Legal

Privacy Policy

This Privacy Policy explains how ArchiDNA collects, uses, stores, and protects your personal information when you use our platform.

Last updated: March 28, 2026

01

Information We Collect

When You create an account, we collect Your name, email address, and profile image through our authentication provider. We do not store passwords — authentication is handled entirely by a third-party identity provider.

When You subscribe to a plan, our payment processor collects Your billing information including credit or debit card details, billing address, and transaction history. ArchiDNA does not directly store or have access to Your full payment card numbers. All payment data is processed and stored by our PCI-compliant payment processor.

When You use the Services, we collect the images You upload, the design parameters You select (styles, materials, room types, lighting), any text prompts You provide, and the Assets generated from Your inputs. We also collect metadata about Your usage including feature accessed, generation timestamps, credit consumption, and session duration.

We automatically collect technical information including Your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, time spent on pages, and language preference. This data is collected through standard web server logs and analytics tools.

02

How We Use Your Information

We use Your information to provide, maintain, and improve the Services — this includes processing Your generations, managing Your account and subscription, tracking credit usage, and delivering generated Assets.

We use Your uploaded images and generated Assets to operate the AI generation pipeline, store results for Your future access, and power programmatic SEO pages that showcase publicly visible generations. Generated images from core design features may be stored on our cloud infrastructure and displayed on public-facing pages with unique URLs.

We use Your email address to send transactional communications including subscription confirmations, billing receipts, credit usage notifications, and important service announcements. We do not send marketing emails without Your explicit opt-in consent.

We use technical and usage data to monitor platform performance, identify and fix bugs, prevent fraud and abuse, enforce our Terms of Use, and improve the overall user experience. We may analyze aggregated, anonymized usage patterns to understand feature popularity and inform product development.

03

How We Share Your Information

We share Your information with third-party service providers that help us operate the Services. These providers include our authentication provider (for account management), our payment processor (for billing), our cloud infrastructure provider (for image storage and hosting), our database provider (for account and generation data), and our AI model providers (for image, video, and 3D generation). Each provider only receives the minimum information necessary to perform their function.

We do not sell, rent, or trade Your personal information to third parties for marketing purposes. We do not share Your personal information with advertisers.

We may disclose Your information if required to do so by law, regulation, legal process, or governmental request. We may also disclose information if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of ArchiDNA, our users, or the public.

In the event of a merger, acquisition, reorganization, or sale of assets, Your information may be transferred as part of that transaction. We will notify You via email or prominent notice on our website before Your information becomes subject to a different privacy policy.

04

Image Data and AI Processing

When You upload an image to ArchiDNA, the image is temporarily transmitted to our AI processing providers to generate the requested design transformation. Uploaded images may be retained temporarily in our AI providers' systems for the duration of processing and are subject to those providers' respective data handling policies.

Generated images from core design features (Exterior, Interior, Landscape, Commercial) are stored on our cloud storage infrastructure for the purpose of powering Your generation history and public SEO design pages. Other generated Assets (videos, 3D models, upscaled images, edits) are provided via temporary URLs and are not permanently stored by ArchiDNA.

We do not use Your uploaded images or personal photographs to train AI models. Your images are used solely for the purpose of generating the specific Assets You request.

Public design pages display the generated Asset along with the style, feature type, and generation date. They do not display Your name, email, account information, or the original uploaded image unless You explicitly choose to make that information public.

05

Cookies and Tracking

We use essential cookies that are strictly necessary for the operation of the Services, including session management, authentication state, sidebar preferences, and locale selection. These cookies cannot be disabled as they are required for the platform to function.

We use analytics cookies to understand how users interact with the platform, including page views, feature usage, and navigation patterns. This data is collected in aggregate and is used to improve the Services. You may opt out of analytics cookies through Your browser settings.

We do not use advertising cookies or tracking pixels. We do not participate in cross-site tracking networks or serve targeted advertisements.

06

Data Retention

Account information is retained for as long as Your account is active or as needed to provide the Services. If You delete Your account, we will delete or anonymize Your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our agreements).

Generated Assets stored on our cloud infrastructure are retained for as long as Your account is active. Upon account deletion, stored Assets will be deleted within 90 days. Assets displayed on public SEO pages may be retained in anonymized form after account deletion.

Billing and transaction records are retained for 7 years as required by applicable tax and accounting regulations.

Server logs and technical data are retained for up to 12 months for security, debugging, and fraud prevention purposes, after which they are automatically purged.

07

Data Security

We implement industry-standard security measures to protect Your information, including encryption of data in transit (TLS/SSL), encryption of sensitive data at rest, secure authentication through a third-party identity provider, and access controls limiting employee access to personal data on a need-to-know basis.

All payment processing is handled by a PCI DSS Level 1 compliant payment processor. ArchiDNA does not store, process, or have access to Your full credit card numbers.

While we take reasonable precautions to protect Your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the security of Your account credentials and for any activity that occurs under Your account.

08

Your Rights

Depending on Your jurisdiction, You may have the right to: access the personal information we hold about You; request correction of inaccurate or incomplete data; request deletion of Your personal data (subject to legal retention requirements); object to or restrict certain processing of Your data; request portability of Your data in a structured, machine-readable format; and withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us through the support form available in Your dashboard or via the contact information on our website. We will respond to Your request within 30 days. We may ask You to verify Your identity before processing certain requests.

If You are located in the European Economic Area (EEA), United Kingdom, or California, You may have additional rights under the GDPR, UK GDPR, or CCPA respectively. Please refer to the applicable jurisdiction-specific section below.

09

California Privacy Rights (CCPA)

If You are a California resident, the California Consumer Privacy Act (CCPA) provides You with additional rights regarding Your personal information. You have the right to know what personal information we collect, use, and disclose; the right to request deletion of Your personal information; the right to opt out of the sale of personal information (we do not sell personal information); and the right to non-discrimination for exercising Your privacy rights.

To make a request under the CCPA, contact us through the support form in Your dashboard. We will verify Your identity and respond within 45 days.

10

European Privacy Rights (GDPR)

If You are located in the European Economic Area or United Kingdom, we process Your personal data under the following legal bases: performance of a contract (to provide the Services You have subscribed to), legitimate interests (to improve and secure the Services), consent (for optional analytics and marketing communications), and legal obligations (for tax and regulatory compliance).

You have the right to lodge a complaint with Your local data protection authority if You believe Your rights have been violated. Our data processing activities are conducted in the United States. By using the Services, You consent to the transfer of Your data to the United States.

11

International Data Transfers

ArchiDNA is based in the United States. Your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from Your jurisdiction.

By using the Services, You consent to the transfer of Your information to the United States and other jurisdictions as described in this Privacy Policy. We take steps to ensure that Your data receives an adequate level of protection in the jurisdictions in which we process it.

12

Children's Privacy

The Services are not directed to children under the age of 13 (or the applicable age of digital consent in Your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly. If You believe a child has provided us with personal information, please contact us immediately.

13

Third-Party Links

The Services may contain links to third-party websites, services, or resources that are not operated by ArchiDNA. We are not responsible for the privacy practices or content of these third-party services. We encourage You to review the privacy policies of any third-party services You access through or in connection with the Services.

14

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify You of material changes by posting the updated policy on our website and updating the "Last updated" date. For significant changes that affect Your rights, we may also send an email notification.

Your continued use of the Services after any changes to this Privacy Policy constitutes Your acceptance of those changes. We encourage You to review this policy periodically.

15

Contact Us

If You have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the support form available to subscribed members in their dashboard, or via the contact information provided on our website.

For data protection inquiries from EU/UK residents, You may also contact us at the address above and reference "GDPR Request" in Your communication.