., company ID (IČO) 10746170, registered office F. A. Gerstnera 2151/6, 370 01 České Budějovice, Czech Republic, entered in the Commercial Register kept by the Regional Court in České Budějovice, section C, file 30822 ("we").

For anything about personal data, write to us at podpora@stagendo.cz. We have not appointed a data protection officer; we handle requests directly.

2. What personal data we process

Account data: name, e-mail address, password (we only store a secure hash of it and never know the password itself), app language, the dates you signed up and confirmed your e-mail address, and on single-user plans which session is currently signed in.
Signing in with Google: when you sign in or sign up with Google, Google gives us your name, your e-mail address, the fact that Google has verified it, and the identifier of your Google account, which we use to recognise you next time. We have no access to anything else in your Google account and never learn its password.
Account and team: the account name, your role in it (owner or member), the account you are currently working in, for team accounts the invitations (the invitee's e-mail, who invited them and when, whether the invitation was accepted), the text of your own output label, and referral programme data (which account referred which and what rewards were credited).
Billing details and purchases: name or company name, company ID, VAT ID, address, invoice e-mail, the plan and subscription status, purchase records (what, when and for how much, VAT, any discount and promotion code), links to invoices and credit movements including who started each task.
Payment data: card payments are processed by the Stripe payment gateway. We do not store card numbers or other card details and have no access to them. From Stripe we receive customer, subscription, payment and invoice identifiers, the payment result, the amount paid and the invoice details, such as the billing address you enter when paying.
Photos, edits and videos: the inputs you upload, the outputs we create from them and related data: file name, dimensions, size, file fingerprint, who uploaded the file and when, and the tasks, styles and instructions you chose. Photos may contain metadata stored by the camera or phone, such as the date taken or the location. Photos may also show people or their belongings (section 8).
Confirmation before payment: when you confirm before paying that you want the service to start right away (article 12 of the terms of service), we store the wording of the confirmation, the version and address of the terms, the language, the time, the account and user, what you were buying, the IP address and the browser identification (user agent).
Technical and security logs: server records of requests and errors, counts of failed sign-ins (to lock sign-in temporarily after repeated failures), records of sign-ins to the administration and of attempts to sign in on fake administration addresses (IP address, browser identification, the user name entered and the time, never the password).
E-mails: e-mails the app sends you (for example confirming your e-mail address and team invitations) and delivery data. When you write to us, we process your message and our reply.

We need your account data to enter into and perform the contract; without it you cannot use the service. We need billing details to issue invoices. Other data arises from how you use the service. We do not send you advertising e-mails or newsletters.

3. Why we process data and on what legal basis

Providing the service and performing the contract (Art. 6(1)(b) GDPR): running your account and team, processing photos and videos as you instruct, storing inputs and outputs, credits, subscriptions and payments, customer support and the e-mails needed to use the service.
Legal obligations (Art. 6(1)(c) GDPR): issuing and keeping invoices and accounting records under accounting and tax law, and handling requests under the GDPR.
Legitimate interests (Art. 6(1)(f) GDPR): keeping the service secure and preventing abuse and fraud (limits on attempts, sign-in records and records of attacks on the administration), proving the confirmation before payment and defending legal claims, and running and improving the service using technical logs. You can object to processing on this basis (section 11).
Consent (Art. 6(1)(a) GDPR): only where we explicitly ask for it, for example if we wanted to use your inputs or outputs for promotion (article 8 of the terms of service). You can withdraw consent at any time.

The confirmation before payment is not consent to the processing of personal data but your declaration under consumer law. We keep the record of it so that we can prove you gave it.

4. Who we share data with

We do not sell personal data. We share it only with suppliers who help us run the service, and only to the extent they need for their task. They process it on our instructions under a data processing agreement:

Hosting: DigitalOcean, a server in the Frankfurt data centre (EU). The app and the database run on it.
File and backup storage: DigitalOcean Spaces, Frankfurt data centre (EU). Inputs, outputs and database backups are stored there.
Payments: Stripe. It processes card payments, subscriptions, invoices and promotion codes. We pass on your e-mail, name, account identifier and order details. Some data, for example for fraud prevention in payments, Stripe processes as an independent controller under its own privacy policy.
E-mail delivery: Brevo. It delivers the e-mails the app sends.
Website traffic measurement: Google Ireland Limited (Google Analytics). Receives data about visits to the public website stagendo.com, and only from visitors who consented on the cookie bar. We do not pass it your name, e-mail or billing details, and no measurement runs inside the app itself.
Providers of AI image processing services: they receive the uploaded photos and the instructions for the edit or video, solely to create the output you asked for. We do not pass them your name, e-mail or billing details.

We may also disclose data to public authorities where the law requires it, and to our advisers, such as an accountant or lawyer, who are bound by confidentiality.

5. Transfers outside the EU and EEA

We store data in the European Union. Some suppliers or their subcontractors may, however, process data outside the European Union and the European Economic Area, for example in the United States or in Asia. This concerns mainly payments, AI image processing and website traffic measurement. Such transfers are protected by an adequacy decision of the European Commission (for example for companies certified under the EU–US Data Privacy Framework) or by standard contractual clauses approved by the European Commission. We will give you information about these safeguards on request.

6. How long we keep data

Photos, edits and videos for the retention period of the account's plan shown in the price list in the app (30 days on the Free plan). Older data is deleted automatically. When an account moves to a plan with a shorter retention period, including when a subscription ends, we delete nothing for another 30 days (grace period). On plans without a limit we keep them for as long as the account exists, until you delete them. Temporary processing files are deleted continuously, usually within 30 days.
Account and team data for as long as the account exists. After the account is closed we delete it within a reasonable time, except data we must or may keep longer under the points below.
Invoices, purchase records and other accounting records for the period required by law (usually 10 years).
Records of the confirmation before payment for the duration of the contract and then for the limitation periods for claims under it.
Technical server logs (including records of sign-ins to the administration) are overwritten continuously once they reach a set size. They are therefore kept only for a limited time, typically a few weeks depending on traffic; we do not promise a fixed number of days.
Records of attempts to sign in on fake administration addresses are deleted after 90 days.
Counts of failed sign-ins (used to lock sign-in temporarily) are kept for only a few minutes, at most 15.
Database backups for 30 days, after which newer ones replace them. Data deleted in the app may therefore remain in backups for at most that period.
Communication with support for as long as needed to resolve the matter and then at most for the limitation periods.

7. Cookies and browser storage

We only use strictly necessary cookies, without which the app does not work:

session cookie (sessionid) keeps you signed in, expires after 8 hours of inactivity and cannot be read by scripts on the page,
CSRF cookie (csrftoken) protects forms and requests against forgery from other sites.

In your browser's storage (local storage and session storage) the app remembers your settings and work in progress, for example the chosen language, a collapsed sidebar, the last mode and task you chose or the photos selected for a video. This data stays in your browser; you can remove it by clearing the site's data.

Inside the app itself we use no analytics, advertising or other tracking cookies, and the app does not load third-party content that would track you.

On the public website stagendo.com we measure traffic with Google Analytics. It starts only when you press accept on the cookie bar. Until you do, and equally if you refuse, nothing is loaded from Google and no measurement cookie is stored. Google Analytics stores the cookies _ga and _ga_<id> for two years and processes a shortened IP address, the device and browser type and the pages visited. You can withdraw your consent at any time through the Cookie settings link in the website footer; the measurement stops with it.

The Stripe payment page you are redirected to when paying uses its own cookies under Stripe's policies.

8. People in photos

Photos of properties may show people, their likeness or personal belongings. The app does not ask about this separately when you upload. By uploading photos you confirm that they show no recognisable people, or that you have those people's consent to the photos being processed in the service (article 8 of the terms of service). You are responsible for this confirmation being true.

We process data about people in photos only to create the outputs you ask for, and keep it as long as other inputs and outputs. If you recognise yourself in a photo in the service, write to us. For photos you upload in the course of your business, you may be the controller towards the people in them and we your processor to that extent.

9. Automated decision-making and artificial intelligence

We do not take decisions about you based solely on automated processing that produce legal effects for you or similarly significantly affect you, and we do not profile you.

We use artificial intelligence only to edit photos and create videos that you ask for. We do not use your photos or outputs to train AI models, and we do not pass them to image processing providers for that purpose.

Only technical measures run automatically under the rules in the terms of service and this policy, for example deleting data after the retention period or temporarily locking sign-in after repeated failed attempts.

10. How we protect data

all communication with the app is encrypted (HTTPS),
inputs and outputs are kept in private storage and can only be opened through time-limited signed links,
passwords are stored only as hashes and sign-in is protected by limits on attempts,
each user sees only the data of accounts they are a member of, and only the account owner manages the subscription and payments,
the administration is at a non-public address, only authorised people have access and signing in requires two-factor authentication,
we back up the database regularly.

If a security breach were likely to result in a high risk to you, we will tell you without undue delay.

11. Your rights

In connection with the processing of personal data you have the right to:

access: find out what data we process about you and get a copy of it,
rectification of inaccurate data; you can also correct your name, language and billing details yourself in your profile,
erasure, if we no longer need the data or process it unlawfully; you can delete photos, edits and videos directly in the app, and write to us to close your account,
restriction of processing, for example while we check the accuracy of data or your objection,
data portability: receive the data you provided to us in a structured, commonly used and machine-readable format; you can download your outputs yourself at any time,
object to processing based on legitimate interests,
withdraw consent at any time where processing is based on consent; withdrawal does not affect processing before it,
lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, www.uoou.gov.cz. You can also complain to the supervisory authority in the EU country where you live or work.

To exercise your rights, e-mail podpora@stagendo.cz. We will reply without undue delay and within one month at the latest. In complex cases we may extend this by two further months and will tell you why. So that we do not hand data to someone else, we may ask you to verify your identity, usually by writing from the e-mail address of your account. This is free of charge unless requests are manifestly unfounded or excessive.

Inputs, outputs and purchases of a team account belong to the account. Erasure or a copy of the whole account's data can be requested by its owner.

12. Changes to this policy

We may update this policy, in particular when the service, our suppliers or the law change. The current version with its effective date is always on the Privacy policy page. We will tell you about significant changes in advance by e-mail or in the app.

This policy is effective from 14 September 2026.