Privacy notice · Updated September 7, 2026
Your room stays yours.
Accounts and room designs
deCour stores your account name, email address, hashed password, session details, room photos, preferences, generated images, and purchase and generation records. Room photos and designs require your account session to view. Please do not upload sensitive documents or photos you do not have permission to use.
The discount wheel and contact signup
Spinning creates a random discount record and an essential browser cookie that remembers it. To claim the result, you provide both your email address and your phone number. We use those details to associate the offer with your signup, let you manage it, and check email/account eligibility at checkout. Phone numbers are not verified; entering one does not authorize marketing calls or texts.
Email deals require the separate, optional checkbox. Declining it does not change the discount. We record the form wording, version, time, source and consent choice. Email marketing permission remains pending until the email is verified through your deCour account. No marketing emails or texts are being sent in this preview. Account verification and password-reset messages, when configured, are separate from marketing.
Contact details are held privately in our database; the public site has no contact directory. Only the configured, verified owner account can view or export signups. We do not sell these contact details or share them with retailers. A claimed offer can be attached to your verified account; otherwise it stays associated with this browser.
Manage your signup
Open My discount on the browser where you claimed it, or from your linked verified account, to unsubscribe or delete signup details. Unsubscribing does not remove your claimed discount. Deleting the signup removes the saved offer, but does not change an existing purchase. We retain a keyed, non-public digest of an unsubscribed email to prevent accidental re-enrollment; repeat submissions do not silently restore permission.
Raw offer email and phone fields become eligible for automatic removal 12 months after the latest signup update. Removal runs on the next offer or owner-list request; expired contact fields are excluded from exports. A minimal offer record and email digest may remain to honor an attached discount, prevent repeat redemption and preserve suppression. You can request removal sooner using My discount.
Exploring, cookies and sharing
Discovery history, favorites and remix recipes use browser storage on this device. They are not synced to your account. Signing out does not clear them; remove them in Your collection or clear this site’s browser data. A separate timestamp limits the wheel invitation to once every seven days. Essential cookies support sign-in and remember your offer. Shared look/recipe links contain no contact details, account data or uploaded photos. We do not use advertising trackers or respond differently to a Do Not Track setting in this preview.
What AI receives—and what it does not
When image generation is enabled, deCour sends the uploaded room photo, room type, style choices, furniture budget, goal, typed items to keep, and selected retailer reference images to OpenAI. We do not add your deCour account name, email, phone number, account ID, payment details or room name to that image request. The file is sent under a generic filename, not its original upload name. We do not give the image model access to your deCour account or personal chatbot history.
This is not full anonymization. Your image and typed details can identify you. We do not currently automatically blur faces, remove addresses or redact text, and the photo’s embedded metadata is preserved. Before uploading, remove people, personal photographs, sensitive documents, contact details and location metadata. Keeping your account profile out of a request does not guarantee that an AI provider cannot infer your identity from its content.
The separate chatbot receives your current message, up to four recent message pairs, the public product/style catalog and a stable coded safety identifier derived from your account ID. That identifier is pseudonymous, not anonymous. We do not automatically attach account contact or payment details, but messages are sent without personal-information redaction. Do not type secrets, contact details or sensitive information. The chatbot cannot access your uploaded room photos or account records.
We do not store chat transcripts in our database; they remain in page memory until cleared or the page is reloaded. We request that OpenAI not store a Responses API conversation, but this does not eliminate provider abuse-monitoring or legally required retention. OpenAI documents that API content is not used for training by default unless data sharing is enabled, and that abuse-monitoring logs may be retained for up to 30 days, or longer when legally required. See OpenAI’s API data controls. Zero Data Retention has not been verified for deCour, and no zero-retention promise is made. The project’s data-sharing settings must be verified before paid launch.
We use limited request counters and keyed identifiers to prevent abuse and control API costs. These records do not contain chat text or raw IP addresses. Rate-limit records are cleaned up on subsequent offer/owner requests. Hosting providers may maintain their own operational logs.
Purchase acknowledgements
When checkout opens, we record the purchase notice text, version and the time you accepted it, linked to the payment record. We use this for customer support and dispute handling. This record is separate from optional marketing consent, is not sent to the image model, and remains with minimal financial records after room deletion.
Other services
Hosting and storage run on Sites and Cloudflare. When enabled, Stripe processes payments, Resend delivers account emails, and Google or Apple can authenticate you. We do not store card details. Retailer links—including Pottery Barn—open separate sites under their own privacy policies. Opening a product link does not send your signup details to that retailer.
Deleting a room and policy updates
Delete rooms in My rooms to remove original and generated media and clear preferences. Minimal purchase and usage records remain for payment support and disputes. You can view account information in Account. Material changes to this notice will be posted here with an updated date; new marketing permissions require a separate opt-in.
Prelaunch limitations
This site is operated under the deCour project name. Checkout remains closed while final legal operator identity, direct support contact, legal review of purchase/refund terms and service readiness are completed. The working My discount controls are the current way to manage wheel signup data. Do not submit information you are not comfortable storing in this prelaunch service.