Legal

Privacy Policy

Last updated: April 30, 2026

This Privacy Policy describes how Plan2Render.ai (“Plan2Render,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use our website at plan2render.ai, our application at app.plan2render.ai, and related services (collectively, the “Service”). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

  • Account information. Email address, display name, and authentication identifiers from the sign-in provider you choose (e.g. Google, Apple, or email-based magic-link sign-in).
  • User Content. Files, images, drawings, CAD documents, photographs, text prompts, project metadata, and any other material you upload or submit to the Service.
  • Payment information. When you purchase a plan, credit pack, or project pass, our payment processor (Stripe) collects your payment-card details and billing address. Plan2Render does not store full payment-card numbers; we receive only limited transactional information from Stripe (e.g. the last four digits of the card, the brand, the country, and the transaction status).
  • Communications. If you contact support or sales, we retain the contents of your messages and our responses.

1.2 Information Collected Automatically

  • Usage data. Pages and features accessed, projects created, credits consumed, timestamps, error logs, and similar interaction data.
  • Device and connection data. IP address, browser type, operating system, device identifiers, and approximate geographic region inferred from your IP.
  • Cookies and local storage. We use a small number of first-party cookies and browser localStorage entries that are strictly necessary to keep you signed in and to remember session-level preferences. We do not use third-party advertising cookies.
  • Security signals. Firebase App Check and reCAPTCHA Enterprise generate scores and tokens used to determine that requests originate from a legitimate browser. These tools may collect device-level signals from your browser.

1.3 Information We Do Not Knowingly Collect

The Service is intended for users 18 years and older. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK). If you believe a child has provided us with personal information, contact privacy@plan2render.ai and we will promptly delete it.

2. How We Use Information

We use the information we collect to:

  • Provide, operate, and maintain the Service, including authenticating you and processing your User Content through the AI pipelines you request;
  • Process payments, manage subscriptions, and track Credit balances;
  • Send transactional email (e.g. magic-link sign-in, welcome messages, purchase receipts) and, where permitted, service announcements;
  • Monitor, debug, and improve the Service, including diagnosing errors and measuring performance and reliability;
  • Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service;
  • Comply with legal obligations and enforce our agreements.

3. AI Processing of Your User Content

When you upload User Content and request a generation (image rendering, 3D model, upscale, plan parsing, etc.), the relevant inputs are transmitted to one or more third-party AI processing providers strictly for the purpose of producing the Output you requested. We do not use your User Content or Outputs to train our own models or to train the third-party providers’ foundation models, and we contract for or rely on provider-side configurations that disable training on customer data where available. Some metadata (e.g. request identifiers, timestamps, and abuse-detection signals) is retained by these providers under their own retention policies, which we link to below.

4. How We Share Information — Sub-Processors

We share information with the following service providers, who act as processors on our behalf and only for the purposes described:

  • Google Cloud / Firebase (Alphabet Inc.) — hosting, authentication, database (Firestore), file storage, Cloud Functions, App Check, and analytics. Receives account data, User Content, usage logs, and security signals.
  • Stripe, Inc. — payment processing and subscription billing. Receives name, email, billing address, and payment-card details.
  • Google reCAPTCHA Enterprise — bot detection on sensitive actions. Receives device signals from your browser.

We may also share information when required by law, in response to a valid legal process, to protect the rights, safety, or property of Plan2Render or others, or in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case we will require the recipient to honor this Privacy Policy.

We do not sell your personal information, and we do not share it with third parties for cross-context behavioral advertising.

5. Data Retention

We retain User Content and project data for as long as your account is active and as needed to provide the Service. If you delete a project or structure, we delete the associated files from our storage promptly thereafter. If you delete your account, we will delete or de-identify your User Content within a reasonable period, except that we may retain (a) limited transactional and audit records as required by law (typically up to seven years for financial records), (b) backups for a limited rotation period, and (c) information necessary to resolve disputes or enforce our agreements.

6. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit (TLS) and at rest, role-based access control, App Check enforcement on sensitive endpoints, and limited-use App Check tokens for replay protection on authentication endpoints. However, no method of transmission or storage is 100% secure; we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your jurisdiction, you may have rights regarding your personal information, including:

  • Access to the personal information we hold about you;
  • Correction of inaccurate or incomplete information;
  • Deletion of your information, subject to limited exceptions;
  • Portability of information you have provided to us;
  • Objection to or restriction of certain processing;
  • Withdrawal of consent, where processing is based on consent;
  • The right not to be subject to automated decision-making that produces legal or similarly significant effects (we do not engage in such decision-making).

To exercise these rights, email privacy@plan2render.ai from the email address associated with your account, or use the in-app account controls (Account → Delete Account, Delete Project, Delete Structure). We will respond within the timeframes required by applicable law (typically 30 days). You may also lodge a complaint with your local data-protection authority.

7.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the rights described above as well as the right to know what categories of personal information we have collected about you, the sources, the purposes, and the categories of recipients. We do not “sell” or “share” personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

7.2 European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, the UK, or Switzerland, the legal bases on which we process your personal information are: (a) the performance of our contract with you to provide the Service; (b) our legitimate interests in operating, securing, and improving the Service, balanced against your rights; (c) your consent, where applicable; and (d) compliance with our legal obligations. International transfers of personal data out of these regions are made under Standard Contractual Clauses or equivalent transfer mechanisms operated by our sub-processors.

8. Cookies and Similar Technologies

We use only strictly-necessary cookies and browser localStorage:

  • Authentication cookies set by Firebase Authentication to keep you signed in;
  • Local storage entries (e.g. emailForSignIn) used to complete the magic-link sign-in flow;
  • Security tokens generated by App Check and reCAPTCHA Enterprise.

We do not use advertising or cross-site tracking cookies. You can configure your browser to refuse cookies, but doing so may prevent you from signing in.

9. International Users

The Service is operated from the United States. If you access the Service from outside the United States, you consent to the transfer of your information to the United States, where data-protection laws may differ from those in your country.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service at least 14 days before they take effect, unless an earlier effective date is required by law. The “Last updated” date at the top of this policy reflects the most recent revision.

11. Contact

For privacy questions or to exercise your rights, contact:

Email: privacy@plan2render.ai