Privacy Policy.

We collect information reasonably needed to provide, secure and improve the services you choose to use.

• Contact and account information, such as your name, email, phone number, verified-account state and encrypted account credentials.
• Order, delivery, product configuration, payment reference, voucher and customer-support information. Complete card details are handled by the payment provider and are not stored by Blink.
• Website and security information, such as browser/device data, cookie choices, approximate network information and hashed abuse-prevention signals.
• For AI Studio: room photos, normalised copies, generated images, product and colour selections, reports, deletion requests, generation status, cost/usage records and account-linked safety signals.

We collect information directly from you, from your use of our services and from providers that process transactions or service events for us.

• To create and authenticate accounts; process orders, payments, vouchers, refunds and delivery; and communicate service updates.
• To preflight room photos, generate requested Studio results, restore technical-failure credits, provide downloads and carry out deletion requests.
• To prevent fraud and abuse, moderate prohibited content, protect customers and systems, diagnose failures, handle disputes and meet legal obligations.
• To analyse website use where the applicable cookie or analytics choice permits it. Essential paid-service records are kept for operations and reconciliation without room-image content.

A Studio request combines a private normalised room image with catalogue references and your selected product options to produce an indicative image.

• Before sign-in, a selected room photo remains a browser-local draft for up to 24 hours. It is uploaded to Blink only after you continue while signed in and the Studio credit boundary is satisfied.
• The browser-local blurred preview is a placeholder rather than generated AI output and uses no credit.
• An upload first enters private staging under a short-lived upload contract. If accepted after preflight, Blink keeps a private accepted original and creates a separate normalised generation copy. Staging cleanup and age-based deletion run through scheduled, retryable maintenance.
• The normalised generation copy is re-encoded and supported EXIF or GPS metadata is not carried into it. The private accepted original may retain embedded metadata; remove sensitive metadata before upload and use the account deletion controls when needed.
• Automated tools and approved providers may inspect content for safety, fraud, technical quality and provider policy compliance.
• Do not upload faces, children, identity documents, financial or health information, or any content you do not have permission to process.
• Studio image content is not copied into general marketing analytics, customer advertising audiences or ordinary admin dashboards.

We use reasonable technical and organisational safeguards appropriate to private customer images and account records.

• Studio source and output objects use private storage and are not served from permanent public URLs.
• Customer access uses short-lived signed links after current ownership, retention and deletion checks.
• Access is role-limited, service actions are logged where appropriate, and transmission uses encrypted connections.
• No online service is risk-free. Contact us promptly if you believe your account or Studio content has been accessed without permission.

We use service providers for functions such as payment, email, delivery, cloud storage, security and AI processing, and share only information reasonably needed for the relevant function.

• Some providers may process personal information outside Australia, including in the United States and other countries or regions where their approved infrastructure and subprocessors operate.
• For AI Studio, the launch AI provider, subprocessors and likely processing countries have not yet been selected. Public launch remains blocked until they are reviewed and this policy is updated with provider-specific disclosure where practicable.
• We assess contractual, technical and organisational protections and take reasonable steps for overseas disclosures in accordance with applicable privacy obligations.
• Blink does not authorise an AI provider to use customer Studio content for its own model training; provider privacy, retention and training terms are launch review gates.

AI Studio uses scheduled retention maintenance and records deletion completion only after the corresponding private objects are deleted.

• The intended availability window is 30 days after the latest generation for a project's private source material and 12 months after creation for a generated image.
• When an availability window ends, scheduled maintenance claims the record, deletes the private object and then records completion. Temporary failures remain pending and are retried.
• User-requested deletion is implemented and retryable. You may request deletion of a result or whole project; the request can remain pending while active work reaches a safe point, and private-storage deletion is retried before completion is recorded.
• Operational, financial, consent, security, complaint and audit records can remain where reasonably required by law or legitimate obligations. After user-requested image deletion is confirmed, those records do not contain the deleted image object.

Routine staff image access is not provided, and contacting support does not give staff access to an image.

• A report may be assessed from the customer's description and available non-image service records.
• Only an administrator may request image access for a result the customer has reported. A written reason and fresh request identifier are required, access is audited before a five-minute signed link is issued, and lists never preload the image.
• There is no public or routine administrator image-preview path. Staff can assess non-image records, while the temporary reported-image control is restricted to administrators.
• Support review does not grant permission to use the image for marketing, portfolio display or AI model training.

Service processing needed to fulfil a Studio request is separate from optional marketing and analytics choices.

• Blink will not use a room photo or generated image in advertising, social media, case studies, portfolios or AI model training without separate, explicit and informed consent.
• Buying a Studio Pass, accepting the service Terms or reporting a result is not consent to marketing or training use.
• You may withdraw optional marketing consent using the unsubscribe control or by contacting us; withdrawal does not affect processing already lawfully completed.
• Consent-free operational metrics are limited to service identifiers and categorical or numeric events and do not contain the room photo, generated image, prompt, durable image URL, email address or raw IP address.

You may ask to access or correct personal information we hold about you, or complain about how it has been handled.

• Use your account controls for available Studio downloads and deletion requests, or contact the Privacy Officer for broader access or correction requests.
• We may need to verify identity and may be unable to delete information that must be retained for legal, security, dispute or financial-record purposes.
• Send a privacy complaint in writing using the contact details below. We aim to acknowledge it promptly and respond within a reasonable period, usually within 30 days.
• If you remain dissatisfied after giving us a reasonable opportunity to respond, you may contact the Office of the Australian Information Commissioner.

We update this policy when our information-handling practices or legal obligations materially change and publish the revised date at the top.

• Where appropriate, we will provide an additional notice before a material new use or disclosure.
• AI Studio and online purchasing are not directed to children. A child must not create a Studio account or upload content.
• Contact us if you believe a child has submitted personal information so we can investigate and take appropriate deletion or safety action.
• The current published policy version is recorded when a customer accepts Privacy and Terms for a Studio Pass purchase.