Privacy policy

What this policy covers

This policy describes GoSpacePlan’s current browser and account features. Local-only planning and server-linked projects handle data differently. The operator details above identify who is responsible for this installation when completed.

Data and purpose

• Guest projects: layouts, notes, settings, recovery drafts and local versions stay in IndexedDB or local storage on your browser until you explicitly upload, share, export or submit content to an enabled integration.
• Accounts: the server stores your email, a password hash for password accounts, session records, project documents, requirements, snapshots and share records. These support signing in, private storage, recovery and requested sharing.
• Service requests: the host and reverse proxy receive connection information such as IP address, request path and timing. Log retention depends on the operator’s hosting configuration.
• Support: information you choose to send is used to respond and resolve the issue. Avoid confidential floor plans or personal details unless needed.

Reasons for processing

Where data-protection law requires a lawful basis, account and requested storage functions are used to provide the service; security and abuse prevention support the operator’s legitimate interests; records required by law are retained to meet those duties. Optional services are used only when requested.

Sharing and optional providers

A read-only link exposes the saved snapshot to anyone holding that link. Private projects are otherwise subject to account authorization. Optional email delivery, Google sign-in, AI interpretation, hosting and Stripe billing involve their configured providers. AI interpretation sends the notes you submit for supported preference suggestions; deterministic layout generation runs in your browser. Billing is handled by Stripe; GoSpacePlan does not receive full payment-card details.

Storage, cookies and retention

Local projects remain until deleted or browser site data is cleared or evicted. Local history is bounded to 20 entries and 5 MiB per project. The application uses browser storage for projects and recovery, and a necessary session cookie for account sign-in. It does not include advertising trackers. GoSpacePlan uses Google Analytics 4 (Google Ireland Limited / Google LLC) on its pages and in the planner to understand visits: pages viewed, approximate location, device and browser, and how visitors arrived. Google Analytics sets first-party cookies (_ga and _ga_<id>, kept up to two years) and Google receives your IP address, which it does not store in Google Analytics 4. Plans, notes, measurements, account details and project contents are never sent to it. You can block it with your browser’s cookie or tracking settings, an ad blocker, or Google’s opt-out add-on. When the operator enables aggregate beta measurements, the application also counts workflow events, project type and optional 1–5 ratings without plans, notes, account IDs or client identities; these in-memory counters reset on restart. Operational application logs contain request IDs, route patterns, status, duration and response size, excluding URL queries and project content. Hosting providers may maintain operational logs.

Sessions end after seven days without use and at most 30 days after sign-in. Security history (sign-ins, password, email and two-step changes) is kept for 90 days with only the network part of addresses; failed sign-in counters are cleared within a day once no lock applies. Email links expire after an hour. Share links expire or can be revoked. Account deletion removes active account records, but it does not clear browser projects, recall downloaded files or immediately erase retained backups. Cancellation of an active subscription is required before account deletion. Deleting a local project removes its local versions.

Your choices and rights

You can export layouts as JSON, delete local projects, revoke share links and request account deletion through account settings. Where applicable law provides them, you may request access, correction, erasure, restriction, portability, or object to certain processing. Consent-based processing can be withdrawn without affecting earlier lawful processing. Contact the operator above; reasonable identity checks may be needed. You may also complain to the relevant data-protection authority. These rights can be subject to legal exceptions.

GoSpacePlan does not make legal or similarly significant automated decisions about users. Layouts and AI suggestions require your review. Do not put sensitive personal information in project notes.

Policy changes

The publication date identifies this version. Material changes should be communicated before new processing starts. Review the policy when enabling optional account or provider features.