Privacy Policy

1. Information we process

We process information you choose to provide and limited technical information needed to run the service.

• room and furniture photos;
• room type, measurements, floor-plan edits, color and style choices, budget, household needs, and furniture dimensions;
• generated plans, 3D geometry, fit-check results, and recommendations;
• request identifiers, content hashes, processing receipts, timestamps, and error records; and
• basic connection and server-log data such as IP address, browser type, requested URL, and response status.

2. Why we use information

We use this information to prepare photos, analyze room structure, create and edit plans, render 2D and 3D views, generate recommendations, restore your work, prevent duplicate or unsafe operations, troubleshoot errors, protect the service, and meet legal obligations.

We do not sell personal information or use room photos for third-party advertising.

3. How photos are handled

Before upload, the web app converts supported room photos to JPEG, removes embedded metadata by redrawing the image, and reduces oversized images. The prepared copy—not the untouched original file—is sent only for the room-photo analysis you start. The existing-furniture step does not collect another photo.

Before sign-in and payment, prepared photos stay only in a private browser IndexedDB draft for up to 24 hours. After sign-in and credit confirmation, they may be sent to the AI processing provider configured for bangtaste. The bangtaste plan database stores hashes and processing receipts used to verify requests, but it is designed not to store the photo data itself.

4. Browser storage and retention

The service uses browser local storage to remember a plan identifier, your current step, choices, and recommendation state. The prepared photo data stays separately in private IndexedDB, is deleted after successful analysis, reset, or 24-hour expiry, and is never written to local storage. You can also clear it in your browser settings.

Optional Google Analytics and Microsoft Clarity load only after you choose Allow analytics. Critical funnel events may first go to a same-origin bangtaste endpoint and then to Google Analytics so browser tracker blocking does not erase conversion counts. These events use approved step names and low-cardinality settings only; they do not include room photos, form text, measurements, full URLs, account IDs, or IP addresses. You can change or withdraw this choice from Analytics settings.

Plan records, edits, recommendations, hashes, and operational receipts are kept only as long as reasonably needed to provide and secure the service, resolve disputes, and meet legal obligations. Backup and security records may remain for a limited additional period.

5. Analytics and session diagnostics

After you choose Allow analytics, we use Google Analytics to measure path-only page visits and Microsoft Clarity on public landing pages without query parameters to understand basic interactions and technical problems. These providers may receive the page path and title. They may also receive browser and device information, coarse location derived from the connection, and interaction data such as clicks and scrolling. Query strings are excluded from Google event locations, and Clarity is not loaded when a landing URL has a query string or on planner and legal routes. Advertising storage and Google advertising signals remain disabled. You can withdraw this choice from Analytics settings.

The bangtaste service does not intentionally send room photos, room geometry or measurements, addresses, user-entered text, recommendation text, account identifiers, or payment identifiers to these analytics tools. Planner content and public operator details are explicitly masked from Clarity before upload. You can block these requests in your browser and contact us about applicable privacy rights.

6. When information is shared

We share information only with service providers that help run bangtaste, such as hosting, database, security, and AI processing providers; when you direct us to do so; to protect users and the service; or when law requires it. Providers may use the information only for the services they perform for us under their applicable terms and safeguards.

7. Processing in other countries

Some service providers may process information outside your country. When that happens, we use applicable contracts and safeguards intended to protect the information during the transfer and processing.

8. Security

We use technical and organizational measures intended to protect information, including input validation, restricted server-side credentials, content hashing, and separation of image payloads from persisted plan records. No online service can promise absolute security.

9. Your choices and rights

Depending on where you live, you may ask to access, correct, delete, restrict, or receive a copy of personal information, or object to certain processing. You may also withdraw consent where processing depends on consent. We may need to verify your request and may retain information when law requires it.

10. Children

The service uses simple language, but a child who cannot legally consent to data processing must use it with a parent or guardian. We do not knowingly collect personal information from a child without the consent required by local law.

11. Policy updates

If this Policy changes materially, we will update this page and the date above. The version posted here applies from its stated date.