EZ Floor Planner Privacy Policy

Who we are

EZ Floor Planner (ezfloorplanner.com) is an online tool that turns a written description or an uploaded image into AI-generated floor plan images. In this policy, "we", "us" and "our" mean the operator of ezfloorplanner.com, and "you" means anyone who visits the site or uses an account on it.

For any privacy question or request, email support@ezfloorplanner.com.

What we collect

When you create an account

• Email address and password. You sign up with an email address and a password. The password is stored only as a one-way hash, so nobody, including us, can read it.
• Name and avatar, if you add them in Settings → Profile.
• Sign-up details, recorded automatically: the IP address you signed up from, your language setting, and, if you reached the site through a link carrying a utm_source campaign tag, the value of that tag. We use these to see where accounts come from and to help spot abuse, such as one person opening many accounts.
• Sign-in sessions. Each time you sign in we create a session record that includes the IP address and the browser's user-agent string at that moment.

When you generate images

• Prompts and settings: the text you type, and the model and options you choose.
• Images you upload as a reference, such as a sketch, a photo or an existing plan.
• The images we generate for you, with their status, the credits they cost, and whether you have added them to Favorites, moved them to Trash or shared them.

When you buy credits or a subscription

Payments are handled by Stripe. You enter your card details on Stripe's checkout page, and we never see or store your card number. We keep an order record of each purchase: what you bought, the amount and currency, the payment status, the email address used at checkout, and Stripe's references for the payment and any subscription. We also keep your credit history: what was added to your balance, what was spent, and when each batch of credits expires.

When you contact us

The messages and images you put in a support ticket, and any email you send to support@ezfloorplanner.com.

API keys

If you create an API key in Settings, we store its name, a short prefix so you can tell keys apart, and a hash of the key. The key itself is shown to you once and is not stored.

When you browse the site

We measure traffic with two cookieless tools: Plausible Analytics, which we host ourselves, and Cloudflare Web Analytics. They record page views, the referring site, browser, operating system, device type and approximate country, plus a few product events such as signing up, starting a generation or opening checkout. Neither sets a cookie or follows you across other websites. Cloudflare, which serves the site, also processes request data such as IP addresses to deliver pages and block attacks.

How we use it

• To run your account and provide what you ask for: generating images, keeping your designs, tracking credits, and processing purchases and subscriptions.
• To answer support and refund requests.
• To keep the service secure and to prevent fraud and abuse, such as payment fraud or misuse of welcome credits.
• To understand, in aggregate, which pages and features are used and where visitors come from, so we can improve the site.
• To keep the records that tax and accounting rules require.

We do not sell your personal information, we do not use it for advertising, and we do not send marketing email. We do not train AI models on your prompts or images.

If data protection law such as the GDPR applies to you, we rely on these legal bases: performing our contract with you (your account, generations and purchases), our legitimate interests (security, abuse prevention, aggregate analytics and knowing where sign-ups come from), legal obligations (financial records), and your consent where the law requires it.

Who processes your data

We use a small number of service providers, and each one receives only what it needs for its job:

• Cloudflare hosts the site and the app, stores our database (Cloudflare D1) and files such as uploaded and generated images (Cloudflare R2), protects the site from attacks, and provides Cloudflare Web Analytics.
• Stripe processes payments and subscriptions and handles your card details directly.
• KIE AI runs the image generation. When you generate, your prompt, your chosen settings and any reference image you uploaded are sent to KIE AI, which passes the request to the provider of the model you picked, for example OpenAI for GPT Image or Google for Nano Banana. KIE AI and those model providers handle that content under their own terms and privacy policies.
• Plausible Analytics produces the cookieless, aggregate site statistics described above, on a server we run.

These providers operate in several countries, including the United States, so your data may be processed outside the country where you live.

We may also disclose information when the law requires it, to answer a valid legal request, or to protect the safety and rights of our users and the service. If ezfloorplanner.com is ever transferred to a new operator, the data needed to keep your account running would transfer with it, and this policy would continue to apply to that data.

Images, links and who can see them

Uploaded reference images and generated images are stored as files in Cloudflare R2 and served from long, hard-to-guess web addresses. Those addresses are not listed or published anywhere, but anyone who has the exact address of a file can open it, so be careful where you paste one.

Your designs are private by default. If you turn on the public link for a design, anyone with that link can see the image and its style on a public page. Your prompt is not shown. Turn the link off at any time and it stops working.

Cookies

We set only the cookies the site needs to work:

• Sign-in session (better-auth.session_token) keeps you signed in. It lasts up to 7 days, is renewed while you use the site, and is removed when you sign out.
• Language (PARAGLIDE_LOCALE) remembers the language you chose. It is set when you switch language and lasts up to 400 days.
• Campaign source (utm_source) is set only if you arrive through a link carrying a utm_source tag, and holds only that tag's value. It lasts 30 days and is read when you sign up.

Our analytics tools do not use cookies, and we use no advertising or cross-site tracking cookies. Cloudflare may set short-lived security cookies to tell visitors from bots, and Stripe sets its own cookies on its checkout page under Stripe's policy.

How long we keep it

• While your account exists, we keep your profile, designs, uploads, credit history, orders and support tickets.
• When you delete your account, those records are removed from our database straight away. Any credits left on the account are deleted with it.
• Image files you uploaded or generated are not automatically erased from file storage when you delete a design, an upload or your account. They are no longer linked to you in our systems. If you want specific files erased, email us the links and we will remove them.
• Backups of our database kept by our hosting provider can hold deleted records for up to 30 days, until they are overwritten.
• Payment records held by Stripe are kept by Stripe for as long as financial regulations require.
• Analytics are kept only as aggregate statistics that do not identify you.

Your rights and choices

• Download your data: Settings → Profile → Download my data gives you a JSON file of what we hold about you, including your profile, sign-up details, purchases, credit history, designs (with prompts and image links), uploads and support tickets.
• Correct it: change your name and avatar in Settings → Profile. Your sign-in email cannot be changed there; email us to change it.
• Delete designs: move a design to Trash, then delete it from Trash permanently.
• Delete your account: use Settings → Profile → Delete account. If you have an active subscription, cancel it first in Settings → Billing so you are not charged again.
• Anything else: to ask what we hold about you, to object to or restrict a use of your data, or to make any other request, email support@ezfloorplanner.com from the address on your account so we can confirm it is you. We will respond within 30 days.

Depending on where you live, data protection law may give you further rights, including the right to complain to your local data protection authority.

Security

Connections to the site are encrypted with HTTPS, and passwords and API keys are stored only as hashes. Access to the production systems is limited to the people who operate the service. No system is completely secure, so we cannot promise that your data will never be accessed without authorization, but we work to prevent it and will tell affected users if a breach puts their data at risk.

Children

EZ Floor Planner is not directed at children under 13, or a higher age where local law sets one, and we do not knowingly collect their data. If you believe a child has given us personal information, email us and we will delete it.

Changes to this policy

When we change this policy we will update the date at the top of this page. If a change materially affects how we use your data, we will also point it out on the site before it takes effect.

Contact

This policy is published by EZ Floor Planner (ezfloorplanner.com). Email support@ezfloorplanner.com with any question about it.