Privacy policy

Foresee Commerce is operated by MLB INNOVATION LTD, a company registered in England and Wales under company number 11990169, with registered office at 65 Coniston Road, Basingstoke, Hampshire, England, RG22 5HT. For UK data protection purposes, MLB INNOVATION LTD is the controller for account, website, billing, and service administration data. Where a business customer uploads customer or employee personal data into its workspace, we may act as processor for that customer.

• Account and workspace data: name, email address, hashed password, role, business details, invitation details, and account settings.
• Customer project data: project names, customer names, customer email addresses where provided, room photos, notes, product selections, and generated visualisations.
• Product and catalogue data: product images, catalogue pages, descriptions, attributes, placement notes, and generated visualisation outputs.
• Usage and technical data: timestamps, authentication events, visualisation counts, API activity, integration status, logs, errors, device/browser data, IP-derived security data, and cookie identifiers.
• Support and communications: messages you send us and information needed to respond.

• To create and manage accounts, workspaces, invitations, and sessions.
• To provide product upload, project management, AI generation, correction, and gallery features.
• To send relevant content to AI providers and infrastructure providers so they can process it for the Service.
• To operate integrations, API keys, support, billing, security, fraud prevention, and usage limits.
• To monitor reliability, debug errors, improve product quality, and understand feature usage.
• To comply with legal, tax, accounting, security, and regulatory obligations.

We rely on different lawful bases under UK GDPR depending on context: contract where processing is needed to provide the Service; legitimate interests for security, service improvement, analytics, and support; legal obligation for accounting, tax, compliance, and rights requests; and consent where required, such as for optional cookies or marketing.

To provide AI-generated visualisations, we may send uploaded content, prompts, masks, and related metadata to AI providers. We also use infrastructure and business providers for hosting, databases, storage, analytics, email, authentication, and integrations. Current processing details are described in our data processing overview.

We do not sell personal data. We share data with service providers that help us operate the Service, with integration providers you connect, with professional advisers where needed, and with authorities or third parties where required by law or to protect rights, safety, and security.

Some providers may process data outside the UK. Where this happens, we use appropriate safeguards where required, such as UK International Data Transfer Agreements, the UK Addendum to EU Standard Contractual Clauses, adequacy regulations, or provider transfer frameworks.

We keep account and workspace data while your account is active. Uploaded content and generated visualisations are retained while needed to provide the Service, unless deleted sooner through product features or by request. Soft-deleted records may remain in backups, logs, and audit records for a limited period. We retain billing, security, and legal records for as long as necessary to meet legal obligations and protect legitimate interests.

Depending on your location and the data involved, you may have rights to access, correct, erase, restrict, object to processing, request portability, withdraw consent, and complain to the UK Information Commissioner's Office. To exercise rights, write to MLB INNOVATION LTD at65 Coniston Road, Basingstoke, Hampshire, England, RG22 5HT. If we process your data on behalf of one of our business customers, we may direct your request to that customer.

We use reasonable technical and organisational measures including encrypted transport, hashed passwords, access controls, logging, and role-based workspace access. No system is perfectly secure, so you should use strong passwords, protect API keys, and limit access to trusted users.

We use cookies and similar technologies for authentication, security, preferences, analytics, and demo rate limiting. See our cookie notice for more information.

The Service is intended for business use and is not directed to children under 16.

We may update this policy from time to time. Material changes will be notified by email or in-product notice where appropriate. For privacy questions or notices, write to MLB INNOVATION LTD,65 Coniston Road, Basingstoke, Hampshire, England, RG22 5HT.