Privacy Policy
This text is a draft and has not yet been reviewed by a lawyer. It may change before public launch.
This Privacy Policy explains what personal data PlanarCraft collects, why, and the choices you have. It applies to the website, editor and API. For users in the EU/EEA and UK, PlanarCraft is the controller of the personal data described here.
1. Data we collect
Account data: email address, name and profile image if you sign in with Google, and your language and export preferences.
Content: sketches, photos, reference images, text prompts, chat refinements, generated drawings and versions, title-block details and logos you upload.
Billing data: plan, credit balance and transaction history. Card details are handled by Stripe and never reach our servers.
Technical data: IP address, browser type, device information, request logs and error reports needed to run and secure the Service.
Analytics data: only if you accept analytics cookies — aggregated page views and feature usage.
2. How and why we use it
To provide the Service (contract): creating your account, generating and storing drawings, exporting files, charging and crediting your plan.
To keep the Service secure and reliable (legitimate interests): fraud and abuse prevention, rate limiting, content moderation, debugging and error monitoring.
To communicate with you (contract / legitimate interests): sign-in links, receipts, service notices. Marketing emails only with your consent, and you can unsubscribe at any time.
To understand product usage (consent): analytics, only after you accept them in the cookie banner.
To meet legal obligations: tax, accounting and responding to lawful requests.
3. AI processing
To generate drawings and images, the relevant Inputs are sent to AI model providers acting as our processors or service providers. We select providers whose terms do not allow them to train their models on API data, and we do not sell your content.
Automated processing helps produce drafts; it does not make decisions with legal or similarly significant effects about you.
4. Sharing
We share personal data only with service providers that help us run the Service — for example cloud hosting and storage, database hosting, payment processing (Stripe), email delivery, error monitoring, file conversion and AI model providers — under contracts that limit their use of the data.
We may disclose data if required by law, to protect rights and safety, or as part of a merger or acquisition with notice to you. We do not sell personal data and do not share it for cross-context behavioural advertising.
5. International transfers
Our providers may process data outside your country, including in the United States. Where data from the EU/EEA or UK is transferred, we rely on adequacy decisions (such as the EU-US Data Privacy Framework) or Standard Contractual Clauses.
6. Retention
We keep account data and drawings while your account is active. Drawings and uploads you delete are removed from active storage, and from backups within a limited period (target: 30 days). Billing records are kept as long as tax law requires. Logs are kept for a limited period for security. When you delete your account, we delete or anonymise your personal data unless we must keep it by law.
7. Cookies
Essential cookies keep you signed in, remember your language and store your cookie choice; they are always on. Analytics cookies are off by default and are set only after you click “Accept analytics”. No third-party analytics script is loaded before you consent. You can change your choice at any time using “Cookie settings” in the footer.
8. Your rights
EU/EEA and UK: you can request access, correction, deletion, restriction, portability and object to processing based on legitimate interests; you can withdraw consent at any time and lodge a complaint with your supervisory authority.
California and other US states: you can request to know, access, correct and delete personal data, and you will not be discriminated against for exercising these rights. We do not sell or share personal data as defined by the CCPA/CPRA, and we honour Global Privacy Control signals as an opt-out.
To exercise your rights, email privacy@planarcraft.example. We may need to verify your identity and will respond within the time limits required by law.
9. Security and children
We use encryption in transit, access controls and least-privilege credentials to protect data. No method is completely secure, and we will notify you of a breach as the law requires.
The Service is not directed to children under 16 and we do not knowingly collect their data.
10. Changes and contact
We will post updates here and notify you of material changes. Contact: privacy@planarcraft.example. The controller’s legal name, address and (if required) EU/UK representative will be added once confirmed.