Privacy policy
Who we are
Flatapult turns a floor plan into a 3D model you can walk through. It runs at flatapult.com and as the Flatapult app for Android, which shows the same website. Write to us at contact@flatapult.com with any question about your data.
What we store
We only store what the service needs to work:
- Your account: email address, the name you give (optional), your language and a scrypt hash of your password. We never store the password itself.
- Sign-in sessions: a random token in a cookie on your device; the server keeps only its hash.
- Your work: the flats you save, the floor plan image or PDF page you upload for each of them, and your furniture designs.
- Flats saved without an account: the flat and its drawing, which anyone with the link can open. The key that lets you edit it stays in your browser.
- Web server logs: IP address, time, page requested and browser, kept for about two weeks for security and troubleshooting.
Cookies and local storage
The sign-in cookie keeps you signed in for up to 30 days. A language cookie remembers English or Polish. Your browser also keeps your cookie choice, the editor layout, the edit keys of flats saved without an account, the plan you work on before saving it, and copies of the flats you open with their floor plan drawings. None of these are used for advertising. Deleting your account removes the copies in the browser you delete it in; clearing the site data removes all of them.
Analytics
We use Google Analytics 4 to see how people use Flatapult. Analytics cookies are only set after you choose Allow in the cookie banner, and you can change your choice at any time under Cookie settings at the bottom of the home page. If you decline, the Google tag may still send cookieless signals without identifiers. Each signal includes the address and title of the page you are on, which for a flat contains its link and its name. Advertising features are off. Google never receives your email address or account.
Why we use it
Your account, flats and designs are used to provide the service you signed up for. Server logs serve our legitimate interest in keeping the service secure. Analytics cookies rely on your consent.
Who else handles it
DigitalOcean hosts the server and the database in Frankfurt, Germany. Google processes analytics data as described above. The text recognition used to read dimensions loads its data from the jsDelivr network, which sees your IP address like any website you visit. We do not sell your data or share it with anyone else.
How long we keep it
Your account and everything in it stay until you delete them. Deleting a flat or your account removes it at once; a copy may remain in server backups for up to 30 days. Flats saved without an account stay until they are deleted. Server logs are removed after about two weeks.
Your rights
You can ask to see, correct or receive a copy of your data, have it deleted, object to its use and withdraw consent at any time. Delete your account in Settings, or write to contact@flatapult.com. You may also complain to a data protection authority; in Poland that is the President of the Personal Data Protection Office (UODO).
Children
Flatapult is not meant for children under 16.
Changes
If this policy changes, we update this page and the date at the top.