Privacy Policy

1. Overview

SplanAI (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains what information we collect when you use SplanAI, how we use it, and who we share it with. By using SplanAI, you agree to the practices described in this policy.

SplanAI is operated as an individual business based in Japan. If you have any questions about this Privacy Policy or your personal data, you can contact us at hello@splanai.com.

2. Information We Collect

Account Information

When you create an account, we collect your email address and a hashed password. We do not collect your name, phone number, or physical address unless you voluntarily provide them (e.g., as a company name in the Team plan).

Floor Plan Inputs

When you generate floor plans, we receive the inputs you provide: lot size, budget, family size, and optionally city, state, and street address. These inputs are sent to our AI provider to generate floor plan proposals. We do not store your street address beyond what is needed to fetch neighborhood and zoning data.

Shared Link Viewing (link_events)

When you share a floor plan link with a client and they open it, we record that viewing event. Specifically, we log:

• A one-way hash (SHA-256)of the viewer’s IP address — the raw IP is never stored and cannot be recovered from the hash.
• The viewer’s browser user agent string.
• The HTTP referrer (the page they came from), if provided.
• Which plan they viewed or selected, and when.

This data lets you, as the builder, know when your client has opened the link and which plan they engaged with. It is associated with your account, not with any identified individual on the viewer’s side. If a buyer opts in and provides their email, the viewing and activity data above may be associated with that buyer.

Client / Buyer Information on Shared Portals

When you share a portal link with a prospective buyer (your client), we process information about their interaction with that portal on your behalf:

• If the buyer opts in via the portal’s “Get notified” option, we collect the email address they provide so you can follow up with them.
• We store the buyer’s portal activity — concepts they favorite, configurations they save, and their visit history — to power the live portal experience.

You, the builder, are responsible for your relationship with your buyers and for having a lawful basis to collect and use their information. SplanAI processes this data on your behalf.

Usage Data

We track how many floor plan generations you have made this month, and the approximate API cost of each generation, to enforce plan limits and calculate our own operational costs. This data is stored in our database and is not shared with third parties.

Page View Analytics

We use Vercel Analytics to understand how visitors use our site. Vercel Analytics operates in a cookieless, beacon-based mode — it does not set any tracking cookies and does not track individual users across sessions. It collects only aggregate page view counts, referrers, and device types.

3. How We Use Your Information

• To provide, operate, and improve the SplanAI service.
• To authenticate your account and maintain your session.
• To generate AI floor plan proposals based on your inputs.
• To enforce subscription plan limits (Free: 3 generations/month).
• To send you transactional emails: account welcome, trial reminders, cancellation confirmation, and team invitations. We do not send marketing emails without your consent.
• To alert us internally when external API usage approaches limits.
• To notify you when a client opens your shared floor plan link.
• To send follow-up emails to buyers who have opted in, on your behalf (shown as coming from you, the builder). Every such email includes a one-click unsubscribe link; when a buyer unsubscribes we record it and stop sending.

We do not sell your personal data. We do not use your data to train AI models. We do not send you unsolicited marketing emails.

4. Third-Party Services

SplanAI relies on the following third-party services. Each has its own privacy policy.

5. Cookies

SplanAI uses cookies only for authentication. When you log in, Supabase sets a session cookie (sb-*-auth-token) to keep you signed in. This cookie is strictly necessary for the service to function and does not track your activity for advertising purposes.

Our page view analytics (Vercel Analytics) does not use cookies. It operates via a cookieless beacon and collects only aggregate, non-identifiable data.

During the Stripe checkout flow, Stripe may set its own cookies for fraud prevention and payment processing. These are governed by Stripe’s own privacy policy.

6. Data Retention

We retain your account data and generated plans for as long as your account is active. Shared link viewing records (link_events) are retained indefinitely to support the notification and analytics features of the service. Buyer portal activity (favorites, saved settings, visit history) is retained while the shared portal is active.

If you request account deletion, we will delete your personal data within 30 days, except where retention is required by applicable law (e.g., financial records related to Stripe transactions).

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data.
• Portability: Request your data in a portable format.
• Opt-out: California residents may request that we not sell their personal data. We do not sell personal data.

If you received a shared portal link as a buyer: you can unsubscribe from follow-up emails via the link in any such email, and you may contact the builder who shared the portal, or us, to request deletion of your information.

To exercise any of these rights, email us at hello@splanai.com. We will respond within 30 days.

8. Children’s Privacy

SplanAI is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on SplanAI before the change takes effect. The “Last updated” date at the top of this page reflects the most recent revision.

10. Contact

Questions or concerns about this Privacy Policy? Contact us at: hello@splanai.com