SlabStudioAIBack to site

Privacy Policy

Last updated 5 October 2026

This explains what SlabStudioAI, operated by EtechAll, does with personal data. It covers two different groups of people, and the difference matters.

Two kinds of people use this service

Fabricators are our customers. They sign up, pay us, and we are the data controller for their account data.

Homeowners visit a fabricator’s branded page and upload a photo of their kitchen. For that data the fabricator is the controller and we are the processor - we hold and process it on their instructions. If you are a homeowner wanting your data removed, contact the fabricator whose page you used, or write to us and we will pass it on.

What we collect

From fabricators

  • Name and email address, used to create and secure the account.
  • Company name, page address, logo, colours and contact details, shown on your page.
  • Your slab catalogue, prices, install rates and minimum charge.
  • Any custom domain you connect.
  • Billing state - subscription status, trial end, renewal date - from our payment provider. We never see or store your card details.

From homeowners, on a fabricator’s page

  • The photograph of their room that they upload.
  • The render generated from it, and the square footage the AI estimated.
  • Name, email address, and optionally phone number and a message, if they ask for a quote.
  • The stone they chose and the indicative total they were shown.

What we do not collect

On a fabricator’s branded page: nothing. No analytics, no advertising trackers, no third-party cookies. Those pages belong to the fabricator and their visitors are the fabricator’s customers, not ours to measure.

On slabstudioai.com itself — our marketing pages, sign-in and the fabricator dashboard — we use two Microsoft and Google tools to understand how the site is used. Google Analytics records which pages you visit; Microsoft Clarity additionally records your session, meaning your mouse movement, scrolling and clicks are replayed back to us as a video of the page. Both set their own cookies and receive your IP address. Clarity masks text you type into form fields by default, but you should assume anything visible on screen may appear in a recording.

Both run only on our own domain and never on a fabricator’s branded page. If you would rather not be recorded, most browsers’ do-not-track and script-blocking extensions stop both, and we do not treat blocking them as a reason to refuse service.

Those same pages also carry the Meta pixel. It tells Meta (Facebook and Instagram) that a browser visited a page here, so that we can show our own advertising to people who have looked at SlabStudioAI and measure whether those ads work. It sets Meta’s cookies and receives your IP address. This one is advertising rather than measurement, and it is the reason the line about advertising further down this page is worded as it is.

The sales video on our home page is hosted on YouTube and plays from Google’s servers rather than ours, so loading the page tells them your IP address. We embed it through YouTube’s privacy-enhanced host, which holds off setting their cookies until the video actually plays - and it is set to play automatically, so in practice it will. It sits on our marketing pages only.

The same pages carry a live chat window provided by tawk.to. It sets its own cookies and receives your IP address, and if you start a conversation it stores what you write and any name or email address you give it, so that we can reply. Like the tools above, it appears only on our own site — never on a fabricator’s branded page or inside the visualiser embedded on their website.

We set only one cookie of our own: the one needed to keep a signed-in fabricator signed in. Visitor IP addresses are used briefly in memory to rate-limit abuse and are never written to our database.

Photographs go to an AI model

This is the part worth reading twice. When a homeowner uploads a room photograph, that image is sent to Google’s Gemini API: once so the model can estimate the countertop area, and once more, alongside the chosen slab image, so it can generate the visualisation. This is necessary to provide the service and cannot be opted out of while still using it.

Google processes the image under its own terms as our sub-processor. We do not use uploaded photographs to train any model of our own.

How images are stored

Uploaded photographs, generated renders, slab images and logos are stored in our file storage under unguessable random addresses. Anyone who is given one of those links can open the file without signing in - the same way an unlisted link works. The links are not published or indexed, but they are not password-protected either. Do not share a render link with anyone you would not want to see the photograph.

Who else processes your data

We use these providers to run the service. Each only receives what it needs:

  • Supabase — Database, authentication and file storage (United States).
  • Vercel — Website and application hosting (United States).
  • Google (Gemini API) — AI analysis of uploaded photos and image generation (United States).
  • Paddle — Payment processing and merchant of record (United Kingdom / United States).
  • Resend — Transactional email delivery (United States).
  • tawk.to — Live chat on our own website and dashboard (United States).
  • Meta — Advertising pixel on our own marketing pages (United States).
  • YouTube (Google) — Hosts the sales video embedded on our home page (United States).

Because these providers are largely in the United States, personal data is transferred internationally and stored there.

We do not sell personal data. We do share a limited amount of it for advertising: the Meta pixel described above tells Meta that a browser visited a page on our marketing site, which is what lets us show our own ads to people who have looked at SlabStudioAI. It never runs on a fabricator’s branded page, so a homeowner who uses the visualiser is not included.

How long we keep it

Account data is kept while the account is open. Room photographs, renders and leads are kept so the fabricator can go back to them, and are deleted when the fabricator deletes the record or closes their account. We do not currently run an automatic deletion schedule; if you want something removed sooner, ask and we will remove it.

Your rights

Depending on where you live you may have the right to access, correct, export or delete your personal data, to object to processing, or to complain to a data protection authority. To exercise any of these, email support@slabstudioai.com. We will respond within 30 days.

A fabricator can delete any slab, render or lead from their dashboard at any time, and can ask us to delete their entire account.

Security

Data is encrypted in transit. Database access is restricted per account at the database level, so one fabricator cannot read another’s leads or catalogue. Passwords are hashed by our authentication provider and are never visible to us. No system is perfectly secure; if we become aware of a breach affecting your data we will tell you.

Children

The service is for businesses. It is not directed at children and we do not knowingly collect data from anyone under 16.

Changes

We will update this policy as the service changes. Material changes will be notified by email to account holders.

Contact

EtechAll — support@slabstudioai.com