Draft for legal review. This document describes how the product works today and is pending review by counsel before launch. It is not yet a final legal agreement.
Privacy policy
What we collect, why, who processes it, and the choices you have.
Last updated October 22, 2026
Summary
We collect what we need to run the service, we don't sell personal data, and project content is never used for analytics or AI training.
Who we are
HomeDesigner.io is provided by [Company legal name], [registered address] ("we"). We are responsible for the personal data described in this policy. Privacy contact: [privacy contact email], or the contact form.
What we collect
| Category | Examples | Why |
|---|---|---|
| Account | Name, email, sign-in methods, two-factor and passkey settings | To create and secure your account |
| Workspace & collaboration | Workspace name, members and roles, invitations, comments | To provide shared workspaces |
| Your content | Projects, designs, history, uploads, renders, exports | To provide the service to you and people you share with |
| Billing | Subscription status, seat count, invoices, billing country for tax | To charge correctly. Card details are handled by our payment providers; we never see full card numbers |
| Support | Messages you send us; diagnostic details you approve | To help you |
| Security logs | Sign-in events, IP address, device type, audit records | To protect accounts and investigate abuse |
| Product telemetry | Feature usage, performance and error reports | To improve reliability. Excludes project content; sensitive fields are masked; the editor canvas is not recorded in session replays |
Service providers (processors)
| Provider | What they do |
|---|---|
| Cloudflare (R2 storage, Turnstile) | Store uploaded files, renders and exports; protect forms from bots |
| Stripe | Card payments and invoices |
| PayPal | PayPal payments |
| Postmark | Transactional email (verification, invitations, receipts, security alerts) |
| PostHog | Product analytics: which pages and features are used, without project content, typed text or what's on the editor canvas. Only while product analytics is on for you |
| Anthropic | AI features you choose to use: Build with AI, the editor's AI assistant, blueprint wall detection and the help assistant. Workspace AI features run only when AI processing is enabled for your workspace |
Providers process data only on our instructions. Our hosting and database providers will be listed here before launch.
AI processing
When you use AI features, what the feature needs is sent to Anthropic to generate an answer: your answers to the Build with AI questions; for the editor's assistant, a compact text summary of the rooms and items involved and your request; for wall detection, a reduced copy of the plan image you import; for the help assistant, your question and the help articles used to answer it. Your data is not used to train AI models. Prompts aren't stored in our logs by default. Workspace Owners and Admins can turn off external AI processing; AI features then become unavailable and everything else keeps working.
Files and photos
Uploaded files are stored privately and downloaded through short-lived signed links after checking access. Location (GPS) metadata is removed from images by default.
Sharing
Projects are private by default. Share links can expire, be password-protected and be revoked at any time.
Retention
- Workspace data is kept while your subscription is active and for at least 90 days after it ends, with notices before deletion.
- Deleted designs stay in trash for 30 days while subscribed.
- Workspace and account deletions run after a recovery window. Deleted data then ages out of our encrypted backups on their normal rotation: stored files within 35 days, database records within 12 months (to be confirmed).
- Security and audit records may be kept longer where we have a justified security or legal reason.
Operational records (to be confirmed before launch):
- Audit records keep the IP address and browser details of the action for 90 days; after that those details are removed and the rest of the record stays.
- The content of emails we send you is deleted after 30 days; the record that an email was sent is deleted after 365 days.
- Notifications our payment providers send us are deleted after 90 days.
- Counters used for rate limits are deleted as soon as they expire.
Your choices and rights
- Export your data at any time from workspace settings.
- Turn product analytics off in your profile privacy settings. Marketing email is optional and separate from transactional email.
- Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing and to data portability. Contact us to exercise them.
Cookies
See the Cookie policy.
Contact
Privacy questions or requests: contact us and choose "Privacy or data request".