Last updated: October 6, 2026
Planovel Technologies Private Limited ("Planovel," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered design and architecture software services.
This Privacy Policy complies with applicable data protection laws globally, including:
We collect information you provide when you:
When you use our Service, we automatically collect:
We do not use device fingerprinting, mouse-movement or keystroke tracking, or WebRTC network probing.
We may receive information from:
We use your information for the following purposes:
| Purpose | Legal Basis | Data Types |
|---|---|---|
| Provide and maintain our Service | Contract performance | Account data, usage data, project files |
| Process payments and billing | Contract performance | Payment information, billing address |
| Answer a chat and charge credits for it | Contract performance | Account, the message you send, and the reply. The live message is sent to the AI model provider listed in section 5 to generate the reply. That exchange is not written into the conversation store and is not used by Planovel to train models. |
| Improve the product by reviewing conversations | Legitimate interest. Storage is on by default. You can ask us to turn it off. | A de-identified copy of the message you send and the Planovel reply, kept for 90 days. No account id, email address, drawing name, file path, or drawing scene. Not used to train models, not sold, and not used to make a decision about you. |
| Provide customer support | Contract performance | Support communications, account information |
| Send important service updates | Contract performance | Email address, account preferences |
| Marketing and promotional communications | Consent | Email address, preferences, usage data |
| Ensure security and prevent fraud and abuse | Legitimate interest | IP address, device and browser type, sign-in and credit activity, and payment checks by Razorpay |
| Regional pricing | Contract performance | Country of the regional page you open or the country you choose at checkout |
| Website analytics | Consent (analytics cookie banner) | Pages viewed, downloads, sign-ups, and purchases, through Google Analytics |
| Comply with legal obligations | Legal obligation | All data types as required by law |
When the Planovel plugin sends a chat, we store a separate copy of that message and of Planovel's reply so we can read conversations and improve the product. Conversation storage is on by default. You can ask us to turn it off by emailing support@planovel.com. You can also turn it off yourself in the plugin's Settings. The plugin works the same either way. This copy is de-identified. It is not anonymous: the words you type can still include a name, a client, or a site address. We remove email addresses, phone numbers, and query strings from web addresses before storing the text, and we cap the length of each message.
The stored copy has no account id, name, email address, IP address, drawing name, file path, or drawing scene. It is grouped only by a random transcript key created on your computer, and each row records only the day it was stored, not the time. We do not keep a table that links that key to your account, and we do not attempt to re-identify a conversation. That is our public commitment under the California Consumer Privacy Act. Because there is no account link, we cannot look up your chats from your email address, and deleting your account does not select a matching chat row.
We keep this text for 90 days and then delete it. To ask us to delete a transcript sooner, email support@planovel.com with the transcript ID. To find it, right-click the chat tab, a message, or the chat in History, and choose Copy transcript ID. To stop new conversations from being stored, ask us at support@planovel.com, or open Settings in the plugin and turn off "Store my conversations, without my account, to improve Planovel". Conversations stored before you turn it off are deleted after 90 days, or sooner if you send us the transcript ID. To ask a question about this use, email support@planovel.com. We do not use these rows to train models. Our server logs do not contain conversation text and are deleted after 30 days.
To protect the Service from fraud and abuse, we use:
We do not use device fingerprinting, GPS location, mouse-movement or keystroke tracking, or WebRTC network probing, and we do not make automated decisions with legal or similarly significant effects on you.
You can ask what security data we hold about you, ask us to correct it, and ask a person to review any action we take on your account, such as a suspension, by emailing support@planovel.com.
We do not sell, rent, or trade your personal information to third parties for monetary consideration.
We may share your information in the following circumstances:
These providers process personal data for us under contract and only to provide their service:
| Provider | What they do | Where |
|---|---|---|
| OpenAI | AI models. Each chat message, the earlier messages in that chat, and a summary of the open drawing are sent to OpenAI to generate the reply. Under OpenAI's API terms this data is not used to train their models, and they may keep it for a limited period, typically up to 30 days, for abuse monitoring. | United States and other countries where the provider operates |
| Amazon Web Services | Runs the Planovel API and keeps server logs | Mumbai, India |
| Supabase | Database for accounts, credits, and de-identified conversation text | Mumbai, India (on AWS) |
| Google (Firebase Hosting, Google sign-in, Google Workspace, Google Analytics) | Hosts this website, signs you in with Google if you choose it, sends our email, and, only if you accept analytics cookies, measures website use | United States and other countries |
| Razorpay | Processes payments and runs payment fraud checks | India |
Your data may be processed in India and other countries where our service providers operate. We ensure appropriate safeguards are in place for international data transfers, including:
We implement industry-standard security measures to protect your information:
In the event of a data breach that may affect your personal information, we will notify you and relevant authorities as required by applicable law:
We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy:
You have the right to:
You may request:
Where we rely on your consent, you can withdraw it at any time: analytics cookies with the cookie choice link in section 9.2, and marketing email by emailing support@planovel.com. Conversation storage is on by default. To turn it off, email support@planovel.com or use the plugin's Settings. Stopping it does not affect chats already stored; those are deleted after 90 days, or sooner if you send the transcript ID.
You can stop marketing communications at any time by emailing support@planovel.com. Service emails, such as security and billing notices, are part of providing the Service.
To exercise your rights, contact us at support@planovel.com. We will respond to your request within 30 days. You can also nominate another person to exercise your rights if you die or become unable to act, and you can complain to your local data protection authority (in India, the Data Protection Board of India) or to our Grievance Officer in section 15.
We do not use advertising or marketing cookies.
You can change your cookie choice at any time; the banner will appear again. You can also delete cookies in your browser settings.
Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.
Account data is stored in Mumbai, India (AWS ap-south-1), where our database is hosted, and de-identified conversation text is stored in that same database. Each chat message is also sent to OpenAI, which processes it in the United States or other countries where it operates, as described in section 5.3. Website hosting, Google sign-in, email, and analytics are provided by Google, which may process data outside India. For personal data transferred from the EEA or the UK, we rely on the Standard Contractual Clauses in our provider agreements. Using the Service is not, by itself, consent under the GDPR to an international transfer.
Our Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to such third-party services. We encourage you to review the privacy policies of any third-party services you use.
We may update this Privacy Policy from time to time. We will notify you of material changes by:
If you have any questions about this Privacy Policy or our data practices, please contact us:
If you have any grievances regarding our data practices, you may contact our Grievance Officer:
We will acknowledge your grievance within 24 hours and resolve it within 30 days.
This Privacy Policy is designed to comply with data protection laws globally:
We review this policy whenever our data practices change, follow changes in applicable laws, and keep a written assessment for each use of personal data that needs one.
See section 11. For transfers from the EEA and the UK we rely on Standard Contractual Clauses, or on an adequacy decision where one applies.