BFCM ANGEBOT Erhalten Sie 50 % Rabatt auf den Jahresplan mit dem Code BF50. Nur noch heute!

Privacy Policy

Last updated: September 22, 2026

1. Who we are

MyArchitectAI (www.myarchitectai.com and app.myarchitectai.com) is operated by Luminary Ventures OÜ, registry code 17194356, Järve tn 50a-11, 11314 Tallinn, Estonia ("MyArchitectAI", "we", "us"). We are the data controller for the personal data described in this policy.

Questions about privacy: [email protected]

This policy explains what personal data we collect when you visit our website or use the MyArchitectAI web app and API (together, the "Services"), why we collect it, who we share it with, how long we keep it, and what rights you have.

2. What MyArchitectAI does

MyArchitectAI is a web-based AI rendering tool for architects and interior designers. You upload images of your designs, such as exports from CAD and 3D modeling software, sketches, line drawings, or existing renders. Our AI turns them into photorealistic renders, edited or enhanced images, style variations, and short animations. Everything runs in the browser; there is no software to install.

3. Personal data we collect

Account data. Your name, email address, password (stored only in hashed form), profile picture if you sign in with Google, account settings, and subscription plan.

Google Sign-In data. If you sign in with Google, we receive the data described in section 4.

Content you upload and create. Images you upload (including reference images), text prompts, selection masks, the renders and animations you generate, and project names. We process this content only to provide the Services to you.

Payment data. Payments are processed by Stripe. We receive your billing name, email, billing address, country, VAT ID (if provided), card brand, the last 4 digits and expiration date of your card, and your transaction history. We never see or store full card numbers.

Usage and device data. Pages visited, features used, clicks, session information, errors, IP address, approximate location derived from your IP address, browser, operating system, device type, and referring website.

Advertising data. If you accept marketing cookies, Google Ads and Meta collect information about your visit (such as pages viewed, the ad you clicked, and whether you signed up or subscribed) to measure and improve our ads. With your consent, we also send them a hashed (encrypted, one-way scrambled) version of your email address so they can match conversions to ad clicks.

Communications. Messages you send us through live chat or email, feedback and feature requests, survey answers, and demo bookings.

We do not ask for or intentionally collect sensitive data such as health information, religious beliefs, or government ID numbers. Please don't upload images containing that kind of information.

4. Google user data

If you choose "Sign in with Google", we request access to your basic Google profile information only: your name, email address, and profile picture (Google OAuth scopes: openid, email, profile).

How we use it. To create your MyArchitectAI account, sign you in, identify your account, show your name and picture inside the app, contact you about your account, and, if you have accepted marketing cookies, for the advertising measurement described below.

What we don't do. We do not access your Gmail, Google Drive, Contacts, Calendar, or any other Google data. We do not sell Google user data or use it to train AI models. Apart from the advertising measurement described below, we do not transfer it to anyone except the service providers needed to run the Services (for example, our authentication and database provider, Supabase), or where required by law.

Advertising measurement. If you have accepted marketing cookies, your email address (including one received through Google Sign-In) is hashed and sent to Google Ads and Meta only to measure whether our ads led to your sign-up or purchase. It is never sent in readable form, and it is not sent if you reject marketing cookies.

Storage and security. Google user data is stored in our database hosted by Supabase on Amazon Web Services (US East region). It is encrypted at rest and in transit (TLS).

Retention and deletion. We keep this data while your account is active. It is deleted within 24 hours after you delete your account, and removed from backups within 7 days. You can also remove MyArchitectAI's access at any time in your Google Account settings: https://myaccount.google.com/permissions

MyArchitectAI's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. How we use your data and our legal bases

  • Providing the Services (creating your account, processing uploads, generating renders and animations, storing your history). Legal basis: performance of our contract with you.
  • Payments, invoices, and tax compliance. Legal basis: contract and legal obligation.
  • Customer support. Legal basis: contract and our legitimate interest in helping you.
  • Transactional emails (account activation, password resets, receipts, service notices). Legal basis: contract.
  • Product analytics and improving the Services. Legal basis: your consent where cookies or similar technologies require it, otherwise our legitimate interest.
  • Advertising measurement (Google Ads and Meta, including sending a hashed version of your email address to match conversions). Legal basis: your consent, given through our cookie banner.
  • Security, fraud, and abuse prevention, and enforcing our Terms. Legal basis: legitimate interest.
  • Product update and marketing emails. Legal basis: your consent, or our legitimate interest for existing customers. You can unsubscribe at any time using the link in every email.
  • Complying with the law. Legal basis: legal obligation.

AI training. We do not use your uploaded images, prompts, or generated renders to train AI models, and our AI processing providers do not use them to train their models. Your content is processed only to generate your results.

6. Who we share data with

We do not sell your personal data for money. We share personal data with the service providers below, which process it on our behalf under data processing agreements:

  • Vercel: web app hosting (US and global edge network)
  • Supabase: database, authentication, and account activation emails (AWS US East)
  • Amazon Web Services (S3): file storage (US East)
  • ImageKit: image processing and delivery (EU)
  • fal, Replicate, Runware: AI processing of uploaded images and prompts to generate results (US)
  • Stripe: payments, billing, and tax
  • Postmark: transactional email (US)
  • PostHog: product analytics (EU)
  • Featurebase: live chat support, help center, and feature requests
  • Webflow: marketing website hosting (US)
  • Cloudflare: DNS, content delivery, and security (global)
  • ConsentPro: cookie consent management
  • Cal.com: demo booking
  • PromoteKit: affiliate program tracking, only if you are an affiliate or were referred by one
  • Google: Sign in with Google, only if you choose it

Advertising partners. If you accept marketing cookies, Google Ads and Meta receive data about your visits and a hashed version of your email address to measure and improve our ads. They process this data as independent controllers under their own privacy policies: Google (https://policies.google.com/privacy) and Meta (https://www.facebook.com/privacy/policy). If you reject marketing cookies, this data is not collected or sent.

We may also disclose personal data to professional advisors (such as accountants and lawyers), to authorities when required by law, or to a buyer or successor if our business is sold or merged. In that case, this policy continues to apply to your data.

7. International transfers

Some of our service providers are located in the United States. Where personal data is transferred outside the European Economic Area, we rely on the EU-US Data Privacy Framework (for certified providers) or the European Commission's Standard Contractual Clauses.

8. How long we keep data

  • Account data, uploads, and generated content: kept while your account is active, and deleted within 24 hours after you delete your account.
  • Database backups: kept for a rolling 7 days, so deleted data disappears from backups within 7 days.
  • Product analytics data linked to your account: deletion is requested when you delete your account and completed within 14 days.
  • Analytics data about website visitors who never create an account: up to 7 years, stored without your name or email address.
  • Billing and tax records: 7 years, as required by Estonian accounting law.
  • Server logs: up to 7 days.
  • Support conversations: deleted when you delete your account, unless we need them to resolve an open issue or a legal claim.
  • Advertising data collected by Google Ads and Meta: kept according to their own retention policies.

9. Security

We protect personal data with encryption at rest and in transit (TLS), separate staging and production environments, access limited to people who need it, and multi-factor authentication on all infrastructure accounts. No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities as required by law.

10. Cookies

We use three types of cookies:

  • Essential cookies run the Services (for example, keeping you logged in). These are always on.
  • Analytics cookies (PostHog) help us understand how the Services are used. We use them only with your consent.
  • Marketing cookies (Google Ads and Meta) measure the performance of our ads. We use them only with your consent.

You can change your choices at any time with the cookie preferences link in our website footer, or through your browser settings. We honor Global Privacy Control (GPC) signals as a request to opt out of marketing cookies.

11. Your rights

If you are in the EU, EEA, UK, or Switzerland, you have the right to:

  • access your personal data
  • correct it
  • delete it
  • restrict or object to its processing
  • receive it in a portable format
  • withdraw consent at any time

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, https://www.aki.ee) or with your local supervisory authority.

If you live in a US state with a consumer privacy law (including California, Colorado, Connecticut, Utah, and Virginia), you have the right to:

  • know what personal data we collect and access it
  • delete or correct it
  • receive a portable copy
  • opt out of the sale or sharing of personal data, targeted advertising, and profiling

We do not sell personal data for money. Our use of Google Ads and Meta marketing cookies, including hashed email matching, may be considered "sharing" or "targeted advertising" under some state laws. You can opt out by rejecting marketing cookies in the cookie preferences, or by enabling Global Privacy Control in your browser.

We do not use personal data for profiling that produces legal or similarly significant effects. You may use an authorized agent, and you will not be discriminated against for exercising your rights. If we deny your request, you may appeal by replying to our response.

To exercise any of these rights, email [email protected]. We may need to verify your identity, and we will respond within one month (or the period required by your local law).

12. Deleting your account

You can delete your account at any time in the app under Settings > Account > Delete account, or by emailing [email protected]. Your account data, uploads, and generated content are deleted within 24 hours and removed from backups within 7 days. Analytics data linked to your account is deleted within 14 days. Billing records are kept as required by law (see section 8).

13. Children

The Services are not intended for anyone under 18. If you believe a minor has given us personal data, contact us and we will delete it.

14. Changes to this policy

We will post any changes on this page and update the "Last updated" date. For material changes, we will also notify you by email or in the app.

15. Contact

Luminary Ventures OÜ (MyArchitectAI)
Järve tn 50a-11, 11314 Tallinn, Estonia
[email protected]

‍