Privacy Policy
AI Architecture Design Generator's commitment to protecting your privacy and personal data
Privacy Policy
These pages explain how the platform handles user information, account usage, payments, and browser data so teams can review the operating rules before they work inside the product.
Document overview
The legal layer should feel as readable and product-aligned as the rest of the site. We keep these documents in a calmer editorial format so people can scan the essentials before reading the full text.
Read the complete document
The full policy sits in a dedicated reading card below, so the layout stays calm and readable instead of forcing the entire document into a cramped side column.
Introduction
This Privacy Policy explains how AI Architecture Design Generator collects, uses, stores, and protects personal information when you use our website and AI-powered architecture, interior design, and virtual staging services at https://aiarchgenerator.com/.
Your privacy matters to us, and we are committed to handling personal data in accordance with applicable privacy and data protection laws.
Information We Collect
We may collect the following categories of information:
Account Information
- Name, email address, and account credentials
- Authentication details needed to secure access to your account
- Optional profile information that you choose to provide
Payment and Billing Information
- Billing-related details needed to process purchases and subscriptions
- Transaction status, subscription status, invoices, and payment history
- Limited payment metadata received from our payment processors
We do not store full payment card numbers on our own systems.
Content and Usage Information
- Prompts, settings, and tool selections you submit
- Uploaded images, room photos, sketches, floor plans, or other reference assets
- Generated outputs such as architecture renders, interior concepts, and virtual staging images
- Download activity, usage history, feature access, and plan-related consumption data
Device and Technical Information
- IP address, browser type, operating system, device type, and approximate geolocation
- Log data, diagnostics, crash data, and performance information
- Cookies and similar technologies described in our Cookie Policy
How We Use Your Information
We use personal information to:
- Provide, maintain, and secure the Services
- Authenticate users and manage accounts
- Process purchases, renewals, cancellations, and related support requests
- Run generation, editing, and virtual staging workflows
- Store and serve your uploaded and generated assets
- Improve product quality, reliability, abuse prevention, and safety systems
- Respond to support inquiries and send transactional emails
- Analyze product usage, diagnose issues, and monitor platform health
- Comply with legal obligations and enforce our terms and policies
How We Share Information
We share information only with the categories of service providers (subprocessors) listed below, who are contractually required to use it solely to deliver their portion of the Services on our behalf.
Subprocessors
| Provider | Purpose | Category of data |
|---|---|---|
| Vercel | Web hosting, edge runtime | IP, request metadata, log data |
| Supabase | Authenticated database, file metadata | Account, subscription, usage records |
| Cloudflare R2 | Object storage for uploaded and generated images | Image binaries, derived thumbnails |
| Upstash | Rate-limit and queue state | Anonymized request counters, IP-bucket keys |
| Creem | Payment processing, subscription billing, customer billing portal | Email, billing address, transaction history; full card data is held by Creem and never reaches our systems |
| fal.ai | AI generation, editing, virtual staging inference | Prompt text, uploaded reference images, output images |
| Resend (or equivalent transactional email) | Login links, receipts, account notifications | Email address, message content |
| Sentry | Error monitoring, crash diagnostics | Stack traces, user IDs (no prompt content) |
| PostHog | Product analytics, feature usage | Anonymized event metadata, user IDs |
We may add, replace, or remove subprocessors as the product evolves. The current list above represents subprocessors as of the effective date of this Privacy Policy.
Other disclosures
We may also disclose information when required by law, to protect rights and safety, to investigate abuse or fraud, or in connection with a merger, acquisition, financing, or sale of assets.
We do not sell your personal information for money.
Data Retention
We retain personal information for as long as reasonably necessary to operate the Services, fulfill the purposes described in this Privacy Policy, resolve disputes, enforce our agreements, and comply with legal obligations.
Retention periods may vary depending on the type of data, your plan, account status, support history, legal requirements, and operational needs. Specifically:
- Uploaded and generated images: stored on Cloudflare R2 until you delete them through the dashboard, you delete your account, or your plan's history-retention limit (50 / 500 / 1000 items depending on tier) requires automatic cleanup of older items
- Account and subscription records: retained for the lifetime of your account plus a reasonable period afterwards to resolve billing disputes and meet financial recordkeeping requirements (typically up to 7 years for invoice and tax records)
- Prompts: retained as part of the generation lineage record to power the "edit & iterate" workflow and to allow abuse review; retention follows the same window as the corresponding generated image
- Operational logs and diagnostics: retained for a short rolling window (typically 30–90 days) for debugging and security
- Anonymized analytics and aggregate metrics: may be retained indefinitely as they no longer identify individuals
Data Security
We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encryption in transit, monitoring, and provider security controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
International Data Transfers
Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for international data transfers.
Your Rights and Choices
Depending on your location, you may have rights such as:
- Accessing the personal information we hold about you
- Correcting inaccurate or incomplete data
- Requesting deletion of your information
- Requesting a copy of certain data in a portable format
- Objecting to or restricting certain processing
- Withdrawing consent where processing depends on consent
You may also manage some information directly through your account settings. To exercise privacy rights, contact us using the information below.
Children
The Services are not intended for children under the age permitted by applicable law, and we do not knowingly collect personal information from children in violation of applicable law.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and update the effective date when appropriate.
Contact
If you have questions about this Privacy Policy or would like to make a privacy request, please contact us at support@aiarchgenerator.com.