Legal
As of September 2026 · floorplanning.app
The responsible person for data processing:
We process personal data exclusively within the framework of the statutory provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
In principle, the use of the application is also possible without registration. In this case, project data is processed exclusively locally in the user's browser.
When you visit our website, information is automatically collected by the server and stored in so-called server log files.
In doing so, the following data is processed:
The processing is carried out to ensure the technical operation, for error analysis and to defend against attacks.
Art. 6 para. 1 lit. f GDPR (legitimate interest)
Server-Logfiles werden für maximal 7 Days gespeichert und anschließend gelöscht.
The application can be used without a user account. In this case, project data is stored exclusively locally in the browser (LocalStorage). A transmission to our servers does not take place.
The following data is stored in LocalStorage:
This storage is technically necessary for the operation of the application and is based on Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in a functioning service).
During DXF import, the selected original file is read and processed exclusively locally in the user's browser. The DXF file itself is not transferred to our servers or to external analytics services.
Only the account and usage information required for activation is transmitted to our server. This includes user and organization identifiers as well as the number of authorized import operations on the respective day.
Optionally, the user can explicitly start an asynchronous AI check by OpenAI. Only after this selection will a reduced representation of the detected contours, area values, layer names and texts contained in the drawing be transmitted. The original DXF is also not transferred. The AI only provides suggestions on wall layers, surface types and designations; the user must check and apply them before taking over.
The processing status, the reduced input and the proposal are stored for later assignment via a non-recalculable file fingerprint for a maximum of 30 days. Provider files are deleted as soon as possible after completion. Batch processing can take up to 24 hours.
After confirmation by the user, only the project data generated from it will be processed as part of the normal cloud storage of the user account.
Provision of the fee-based import function and the AI check, abuse protection and quota control expressly requested by the user in accordance with Art. 6 para. 1 lit. b and f GDPR. For the optional transmission, a separate confirmation will be obtained before the start.
OpenAI Ireland Ltd. or affiliated technical service providers. Processing in the USA cannot be ruled out. The data protection guarantees provided for this purpose apply.
For the optional photo import, an image selected by the user of a paper floor plan, screenshot or sketch is sent to OpenAI for recognition together with the requested project name. The function must not be used for photos of inhabited rooms or other images containing people and personal belongings.
Processing is asynchronous. We store the e-mail address for assignment and notification, the processing status, the detected contours and temporarily a reduced image preview for processing.
The image preview will be deleted no later than 30 days after the upload. Files with the AI service are deleted as quickly as possible after completion. The detected project data remains stored until the project or account is deleted.
Provision of the requested import, notification of results, protection against abuse and quota control in accordance with Art. 6 para. 1 lit. b and f GDPR. Before uploading, the user is transparently informed of the transmission.
OpenAI Ireland Ltd. or affiliated technical service providers. Processing in the USA cannot be ruled out. The data protection guarantees provided for this purpose apply. Please only upload content that you are authorized to use.
Users can voluntarily create a user account.
In doing so, the following data is processed:
Art. 6 para. 1 lit. b GDPR (performance of the contract)
Logging in is done without a password. Instead, a one-time login code will be sent to the email address.
The login code is only processed for a short time and is automatically deleted after expiry.
Projects can be saved in the user account.
In doing so, the following data is processed:
The data is stored in a database on our servers in Germany.
As part of an optional premium feature, users can upload images for AI-supported processing.
In particular, the following are processed:
These data are transmitted to the OpenAI AI service solely to carry out the requested processing.
Use cases:
Art. 6 para. 1 lit. a GDPR (consent)
OpenAI Ireland Ltd. or affiliated technical service providers. Processing in the USA cannot be ruled out; the intended data protection guarantees apply.
We use the payment service provider Stripe for paid services.
In doing so, the following data is processed:
We do not store full payment details ourselves.
Article 6(1)(c) GDPR.
Stripe Payments Europe Ltd. and Stripe Inc. (USA)
This website uses the Umami web analytics tool, which is operated on our own server.
No cookies are used.
The following data may be processed:
No personal evaluation or profiling takes place.
Art. 6 para. 1 lit. f GDPR
On some pages, we embed videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
To protect your data, we use a two-click solution: no connection to YouTube is made when the page is opened. Only a preview image hosted locally on our server is displayed. YouTube content is loaded only when you actively start the video by clicking it.
Once the video starts, personal data (including IP address, device and browser information) is transmitted to Google; this may also involve a transfer to the USA. We embed videos using the extended privacy mode via youtube-nocookie.com. According to Google, no visitor information is stored in this mode before the video is played.
Art. 6 para. 1 lit. a GDPR (consent). You give consent by actively clicking the video button; you may withdraw it at any time with effect for the future by not starting embedded videos again.
For more information, see Google’s privacy policy: policies.google.com/privacy
We send emails for:
Only the email address is processed for this purpose.
Unless stated otherwise, the following retention periods apply:
Users may request deletion of their data by email at any time.
After the request is received, all personal data will be deleted unless statutory retention obligations prevent this.
Email: alex@floorplanning.app
Users have the right to:
You also have the right to lodge a complaint with a data protection supervisory authority.
Consent that has been given may be withdrawn at any time with effect for the future.
Withdrawal may be declared by email.
We use technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
Data is transmitted in encrypted form via HTTPS.
We reserve the right to amend this privacy policy to reflect changes in legal requirements or technical changes.