Privacy Policy

Last updated: 24 October 2026

HZplan is a house floor-plan tool operated by Artem Goncharov, a UK sole trader and the data controller. Contact privacy@hzplan.uk for privacy questions or requests. We are registered with the UK Information Commissioner's Office, registration reference ZC156616.

What we collect

• Account data: email, display name, and avatar received from Apple, Google, or WorkOS email sign-in.
• Plan data: floor-plan documents, imported images, measurements, materials, and related content you create or upload.
• Generated assets: 3D models, renders, exports, and other outputs produced from your plans.
• AI-client data: instructions, attached files, plan content, and tool responses exchanged when you connect HZplan through MCP or another AI client.
• Operational data: request logs, aggregate usage metrics, errors, performance information, and mobile app diagnostics.

Speech in the iOS app is transcribed on-device and the audio does not leave the device. The words you type or speak and the assistant response are included in diagnostics only if you enable “Improve HZplan's AI”, which is off by default and can be withdrawn at any time.

Why we use data

We use account and plan data to provide the service and fulfil our contract with you. We use operational data to secure, maintain, and improve the service based on our legitimate interests. We use plans or command content to improve AI models only with separate, revocable consent. HZplan does not make solely automated decisions that have legal or similarly significant effects on you.

Who receives data

We use the following subprocessors only as needed to operate HZplan:

• Cloudflare: hosting, storage, content delivery, and analytics.
• WorkOS, Apple, and Google: authentication, depending on the sign-in method you choose.
• Modal: image-to-plan and 3D-generation processing.
• Grafana Cloud: service logs and metric monitoring.

When you connect a third-party AI client such as ChatGPT, that client may send prompts, files, and context to HZplan and receive plan content and tool responses. The third-party client's own terms and privacy policy also apply. HZplan does not sell personal data or publish private plans.

Retention

• Account and plan data are kept while your account is active and deleted within 30 days of a verified deletion request.
• Uploaded floor-plan images are deleted within 7 days after successful digitisation, or within 30 days if processing fails.
• Authentication sessions are retained for up to 30 days.
• Mobile app diagnostics are retained for 30 days and deleted when you delete your account.
• Grafana operational logs are retained for up to 14 days; aggregate Cloudflare analytics are retained for up to 90 days.

International transfers

Some subprocessors may process data outside the UK and EEA, including in the United States. Where required, transfers rely on the UK International Data Transfer Addendum, EU Standard Contractual Clauses, or an adequacy decision. Contact us for details of the safeguards that apply.

Your rights

Under UK data-protection law you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. Use the HZplan Account screen where available or email privacy@hzplan.uk.

You may complain to the UK Information Commissioner's Office through its complaints service, though we would appreciate the opportunity to address your concern first.

For the interactive legal and trust pages, visit the HZplan legal centre.