Skip to content
Remodelize

Your bathroom, remodeled on screen before anyone picks up a hammer.

Draft for counsel review. Not final.

How long Remodelize keeps things

Draft dated 2026-09-17

Draft, final text to be approved by Madrivo's counsel.

Draft notes for counsel (preview only)
  1. The 24 month dormant account period. No statute sets it, and CCPA requires a published period per category, so "as long as necessary" is not available.
  2. Whether the 30 day undo on a deletion asked for through the privacy rights form is acceptable, given the 45 day outer limit stated below.
  3. Two rows have no config key and are set in code. Both are build items, listed in the notes.

Added by the second legal seat, 2026-09-17

  1. DMCA designated agent, registered with the US Copyright Office, as a prerequisite to the safe harbour for user uploaded photographs.
  2. Verification. Whether matching one email address is enough for a deletion asked for by someone with no account.
  3. California wiretapping on the consent certification recording of the quote form.
  4. Whether continued use carries assent to a material change of terms.
  5. The enrichment seams. Whether a litigator scrub or a do not call lookup needs disclosure beyond the contact checks row in the Privacy Policy.

Build note. Every period below except the two in the notes reads from config/brand.json limits, which is the same file the purge crons read. The published page prints from that config, so the page and the behaviour cannot drift apart.

What How long Clock starts Why Config key
Photo you upload, no account 7 days Upload Nothing to serve without an account anonymous_upload_retention_days
Versions made from it, no account 7 days Render Matches the photo it came from anonymous_render_retention_days
Photo and versions, member 12 months Your last account activity Coming back to a saved project is the product account_media_retention_months
The parsed change on a version, such as "walls: sage green" Lives and dies with its version Version purge Version metadata, not a separate record none, by design Not yet read from config; printed from the draft's own text.
What you typed in the studio chat 90 days The message The purpose ends once the change is stored. Leaves a window to investigate abuse chat_log_retention_days
Member account, dormant Email notice at 24 months, deleted 30 days later Last sign in A published period is required, and notice comes first account_dormant_months, dormant_notice_days
Project you deleted 30 day undo, then purged Deletion Mistakes are common. Purging is not reversible project_delete_undo_days
Account you deleted 30 day undo, then purged Deletion Same account_delete_undo_days
Deletion asked for through the rights form Completed within 45 days whatever the undo window says Your request The CCPA response window governs Outer limit in the rights handler Not yet read from config; printed from the draft's own text.
Quote request, while salable 30 days, up to 90 if you re-confirm Your consent Not sold after that lead_salable_days, lead_reconfirm_until_days
Backup copy of a quote request 90 days Submission Recovery only. A full copy in object storage is breach surface once the request stops being salable lead_snapshot_retention_days Not yet read from config; printed from the draft's own text.
Consent record and delivery log 5 years Your consent The federal Telephone Consumer Protection Act limitation period is four years. This adds margin consent_retention_years
Opt out and do not contact records Permanent Your choice So the choice never lapses. Virginia's honour period is ten years and the federal one is five. Permanent covers both suppression_retention
Signed image links given to a company 72 hours Issue A link that outlives its use is an open door media_link_hours Not yet read from config; printed from the draft's own text.
Share link you create 30 days, revocable Creation Stops a stale link outliving its project share_link_days
Copies held by a company that quoted you Deleted on our notice within 10 days, in any case within 90 days Their receipt Contract control. It now carries versions and changes, not only images Buyer contract Not yet read from config; printed from the draft's own text.
Server and usage logs 90 days The event Operations and abuse investigation server_log_retention_days

Deleting your project or your account does not delete the record of a quote request you already sent, or the record that you asked us to stop contacting you. We have to keep those.

Questions: privacy@remodelize.ai.

Note 1. The backup copy is purged on its own 90 day clock, read from lead_snapshot_retention_days in config (wired 2026-09-17). Note 2. The 72 hour link expiry is read from media_link_hours in config (wired 2026-09-17).