Privacy policy

This policy explains what personal data Vitruvius collects, why, who processes it for us and what rights you have. It applies to the website, the desktop app and the API behind them.

What we collect

• Account data: your email address, the role you choose (architect, interior architect, interior designer or other), your plan and invite code redemptions.
• Sign-in data: hashed one-time codes and links (kept for 7 days), session records with a device description and IP address, so you can see and revoke signed-in devices.
• Project data: the drawings, files, briefs, renders and agent sessions you create or upload.
• Usage data: how many agent units you use and when, to enforce plan limits (kept for 24 months).
• Security logs: an audit log of administrative changes (kept for 12 months).

We do not use third-party analytics, advertising trackers or tracking pixels. Page counts are cookieless and kept on our own servers.

Why we use it

To provide the service you signed up for (contract), to keep it secure and prevent abuse (legitimate interests), and to meet legal obligations such as tax records once billing starts.

Customer data and AI

Your projects, files and conversations are never used to train models, by us or by our AI provider. When you use the agent, only the minimum project context needed for that request is sent for processing. See the AI use policy.

Sub-processors

Transfers outside the UK and EU rely on the provider's standard contractual clauses or equivalent safeguards.

Your rights

You can access, correct, export or delete your data. Export and deletion are self-service on your account page. Deleted accounts are removed after a 30-day grace period. You can also complain to your data protection authority (in the UK, the ICO).

Contact

Questions about privacy: write to us using the contact address given on the website once the company details are published.