Privacy Policy

1. Who is responsible

The data controller for ArchCanvas is [OPERATOR LEGAL NAME — founder to fill], contactable at [email protected]. Write to that address for anything in this policy, including a deletion request.

2. What we collect

• Account data — your email address and an account identifier, held so you can sign in and so your work is attached to you. Sign-in is handled by Neon Auth; if you use Google sign-in, we receive an identifier and, usually, your email.
• What you create — your project names, briefs, chat messages with the design agent, the generated floor-plan source and drawings, and any reference or sketch images you upload.
• Credits and purchases — your credit balance and a ledger of grants and spends. If you buy a pack we also store the Stripe session, payment and charge identifiers and the receipt link.
• Product telemetry — counters about how the compiler and the model performed (did the plan compile, how many repair passes, token counts, timings) and a small record of which funnel step an account has reached. These rows hold an account identifier, a timestamp and numbers. They never contain your brief, your chat or your plan.
• Newsletter — only if you subscribe: your email, held by Resend until you unsubscribe.
• Feedback — if you send in-product feedback, your message, your account identifier and email are used to open a tracking issue in our private GitHub repository.

What we do not collect: we do not store card numbers (Stripe does), and there is no advertising or cross-site tracking on this product.

3. Who processes it

To run the service we pass data to a small set of processors, each for one job:

• Neon — the database and the authentication service.
• OpenAI — receives your brief, chat messages, floor-plan source, uploaded reference images and, if you use voice input, the recorded audio, in order to generate and render designs.
• Cloudinary — hosts your uploaded reference images and generated renderings.
• Stripe — takes the payment. Your card details go to Stripe directly and never through us.
• Resend — sends the newsletter, if you subscribed.
• DigitalOcean and Cloudflare — host and front the application; standard server and CDN request logs apply.
• Plausible — if enabled, counts anonymous page views for the public marketing pages. It sets no cookies and does not track individuals across sites.

These providers operate outside your country in some cases, including in the United States. We do not sell your data, and we do not share it with anyone else except where the law requires it.

4. Cookies

We use cookies and equivalent browser storage only to keep you signed in and to remember interface preferences. There are no advertising or analytics cookies.

5. How long we keep it

Your account, projects, designs and uploads are kept until you delete them or ask us to close your account. Payment records are kept for as long as tax and accounting rules require. Telemetry counters are retained indefinitely in aggregate; they are not tied to your content and cannot reconstruct it.

6. Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account and its contents. Email [email protected] and we will action it within 30 days. Depending on where you live you may also have the right to object to processing, to restrict it, or to complain to your data protection authority. Deleting your account removes your projects, designs and uploads; anonymous counters and legally required payment records survive it.

7. Security, honestly stated

Data is encrypted in transit, access is limited to the people running the service, and payment card data never reaches our servers. No system is perfectly secure, and ArchCanvas is a small product on modest infrastructure — export anything you would not want to lose, and do not upload material you consider highly sensitive.

8. Children

ArchCanvas is not intended for children. Do not create an account if you are under 16 (or the minimum age in your country, if higher).

9. Changes

If this policy changes, the date at the top changes with it and material changes are announced in-product or by email. See also our Terms of Service.