Privacy Policy

1. Data Controller

Responsible:
Tax ID/VAT:
Address:
Contact:

2. Data we process

We may process your name, email, cryptographically protected password, session data, contracted plan, and projects you choose to save. Projects may include texts, floor plans, images, conversations, design preferences, and selected products.

If you subscribe to a plan, Stripe processes payment data. Space Planner only receives identifiers and subscription status information; it does not store the full card number.

3. Purposes and legal basis

We process data to create and protect the account, provide the requested services, synchronize projects, generate AI content, manage subscriptions, answer queries, prevent abuse, and comply with legal obligations. The legal bases are service execution, consent where applicable, legal compliance, and legitimate interest in platform security.

4. Artificial intelligence and third parties

The texts, images, or floor plans necessary to execute a request may be sent to the AI provider configured on the server, such as OpenRouter or the chosen model provider. We may also use hosting services, Stripe for payments, and affiliate networks like Awin. Each provider processes only the necessary data according to their applicable terms and agreements.

Some providers may operate outside the European Economic Area. In these cases, the guarantees required by regulations, such as adequacy decisions or standard contractual clauses, must be applied.

5. Retention and security

We retain data as long as the account is active or necessary to provide the service. When you delete the account, we will delete the profile, sessions, and associated projects, except for information that must be temporarily retained due to legal obligations, billing, security, or limited recovery copies. Sessions expire after 30 days.

6. Rights

You can request access, rectification, deletion, limitation, opposition, and portability by writing to the indicated email. You can also delete your account from the Account page. If you believe the processing is incorrect, you can file a complaint with theSpanish Data Protection Agency.

7. Minors

The service is not intended for users under 14 years of age. If we detect an account created without the necessary authorization, we may delete it.

8. Changes

We may update this policy when the service or providers change. The date of the current version appears at the beginning of the document.