LoftCue PRIVACY POLICY

Effective Date: July 22, 2026
Last Updated: July 22, 2026

This Privacy Policy explains how LoftCue, referred to as “LoftCue,” “we,” “us,” or “our,” collects, uses, stores, discloses, and otherwise processes personal information in connection with the LoftCue website, applications, AI-powered tools, and related services collectively referred to as the “Service.”

LoftCue provides tools that allow real estate professionals, agencies, property managers, marketers, companies, and private individuals to upload, generate, enhance, edit, process, store, and export images, videos, audio, text, and related real estate marketing content.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed through:

• the LoftCue website and web application;
• user accounts and organization workspaces;
• image generation and enhancement features;
• video generation, enhancement, and editing features;
• media storage and export functionality;
• customer support and communications;
• subscriptions, purchases, credits, and billing administration;
• analytics, security, logging, and service monitoring;
• integrations with third-party platforms and service providers.

This Privacy Policy does not govern third-party websites, applications, real estate listing services, multiple listing services, social networks, payment processors, or other services that may be linked to or integrated with LoftCue. Those services process information under their own privacy policies and terms.

2. Information We Collect

2.1 Account and Profile Information

When you create or use a LoftCue account, we may collect:

• your name;
• email address;
• company, agency, or organization name;
• job title or professional role;
• account credentials and authentication identifiers;
• profile and account settings;
• organization membership;
• workspace roles and permissions;
• invitations sent or received;
• subscription plan;
• account and payment status.

If you join an organization or agency workspace, the owner or administrator of that workspace may provide information about you and manage your access to the Service.

2.2 Customer Content

We process content that you upload, submit, generate, edit, import, export, or store through the Service, including:

• property photographs;
• property videos;
• floor plans;
• property addresses;
• listing descriptions;
• property characteristics;
• logos and branding materials;
• audio recordings;
• voiceovers;
• captions;
• prompts and editing instructions;
• reference images and video frames;
• generated or enhanced images and videos;
• exported real estate marketing materials;
• technical and descriptive metadata associated with uploaded files.

Customer Content may contain personal information relating to property owners, tenants, buyers, sellers, real estate agents, employees, visitors, contractors, or other individuals.

Images and videos may also contain:

• faces or other identifying characteristics;
• voices;
• vehicle registration plates;
• personal belongings;
• documents visible within a property;
• photographs of individuals;
• addresses or location information;
• other information capable of identifying a person.

You are responsible for ensuring that you have all rights, permissions, authorizations, and legally required consents necessary to upload and process Customer Content through LoftCue.

2.3 Payment and Transaction Information

Payments may be processed by third-party payment processors.

We may receive limited payment and transaction information, including:

• billing name;
• billing address;
• subscription plan;
• transaction amount;
• currency;
• payment status;
• invoice information;
• payment method type;
• partial payment card information, such as the last four digits;
• payment processor customer or transaction identifiers;
• credit purchases and usage records.

LoftCue does not normally receive or store complete payment card numbers or card security codes.

2.4 Technical and Usage Information

When you access or use the Service, we may automatically collect:

• IP address;
• browser type and version;
• device type;
• operating system;
• language and regional settings;
• approximate location derived from an IP address;
• referring pages;
• pages and features used;
• session identifiers;
• authentication events;
• date and time of access;
• upload activity;
• generation and editing activity;
• export and download activity;
• credit usage;
• error reports;
• performance information;
• application logs;
• security logs;
• information about interactions with emails and notifications.

2.5 Communications

We may collect information that you provide when you:

• contact support;
• report a technical problem;
• request information about the Service;
• submit feedback;
• respond to a survey;
• participate in testing;
• request deletion or access to your information;
• communicate with LoftCue through any available communication channel.

3. Cookies and Similar Technologies

LoftCue may use cookies, local storage, pixels, software development kits, and similar technologies to:

• maintain authenticated sessions;
• remember user preferences;
• protect accounts;
• prevent fraud and abuse;
• provide essential application functionality;
• measure Service performance;
• understand how users interact with the Service;
• diagnose technical problems;
• improve functionality and user experience;
• support analytics and marketing activities.

Where required by applicable law, non-essential cookies will be used only after the user has provided consent.

Users may be able to manage cookies through the cookie preferences interface made available within the Service or through their browser settings.

Disabling essential cookies may prevent certain parts of the Service from functioning correctly.

4. How We Use Information

LoftCue may use personal information to:

• create and manage user accounts;
• authenticate users;
• maintain user sessions;
• manage organizations, workspaces, invitations, roles, and permissions;
• receive, store, process, and deliver Customer Content;
• generate, enhance, animate, edit, assemble, and export images and videos;
• provide AI-powered features;
• generate captions, prompts, descriptions, subtitles, and voiceovers;
• process subscriptions and transactions;
• maintain credit balances and usage records;
• provide customer support;
• communicate about accounts, transactions, security incidents, and Service changes;
• monitor performance and diagnose technical errors;
• improve the functionality and reliability of the Service;
• detect and prevent fraud, misuse, abuse, and unauthorized access;
• enforce the LoftCue Terms of Use and other applicable policies;
• protect LoftCue, its users, and third parties;
• comply with applicable legal obligations;
• establish, exercise, or defend legal claims;
• send marketing communications where permitted by applicable law.

Users may unsubscribe from non-essential marketing communications at any time.

LoftCue may continue to send operational, transactional, billing, security, and account-related communications where necessary to provide the Service.

5. AI and Media Processing

5.1 Processing of Customer Content

To provide image generation, image enhancement, video generation, video enhancement, video assembly, captioning, voiceover, and other AI-powered functionality, LoftCue may transmit Customer Content and related instructions to third-party service providers.

Information processed by such providers may include:

• uploaded images;
• uploaded videos;
• selected video frames;
• prompts;
• editing instructions;
• property descriptions;
• reference images;
• audio recordings;
• generated captions;
• generated voiceovers;
• generated outputs;
• technical metadata necessary to perform the requested operation.

Third-party providers may include:

• AI model providers;
• cloud infrastructure providers;
• media storage providers;
• video processing providers;
• image processing providers;
• text generation providers;
• speech generation providers;
• content delivery providers;
• logging and monitoring providers.

Such providers may process information in accordance with their agreements with LoftCue, their privacy policies, and the technical configuration applicable to the relevant service.

5.2 Model Training

LoftCue does not use Customer Content to train LoftCue’s own general-purpose AI models unless the user has provided separate and explicit consent.

LoftCue seeks to use API and business services under which Customer Content is not used to train generally available third-party AI models without authorization.

However, the precise data processing and retention practices of a third-party provider may depend on:

• the provider;
• the selected product or model;
• the service configuration;
• the processing region;
• the applicable contract;
• legal and security requirements.

Users should not upload information that is unnecessary for the requested media generation or editing operation.

In particular, users should avoid uploading:

• government identification documents;
• payment card details;
• passwords or authentication credentials;
• financial account credentials;
• confidential medical information;
• biometric templates;
• private legal documents;
• confidential business records;
• sensitive personal information unrelated to the property content.

5.3 Temporary Processing and Storage

Customer Content may be temporarily copied, cached, converted, compressed, or stored while LoftCue or its service providers:

• upload files;
• generate previews;
• process images;
• render videos;
• generate downloadable files;
• deliver content;
• diagnose errors;
• protect the Service against abuse;
• maintain backups and disaster recovery systems.

Deletion of Customer Content from an active account may not immediately remove every temporary, cached, logged, backup, or provider-held copy.

6. AI Output and Real Estate Content

AI-generated or AI-enhanced content may be inaccurate, incomplete, misleading, inconsistent, distorted, or different from the original property.

AI processing may unintentionally modify, remove, obscure, or generate property details, including:

• room dimensions or proportions;
• floor layouts;
• walls, doors, windows, stairs, or ceilings;
• furniture and decorations;
• fixtures and appliances;
• construction materials;
• surface textures;
• finishes and colors;
• lighting and shadows;
• reflections;
• exterior views;
• landscaping;
• neighboring buildings;
• streets;
• vehicles;
• people;
• signs;
• labels;
• addresses;
• logos;
• property boundaries;
• damage or defects;
• wear and deterioration;
• construction status;
• accessibility features;
• security features;
• safety-related elements.

Generated or enhanced content must not be treated as an authoritative, complete, verified, or factually accurate representation of a property.

LoftCue does not independently inspect properties, compare generated content with the physical property, approve marketing materials, certify property information, or verify the accuracy of generated outputs.

Before publishing, sharing, advertising, distributing, submitting, or otherwise using any output, the user must:

• review the complete output;
• compare the output with the original source materials;
• identify inaccuracies, distortions, omissions, or generated elements;
• verify that the output accurately represents the property;
• determine whether disclosure of AI generation or digital alteration is required;
• verify compliance with applicable real estate laws and advertising rules;
• verify compliance with MLS rules and listing platform policies;
• verify compliance with professional and contractual obligations;
• obtain any required approval from the property owner, seller, landlord, agency, broker, or client;
• avoid representing generated or digitally added features as existing physical features of the property.

The user remains solely responsible for determining whether an output is accurate, lawful, appropriate, and suitable for publication or commercial use.

This section describes the nature of AI processing and does not replace the warranties, disclaimers, user obligations, indemnification provisions, and limitations of liability contained in the LoftCue Terms of Use.

Nothing in this Privacy Policy limits any privacy or consumer rights that cannot legally be waived.

7. Legal Bases for Processing

Where the laws of the European Economic Area, the United Kingdom, or another jurisdiction requiring a legal basis for processing apply, LoftCue may process personal information under one or more of the following legal bases:

7.1 Performance of a Contract

Processing may be necessary to:

• create and maintain an account;
• provide the requested Service;
• process Customer Content;
• provide subscriptions and credits;
• complete requested transactions;
• provide support.

7.2 Legitimate Interests

LoftCue may process information for legitimate interests, including:

• operating the Service;
• securing accounts;
• preventing fraud and abuse;
• monitoring performance;
• correcting errors;
• improving the Service;
• protecting legal rights;
• enforcing applicable terms.

Where required, LoftCue considers whether these interests are overridden by the rights and interests of the affected individual.

7.3 Consent

LoftCue may rely on consent where required, including for:

• non-essential cookies;
• certain marketing communications;
• optional processing activities;
• processing that requires explicit consent under applicable law.

Consent may be withdrawn at any time. Withdrawal does not affect processing lawfully performed before consent was withdrawn.

7.4 Legal Obligations

LoftCue may process information where necessary to comply with applicable law, legal process, tax requirements, accounting requirements, regulatory obligations, or lawful government requests.

7.5 Legal Claims

LoftCue may process information where necessary to establish, exercise, or defend legal claims.

8. How We Disclose Information

LoftCue may disclose personal information to the following categories of recipients.

8.1 Service Providers

Information may be disclosed to service providers that support:

• cloud hosting;
• databases;
• media storage;
• content delivery;
• AI models;
• image processing;
• video rendering;
• audio generation;
• authentication;
• payment processing;
• email delivery;
• analytics;
• error monitoring;
• fraud prevention;
• security monitoring;
• customer support;
• accounting;
• legal services.

Service providers are permitted to process information only as necessary to provide the relevant services, subject to applicable agreements and legal requirements.

8.2 Organization Owners and Administrators

If your account belongs to an organization, agency, or shared workspace, authorized owners and administrators may be able to:

• view account information;
• manage workspace membership;
• manage roles and permissions;
• access shared Customer Content;
• review workspace activity;
• manage subscription and billing information;
• suspend or remove access;
• transfer or delete workspace content.

Your use of an organization workspace may also be subject to the organization’s own policies and instructions.

8.3 Legal and Safety Disclosures

LoftCue may disclose information where reasonably necessary to:

• comply with applicable law;
• respond to a subpoena, court order, or lawful government request;
• enforce applicable agreements and policies;
• investigate fraud, abuse, or security incidents;
• prevent harm;
• protect the rights, property, or safety of LoftCue, its users, or third parties;
• establish, exercise, or defend legal claims.

8.4 Business Transactions

Information may be disclosed or transferred in connection with:

• a merger;
• acquisition;
• financing;
• reorganization;
• restructuring;
• sale of assets;
• change of control;
• insolvency;
• bankruptcy;
• similar business transaction.

Where required by applicable law, users will be informed of material changes affecting the processing of their personal information.

8.5 At the User’s Direction

LoftCue may disclose information where the user:

• requests the disclosure;
• authorizes an integration;
• shares content with another user;
• exports content to another service;
• invites another person to a workspace;
• otherwise directs LoftCue to disclose the information.

9. Sale and Sharing of Personal Information

LoftCue does not sell personal information for monetary consideration.

LoftCue does not knowingly sell or share personal information for cross-context behavioral advertising as those terms are defined under applicable California privacy law.

If LoftCue’s practices change, this Privacy Policy will be updated and any legally required notice or opt-out mechanism will be provided.

10. International Data Transfers

LoftCue may use service providers located in different countries.

Personal information may therefore be transferred to and processed in countries whose privacy laws differ from those of the user’s country.

Where required by applicable law, LoftCue may use recognized transfer mechanisms, including:

• contractual safeguards;
• data processing agreements;
• standard contractual clauses;
• transfer impact assessments;
• other legally recognized safeguards.

11. Data Retention

LoftCue retains personal information for as long as reasonably necessary to:

• provide the Service;
• maintain an account or workspace;
• process transactions;
• maintain billing and usage records;
• comply with contractual obligations;
• comply with legal and accounting obligations;
• resolve disputes;
• prevent fraud and abuse;
• maintain security;
• enforce applicable agreements;
• establish, exercise, or defend legal claims.

Retention periods may depend on:

• the type of information;
• the user’s account status;
• the subscription status;
• workspace settings;
• deletion requests;
• contractual requirements;
• legal requirements;
• backup and disaster recovery cycles;
• fraud prevention and security requirements.

Information may remain in protected backups until the applicable backup is overwritten or deleted according to the relevant backup cycle.

LoftCue may retain aggregated or de-identified information where that information can no longer reasonably be associated with an identifiable individual.

12. Security

LoftCue uses administrative, organizational, and technical safeguards designed to protect personal information against unauthorized access, alteration, loss, misuse, disclosure, or destruction.

These safeguards may include:

• encryption in transit;
• access controls;
• authentication controls;
• role-based permissions;
• logging and monitoring;
• secure cloud infrastructure;
• backup and recovery procedures;
• vulnerability management;
• restrictions on service provider access.

No method of transmission, storage, or processing is completely secure.

LoftCue cannot guarantee that unauthorized third parties will never defeat security measures or gain access to information.

Users are responsible for:

• maintaining the confidentiality of account credentials;
• using secure authentication methods;
• limiting access to their devices;
• managing workspace permissions;
• promptly reporting suspected unauthorized access;
• ensuring that shared links and exported content are provided only to intended recipients.

13. User Responsibility for Third-Party Information

When Customer Content contains personal information relating to another person, the user is responsible for:

• determining whether the information may lawfully be collected and processed;
• providing any required privacy notice;
• obtaining any required consent or authorization;
• responding to requests from the affected person where applicable;
• avoiding unnecessary disclosure of personal information;
• complying with applicable privacy, real estate, employment, recording, surveillance, and marketing laws.

LoftCue may process Customer Content on behalf of business customers according to their instructions.

Where a business customer determines the purposes and means of processing personal information contained in Customer Content, that customer may act as the controller or business responsible for that information, while LoftCue may act as a processor or service provider.

14. Privacy Rights

Depending on your location and applicable law, you may have the right to:

• request access to personal information;
• request correction of inaccurate information;
• request deletion of personal information;
• request a copy of personal information;
• request data portability;
• object to certain processing;
• request restriction of processing;
• withdraw consent;
• opt out of marketing communications;
• opt out of certain sales or sharing of personal information;
• appeal a decision relating to a privacy request;
• submit a complaint to an applicable data protection authority;
• receive information about categories of personal information collected, used, or disclosed.

These rights are not absolute and may be subject to exceptions under applicable law.

LoftCue may need to verify your identity before processing a request.

LoftCue may also request information necessary to confirm that you are authorized to submit a request on behalf of another person.

Privacy requests may be submitted through the privacy or support channel made available within the Service.

LoftCue will respond within the period required by applicable law.

15. California Privacy Rights

Where the California Consumer Privacy Act applies, California residents may have the right to:

• know the categories of personal information collected;
• know the sources of personal information;
• know the purposes for collecting, using, selling, or sharing personal information;
• know the categories of third parties to which information is disclosed;
• request access to specific pieces of personal information;
• request correction of inaccurate personal information;
• request deletion of personal information;
• opt out of the sale or sharing of personal information;
• limit certain uses of sensitive personal information where applicable;
• receive equal service and pricing without unlawful discrimination for exercising privacy rights.

LoftCue does not discriminate against users for exercising rights provided by applicable privacy law.

Authorized agents may submit requests where permitted by law. LoftCue may require proof that the agent is authorized to act on behalf of the relevant individual.

16. Children’s Privacy

The Service is not intended for children under the age of 18.

LoftCue does not knowingly collect personal information directly from children under 18.

If LoftCue becomes aware that personal information has been collected from a child in a manner prohibited by applicable law, reasonable steps will be taken to delete the information.

A parent or legal guardian who believes that a child has provided personal information through the Service may contact LoftCue through the support channel available within the Service.

17. Automated Decision-Making

LoftCue uses automated systems to generate and process media content.

These systems are intended to assist with creative production and media editing. They are not intended to make legal, employment, credit, housing eligibility, insurance, or similarly significant decisions about individuals.

Users must not use the Service to make unlawful discriminatory decisions or to evaluate protected personal characteristics.

18. Third-Party Services and Integrations

The Service may contain links to or integrations with third-party services.

LoftCue is not responsible for the privacy, security, availability, or content practices of third-party services.

Before providing information to a third-party service, users should review that service’s applicable privacy policy and terms.

Authorizing an integration may allow information to be transmitted between LoftCue and the relevant third-party service according to the permissions selected by the user.

19. Changes to This Privacy Policy

LoftCue may update this Privacy Policy from time to time to reflect:

• changes to the Service;
• changes to data processing practices;
• changes to service providers;
• legal or regulatory requirements;
• security requirements;
• new functionality.

The updated version will be posted within the Service with a revised “Last Updated” date.

Where required by applicable law, LoftCue may provide additional notice or request consent before a material change takes effect.

Continued use of the Service after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated Policy, except where applicable law requires another form of consent.

20. Contact and Privacy Requests

Questions, complaints, or requests concerning this Privacy Policy or the processing of personal information may be submitted through the support or privacy request channel made available within LoftCue.

To protect user information, LoftCue may require identity verification before responding to a privacy request.

21. Relationship to Other LoftCue Terms

This Privacy Policy forms part of the policies governing use of LoftCue.

Use of the Service is also subject to the LoftCue Terms of Use and any additional policies, subscription terms, organization agreements, or notices made available within the Service.

In the event of a conflict relating specifically to the collection or processing of personal information, this Privacy Policy will apply to the extent required by applicable privacy law.