Privacy policy

Who we are

Picafelli (picafelli.com) is a free home design application. It is responsible for the data described here. For any question or request about your data, write to contact@picafelli.com.

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States.

Without an account

You can use the studio without signing in. Your projects are then kept in your browser's own storage on your device, and we never receive them.

A few features send something to a server, only when you use them:

• Room scan: the camera frames you record are sent to our measurement server, used to estimate the room's dimensions, and not kept.
• Floor plan upload: the picture of your plan is sent to an AI model to be read — to Anthropic when Picafelli pays for the scan, or to the provider you chose when you use your own key.
• AI assistant: it runs on your own API key (Claude, OpenAI, Gemini or xAI). Your request goes from your browser straight to that provider; the key stays in your browser and never reaches us.

With an account

When you create an account, we keep:

• your email address and name, and a hash of your password (never the password itself) — or, if you sign in with Google, the identifier Google gives us for your account;
• your active sessions, with the IP address and browser description they were opened from, so you stay signed in and so a stolen session can be spotted;
• your projects: their names, plans and designs, saved so they follow you from one device to another;
• for a project you share, the picture shown when its link is posted, and the objects you built in the Object Studio that the project uses;
• short-lived codes for confirming your email address or resetting your password.

We use this only to run your account and the features you use. We do not sell it, rent it or use it for advertising.

Project links are public

Every project saved to your account has a public page at its own link (picafelli.com/s/…), showing its picture and its name and letting a visitor open a copy of it. There is no gallery or search: a project is only seen by someone who has its link. That page never shows who made the project.

Using Picafelli from Claude or ChatGPT

If you add the Picafelli connector to a chat app, that app asks you to sign in to Picafelli and to allow it access. Once you allow it, it can list, read, create and change the projects saved to your account, when you ask it to in a conversation. We record which app you allowed and issue it an access token; we do not receive your conversations, only the requests the app sends us.

What you write in that chat, and the project details the app reads, are handled by the chat's provider under its own privacy policy (Anthropic for Claude, OpenAI for ChatGPT). You can remove the connector at any time in the chat app's settings, and deleting your Picafelli account cancels every access you gave.

Emails

We send emails only about your account: confirming your address, resetting your password, confirming a change of address. They are sent through Resend. We send no newsletters or marketing.

Cookies and storage on your device

• A session cookie that keeps you signed in. It is necessary for the account to work.
• A cookie that remembers your language.
• Your browser's local storage, which holds your projects, your settings and, if you connected one, your AI key. It stays on your device.
• Google Analytics cookies, only if you accept them. Until you do, Google Analytics is not loaded at all. They measure which pages are used, to improve the site, and are not used for advertising.

Who else handles your data

We rely on these providers, each only for what is listed:

• Vercel — hosting the site and its servers.
• Neon — the database holding accounts and saved projects.
• Resend — sending account emails.
• Google — signing in with Google, if you choose it; Google Analytics, if you accept it.
• Anthropic — reading an uploaded floor plan when Picafelli pays for the scan.
• Cloudflare — serving the 3D models and textures (no personal data).

Some of these providers are based in the United States or process data there. Such transfers rely on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

How long we keep it

Your account and projects are kept until you delete them. Deleting a project removes it from our database; deleting your account (on your profile page) removes the account, every project, every share link and your Object Studio library straight away. Sessions expire on their own, and email codes within hours. Our hosting provider keeps technical logs for a short period.

Legal basis

We process account and project data to provide the service you signed up for (performance of a contract), security data such as session IP addresses for our legitimate interest in protecting accounts, and analytics data only with your consent.

Your rights

You can access, correct, export or delete your data, object to its processing, or withdraw your consent to analytics at any time. Most of this you can do yourself on your profile page; for the rest, write to contact@picafelli.com and we answer within a month. You can also complain to your data protection authority — in France, the CNIL (cnil.fr).

Children

Accounts are for people aged 15 or over.

Changes

If this policy changes, the new version is published here with a new date. If a change affects how your existing data is used, we will tell you by email before it applies.