Draft, pending legal review. Effective date: [to be confirmed: effective date]
This policy explains what [to be confirmed: product name] (the "Service") collects when you use it, why, who else sees it, and what you can ask us to do with it. The Service is operated by [to be confirmed: US company legal name and street address] ("we", "us").
The short version: we collect very little. There are no ads, no outside analytics, and we do not sell or share your personal information for advertising. Most of what you do stays in your own browser.
When you use the Service without signing in
When you share a house with other people
A shared house is stored on our server so everyone with a link sees the same house. We keep:
A display name is whatever you type. It does not have to be your real name. While people are looking at a shared house together, their names and where they are looking are passed between them live and are not stored.
When you sign in with Google
Signing in is optional. If you do, Google tells us your Google account ID, name, email address and profile picture link. We keep those, when you first signed in and when you were last seen, and a sign-in session (see section 5). We never see your Google password.
What we do not collect
We do not collect your location, contacts, payment information, or any information from other websites. Our own records of usage and feedback do not include your IP address; our hosting provider handles IP addresses to deliver the Service (section 3).
We do not use your plans, houses or comments to build profiles or for advertising.
We use these service providers, and only for the purpose shown:
| Provider | What for | What they receive |
|---|---|---|
| Fly.io | Hosts the Service, in the United States | Everything the Service stores and serves, plus request data such as IP addresses |
| Sign-in, if you choose it | Your sign-in request; your browser also loads your profile picture from Google | |
| Anthropic | Reads uploaded floor plan pictures | The picture or PDF you upload |
Our affiliate in South Korea builds and runs the Service for us. Its staff can access the information above only to operate, support and improve the Service, under our instructions.
People you give a link to see the shared house, its changes, comments and display names. What each link allows (edit, comment, or view only) is shown when you share. Anyone who has a link can use it, so share links only with people you trust.
We do not sell your personal information and we do not share it for cross-context behavioral advertising. We may disclose information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business, in which case this policy continues to apply to it.
Your own house, its changes and saved versions, your display name, the owner keys and links of houses you shared, and a few settings (such as walking pace) are kept in your browser's local storage, not on our server. The tab ID for usage steps is kept in session storage and is gone when the tab closes. Clearing your browser's site data removes all of it. A link you copy that holds the house in it (after the # in the address) is read by your browser and is not sent to our server.
The Service sets one cookie, and only if you sign in: a session cookie that keeps you signed in for up to 30 days, or until you sign out. Our server keeps only a scrambled (hashed) copy of it. There are no advertising or analytics cookies.
Do Not Track. No other company tracks you across sites through the Service, and we do not track you across other sites, so a browser's Do Not Track signal does not change anything we do.
You can ask us to:
Write to [to be confirmed: privacy contact email]. We will need enough to find your information, such as the email address you signed in with or a link to the shared house, and may ask you to confirm it is you. We will answer within 45 days. We will not treat you differently for asking.
California residents. We do not sell your personal information or share it for cross-context behavioral advertising, as California law uses those terms. The requests above are open to everyone, wherever you live.
The Service is not for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, write to [to be confirmed: privacy contact email] and we will delete it.
Sign-in sessions and owner keys are stored only in scrambled (hashed) form, links are long random tokens, and the Service is served over HTTPS. No system is perfectly secure, and anyone who has a share link can open that house.
The Service is hosted in the United States, and our affiliate in South Korea can access it from there to run the Service (section 3). If you use the Service, your information is processed in the United States and may be accessed from South Korea.
If we change this policy, we will post the new version here with a new effective date. If a change matters, such as collecting something new, we will also say so in the Service before it applies.
[to be confirmed: US company legal name and street address]
[to be confirmed: privacy contact email]