Privacy policy
This policy explains what personal data Home Design Engine ("we", "the service") collects, why, and what you can do about it. Questions go to [email protected].
What we collect
- Account details: your email address, display name and, if you set one, a password. Passwords are stored only as a salted scrypt hash.
- Sign-in with Google or Facebook: if you choose it, we receive your account ID with that provider, your email address and your name. We do not receive your password, contacts, posts or friends list, and we never post on your behalf.
- Your designs: projects you save online, their versions and preview images, and anything you choose to publish to the community.
- Billing: if you subscribe, payment is handled by Stripe. We keep your plan, subscription status and receipts; we never see or store your card number.
- Support messages you send us.
- Anonymous usage statistics: counts of features used and errors, so we can improve the product. These records are not linked to your account, carry no IP address, and use no cookies or device storage, so they cannot identify you. Because they are anonymous, they have no fixed deletion date.
Cookies
We use one strictly necessary cookie to keep you signed in. It is HttpOnly and only sent to our API. We use no advertising or third-party tracking cookies.
Why we use it
- To provide the service you asked for: your account, saved designs and sign-in (contract).
- To send account mail such as verification, password reset, security notices and receipts (contract).
- To bill subscriptions and meet tax and accounting duties (contract, legal obligation).
- To keep the service secure and improve it through anonymous statistics (legitimate interest).
We do not sell personal data or use it for advertising.
Who processes it for us
- Cloudflare: website hosting, file storage and network security.
- Our server host, which runs the application and database.
- Stripe: payments.
- Email delivery providers, which send account mail.
- Google and Facebook, only when you choose to sign in with them.
These providers may process data outside your country. Where required, transfers rely on standard contractual clauses or an equivalent safeguard.
How long we keep it
We keep account data and designs while your account exists. When you delete your account, its personal data and designs are removed. Billing records are kept for as long as tax law requires. Server logs are kept briefly for security and do not contain full email addresses.
Your rights
You can access, correct, export and delete your data. Signed-in users can download a copy of their data and delete their account from Account → Data. You can also email us, and you may complain to your local data protection authority. See how to delete your data.
Children
The service is not intended for children under 16.
Changes
If we change this policy in a way that matters, we will update the date above and tell account holders by email.