Privacy Policy

Effective date: [DATE] Last updated: [DATE]

This policy explains what personal information What If Studio, LLC ("we", "us") collects through Design and Decide (the "Service"), how we use and share it, how long we keep it, and the choices you have. "Uploads" are the files you give us. "Outputs" are what we make from them: the 3D tour, progress page, What-if design layers, renders, cost reports, finish and product ideas, studies and lot report. "Delivery" is the day we email you the link to your finished tour. "Feedback" is what you tell us: answers to our questions, corrections, ratings, request and comment text, and survey replies. "Early access" is the period before we announce general launch by email to customers and on our website.

1. The short version

• We never train any AI on your plans, drawings, models or images, and we never use them to make designs for anyone else.
• Your plans are private by default. Your tour and reports are reached through private links. You decide who gets a link.
• We learn only from two things: data about our own work (such as which checks passed) and your Feedback. We remove names, addresses and other personal or design details first.
• On every project, including Pro: we never sell your files or your personal information (if our company is sold, the buyer must keep these promises), we never publish your drawings, and we never show your files to other customers.
• We delete original Uploads [90] days after Delivery unless you pay to keep them longer. During early access, the plan-sheet images shown in your tour stay with the tour; you can ask us to remove them sooner. See the Retention Schedule.

2. What we collect

Contact details. Your name, email address, firm name if any, and messages you send us.

Payment details. Stripe processes payments. We receive your billing name, billing address, the last four digits of your card and the payment status. We do not receive or store your full card number.

Uploads. Plan sets, CAD files, photos, surveys and anything else you upload. Plans often contain personal information about you and others, including:

• owner, architect, engineer and contractor names;
• the property address and parcel number;
• contractor and professional license numbers, phone numbers and emails;
• photos of the home and, sometimes, of people; and
• details of the home's layout and security features.

We only need floor plans, elevations, sections and schedules. Please leave out security, alarm and camera sheets, and photos of people.

Photos. You can send photos in two groups. Photos of your place today (the house, the yard, the rooms you want to change, problem spots) are used to show a proposed change on your own photo, and to note things the plans do not show, such as a hose bib, a meter, an outlet, an existing tree or a fence, and their condition. Inspiration photos (houses or yards you like) are used only as private reference for style, plants and materials: we never show them in your Outputs, never publish them and never use them in marketing, because they usually belong to someone else. When a photo arrives we remove its location data and other hidden details, such as the camera and the date it was taken. Please leave people out, especially children. When we find people in a photo, we set it aside or crop them out before any AI service sees it. Photos follow the same clock as original Uploads: we delete them [90] days after Delivery unless you pay to keep them longer (Retention Schedule rows 22 to 24).

Derived data. The Outputs we make from your Uploads, plus the measurements and notes we record while making them.

Workflow data. Data about our own work on your project: check results, pass or fail, error categories, timings, counts, and which step failed and why. We keep it only in de-identified form, with no names, addresses, parcel numbers, license numbers, phone numbers, emails or images, and nothing that copies or describes your design.

Feedback. Answers to our questions, corrections, ratings, request and comment text, and survey replies.

What you do in your tour. The changes you save in your tour, such as furniture you add, move or remove, saved looks and their versions, your answers to "Does this match your home?", and comments and votes from the people you invite.

Public records about the property. For the lot report we look up public sources for your property, such as flood, earthquake, soil and fire maps and local rules. To do that we send the property address to the US Census Bureau's address lookup, and the property's map location to the public map services of FEMA, the California Geological Survey, the US Department of Agriculture, CAL FIRE and the map hosting service those agencies use (Esri ArcGIS). These are public lookups, not providers that work for us under contract.

Technical data. IP address, browser type, device type, pages viewed, link opens and timestamps, collected in server logs. [Placeholder: analytics tool, if any, to be named here.] The site loads fonts from Google Fonts, which means your browser sends your IP address to Google when the page loads.

Cookies. During early access you sign in with a one-time code we email you, through Cloudflare. That sets a cookie that keeps you signed in. We set no other cookies of our own. [Placeholder: list any analytics or marketing cookies; currently none planned.]

3. How we use it

• To provide the Service: read and check your plans, build the model and Outputs, and deliver them to you.
• To help you as your project team. The people on our team assigned to your project may open your Uploads, your model and tour, and what you do in your tour, to fix the model, keep it consistent with your plans, get you set up and answer your questions. They see it as you saved it and do not change your saved looks without asking you.
• To communicate with you about your project and changes to our terms.
• To process payments, prevent fraud and keep records required by tax and accounting law.
• To keep the Service secure and to investigate abuse.
• To improve the Service, using only de-identified workflow data and de-identified Feedback. We never use your Uploads, Outputs or anything derived from them to train any AI or to make designs for anyone else.
• To comply with law and enforce our Terms.

We do not use your plans to build advertising profiles, and we do not use automated decision-making that has legal or similarly significant effects on you.

4. What we learn from, in plain words

We get better by looking at our own work, not at your house. When a check fails, we note which check, what kind of error, how long it took and which step went wrong. That record has no names, addresses, parcel numbers, license numbers, phone numbers, emails or images, and it does not copy or describe your design. We may keep it indefinitely.

When you answer our questions or tell us what we got wrong, we may use that Feedback to improve the Service. Before we keep it, we remove any personal or design detail in it, including names, addresses, measurements tied to a house, and attachments. The original Feedback text is kept only as long as your project records (see the Retention Schedule).

Your title blocks and copyright notices stay on your drawings. We do not strip them, because we never make a training copy of your files.

5. How we share it

We share personal information only as follows. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

• Our team, and contractors who help check models, under confidentiality and data-protection obligations. Only the people assigned to your project can open it, and each time they do, we record who opened what and when.
• AI services we use (Anthropic, Google and OpenAI), to read drawings and produce Outputs. See section 6.
• Other service providers who process data for us, such as storage, hosting and payments. They are listed, with the public lookups above, in our Subprocessors list.
• People you choose. Anyone you send a link to can see what that link shows.
• Showcase, only if you opt in for a specific project, under our Showcase Release.
• Legal reasons. To comply with law, a court order or a valid legal request, or to protect rights, safety and property.
• A business transfer. If our company is merged or sold, information may move to the buyer, who must keep the promises in this policy.

6. AI providers

We use AI services from Anthropic, Google (Gemini) and OpenAI to read drawings and produce Outputs. During early access we send your files to the AI providers listed in our Subprocessors list. We are moving all processing to business accounts that do not allow training before launch. These providers keep copies for as long as their own terms allow. Whatever the providers' terms, we never train any AI on your files.

7. Security

Plans are security-sensitive, and we treat them that way. During early access, your files are processed by our team on company computers with full-disk encryption, and are sent only to the providers in our Subprocessors list. During early access, tours are hosted on Cloudflare, and opening one requires signing in with an email address on your project's list. A few early tour pages may still be hosted on claude.ai through a private link: anyone with that link can view it, so treat it like a key.

No system is perfectly secure. If we confirm that someone without permission has accessed your Uploads, Outputs or project, we will tell you without unreasonable delay, and within [72 hours] of confirming it, whether or not the law requires us to.

8. How long we keep it

See the Retention Schedule. In short: original Uploads are deleted [90] days after Delivery unless you pay to keep them longer. We keep your tour for at least [24] months after Delivery. Before moving it to the archive we email you at least [60] days ahead, and you can ask us for a copy of your Outputs first. The archive lasts [12] months, can be restored for a fee, and is then deleted. De-identified workflow data and de-identified Feedback may be kept indefinitely. A legal hold suspends deletion.

During early access we delete by hand, following the Retention Schedule. Copies our providers keep for a limited time, and anything under legal hold, are kept as the Retention Schedule says.

9. Your choices and rights

• See and correct. You can review your contact details, your Uploads and the data we derived from them, and ask us to correct them, at [privacy@DOMAIN].
• Delete. You can ask us to delete a project. We then delete data under the Retention Schedule.
• Copies. You can ask us for a copy of your Outputs while we keep your tour.
• Links. You can ask us to turn off any link.
• Who opened your project. You can ask us who on our team opened your project and when.
• Marketing email. You can unsubscribe at any time.

We will not treat you differently for using these rights.

10. If you are in someone else's plans

If your information appears in plans someone uploaded, for example as the architect, engineer, contractor or a neighbor, you can ask us to delete or correct it at [privacy@DOMAIN], even if you are not our customer.

11. Do Not Track

Browsers can send a "Do Not Track" signal. There is no common standard for responding to it, so the Service does not change its behavior when it receives one.

12. Children

The Service is for adults 18 and over. We do not knowingly collect information from anyone under 18. Plans or photos may show children incidentally. Images that show people are used only to provide the Service.

13. Where we process data

We are based in the United States. We and our providers may process your information in the United States and other countries where they operate.

The Service is offered only to customers with US billing addresses.

14. California privacy rights

California law gives California residents the rights below. We honor them for every customer and every person whose information appears in an Upload, wherever they live.

• to know the categories and specific pieces of personal information we collect, the sources, our purposes and the categories of recipients;
• to delete personal information, subject to legal exceptions;
• to correct inaccurate personal information;
• to opt out of the sale or sharing of personal information (we do not sell or share it);
• to limit the use of sensitive personal information (we do not use it for purposes that would trigger this right); and
• not to be discriminated against for using these rights.

To make a request, email [privacy@DOMAIN] or use [WEB FORM]. We will confirm your identity by [VERIFICATION METHOD]. An authorized agent may act for you with written permission. We will respond within the time the law requires.

15. Changes to this policy

We will post any change here with a new "Last updated" date. For material changes, we will email you or notify you in the Service at least [30] days before the change takes effect.

16. Contact

What If Studio, LLC, [MAILING ADDRESS], [privacy@DOMAIN].