Privacy Policy

Last updated: June 2026

This policy explains what data HouseGPTs.com ("we", "us") collects, why, and what rights you have over it. The data controller is HouseGPTs (contact: support@housegpts.com).

1. Data We Collect

• Account data: email address, name, profile picture (Google sign-in only), hashed password (email sign-in only).
• Uploaded images: room photos or floor plans you upload for AI processing. These are stored on our server for the lifetime of your account.
• Generated designs: AI-generated images tied to your account. Retained until you delete them or close your account.
• Subscription & billing metadata: plan name, billing dates, subscription status. Card details are held exclusively by Paddle — we never see them.
• Usage data: token balance, number of generations, last active timestamp.
• Analytics data: page views, clicks, session recordings — only if you accept analytics cookies (see section 5).

2. Legal Basis for Processing (GDPR)

• Contract performance: account creation, AI generation, billing.
• Legitimate interest: security, abuse prevention, service reliability.
• Consent: analytics and session-recording cookies (you can withdraw at any time via the cookie banner or by emailing us).

3. Third-Party Processors

We share data with the following processors only to the extent necessary to operate the service:

• Paddle — payment processing and subscription management (Merchant of Record). Paddle may collect billing details under their own privacy policy.
• Replicate — AI image generation. Uploaded images are sent to Replicate's API for processing. Replicate's data retention policy applies to images in transit.
• Google — Google OAuth sign-in and Google Analytics (analytics cookies only, with your consent).
• Microsoft Clarity — session recording and heatmaps (analytics cookies only, with your consent). Clarity may record mouse movements, clicks, and page content visible during a session.

4. Data Retention

• Account data: retained until you delete your account.
• Uploaded and generated images: retained until you delete individual designs or close your account.
• Billing records: retained for up to 7 years to comply with financial regulations.
• Analytics data: governed by Google's and Microsoft's retention settings (typically 14 months for GA4).

5. Cookies

We use two categories of cookies:

• Essential: a JWT authentication token stored in your browser. Required for the service to function — no consent needed.
• Analytics (optional): Google Analytics and Microsoft Clarity. These load only after you click "Accept all" in the cookie banner. You can withdraw consent at any time by clicking "Essential only" in the banner (clear your browser cache after doing so to stop any already-loaded scripts).

6. Your Rights

Under GDPR (EU/UK) and applicable privacy laws you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure — delete your account and all associated data (see section 7).
• Portability — you can download your generated designs directly from the dashboard at any time.
• Restriction / Objection — limit or object to certain processing.
• Withdraw consent — for analytics cookies, at any time via the cookie banner.

To exercise any of these rights, email support@housegpts.com. We will respond within 30 days.

7. Account & Data Deletion

You can delete your account at any time from Dashboard → Settings → Delete Account. Deletion permanently removes your profile, uploaded images, and generated designs. Billing records are retained as required by law (section 4). Any active subscription will be cancelled immediately upon deletion.

You may also request deletion by emailing support@housegpts.com.

8. International Transfers

Our server and some processors (Replicate, Google, Microsoft) are based in the United States. By using the service you acknowledge that your data may be transferred to and processed in the US under appropriate safeguards.

9. Updates

We may update this policy when we add features or when regulations change. Continued use of the service after an update constitutes acceptance. Material changes will be noted at the top of this page.

10. Contact

Questions or complaints: support@housegpts.com. If you are in the EU/UK and believe we have not handled your data lawfully, you may lodge a complaint with your local data protection authority.