Privacy Policy
Last updated
This document is being finalized through a legal compliance service (Termly or iubenda) and will be reviewed by counsel before launch.
The full Privacy Policy will cover the following sections required by Document 8 §4:
- What data Furnish collects
- How that data is used
- Data retention periods (photos auto-delete 30 days post-redesign)
- Third-party data sharing (retailers, Vercel, Skimlinks, Supabase)
- User rights (access, deletion, portability)
- Cookies and tracking
- Children's privacy (COPPA)
- International transfers
- Policy update notification process
- Contact information
In the meantime, the high-level data flow is:
What we collect
- Photos you upload to the Furnish iOS app are processed for your redesign and auto-deleted from our servers 30 days after the redesign completes.
- Account data (email, sign-in provider, preferences) lives in our Supabase database. Deletable from Settings inside the app or by emailing hello@furnish.live.
- Waitlist email addresses submitted on furnish.live are stored in Supabase. Used only to notify you when Furnish launches.
- Aggregate site usage is collected by Vercel Analytics (page views, outbound clicks, custom events) and Vercel Speed Insights (Core Web Vitals: LCP, INP, CLS). No personal data is attached. No cookies are set. No cross-site tracking.
Cookies and third-party tracking
Furnish uses the following third-party services. Their tracking behavior differs and is disclosed below.
Vercel Analytics + Speed Insights
Vercel Analytics is privacy-respecting. It does NOT set cookies. It does NOT track individual users across sessions. It does NOT collect personal data. Visitor IP addresses are not stored. Vercel Analytics runs site-wide.
Vercel Speed Insights collects Real User Monitoring data on Core Web Vitals (LCP, INP, CLS) so we can see how the site performs on real visitor devices. It uses a sample of pageviews and stores no personal information. Read the full Vercel Analytics privacy notice at vercel.com/docs/analytics/privacy-policy.
Skimlinks (affiliate tracking on blog pages only)
Skimlinks is the affiliate network we use to earn commissions
when readers click through to retailers and buy a product. It runs
ONLY on /blog/* routes; it does NOT load on the home page,
gallery, or any other surface.
When you click a retailer link in a blog post, Skimlinks sets a tracking cookie in your browser. The cookie:
- Is owned and managed by Skimlinks (skimlinks.com), not Furnish
- Is used to attribute purchases at the retailer back to Furnish
- Does not collect or transmit personal information about you
- Is blocked by browsers in private/incognito mode
- Can be deleted at any time using your browser's standard cookie controls
- Can be opted out of via the Skimlinks consumer opt-out at skimlinks.com
If you are on a /blog/* page and do not want Skimlinks tracking,
you can:
- Use a browser extension that blocks third-party tracking (uBlock Origin, Privacy Badger, etc.)
- Use private/incognito browsing
- Adjust your browser's third-party cookie settings
- Visit the Skimlinks consumer opt-out page directly
We disclose this tracking on every blog post via the FTC affiliate disclosure block at the top of the post.
Supabase (waitlist plus app account data)
Supabase is our database provider. It stores your waitlist email or your app account data. Supabase does not set tracking cookies on furnish.live; it acts as a backend storage service called by our server.
What we do not do
- We do NOT sell your data to anyone, ever.
- We do NOT use your photos to train AI models.
- We do NOT share your email with third parties beyond what is required to deliver the service (e.g., transactional email providers when launch lands).
- We do NOT set advertising cookies.
- We do NOT use Google Analytics, Facebook Pixel, or any other cookie-setting third-party analytics on furnish.live. Vercel Analytics (our only analytics provider) is cookieless.
Your rights
Under GDPR and CCPA you have the right to:
- Request a copy of all data we hold about you
- Request deletion of your data
- Request correction of inaccurate data
- Opt out of data sharing for advertising (we do not share data for advertising; opt-out is moot but available)
- File a complaint with your local data protection authority
Email hello@furnish.live with any data request. We respond within 30 days as required by GDPR.
Contact
Email hello@furnish.live with any questions about how Furnish handles your data. We are based in Garden City, Michigan, United States.