Last updated: October 02, 2026
The data controller for this Service is:
If you sign in via Google or GitHub OAuth, we receive basic profile information authorized by you from that provider.
| Purpose | Legal Basis |
|---|---|
| Providing and maintaining the Service | Contract performance |
| Billing and payment processing | Contract performance |
| Customer support | Contract performance / Legitimate interest |
| Service notifications (billing, security, policy updates) | Legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Product improvement and analytics | Legitimate interest |
| Legal compliance | Legal obligation |
We may aggregate or de-identify data for statistical analysis. Such data cannot be linked to a specific individual.
| Type | Purpose | Can Be Disabled |
|---|---|---|
| Strictly Necessary | Maintain login, core functionality | No |
| Functional | Language preferences, personalized settings | Yes |
| Analytics | Anonymous usage statistics, product optimization | Yes |
| Marketing (optional) | Targeted advertising and performance measurement | Yes |
We use Google Analytics (Privacy Policy) for anonymous usage analytics. You can adjust preferences via your browser settings or our Cookie Preference Center.
We do not sell your personal information, including as "selling" is defined under applicable laws such as CCPA. We only share information in the following circumstances:
In the event of a security incident affecting your rights, we will notify you and relevant regulators within 72 hours of discovery, as required by applicable law. Please keep your account credentials secure and do not share them with others.
| Data Type | Retention Period | Disposal |
|---|---|---|
| Account Information | Active period; 90 days after account deletion | Delete or anonymize |
| Transaction Records | As required by law (typically 7 years) | Delete or archive |
| Customer Support Records | 2 years | Secure deletion |
| Security Audit Logs | 12 months | Secure deletion |
| Floor Plan Uploads | Until processing complete + 7 days, or until user deletes | Secure deletion |
To exercise any of the following rights, contact us at privacy@pandada.ai. We will process your request within 30 calendar days.
| Right | Description |
|---|---|
| Right to Know | Learn what personal data we collect and how we use it |
| Right to Access | Receive a copy of your personal data |
| Right to Rectification | Correct inaccurate or incomplete information |
| Right to Erasure | Request deletion of your data under specific conditions |
| Right to Restrict Processing | Pause data processing under specific circumstances |
| Right to Data Portability | Receive your data in a machine-readable format |
| Right to Object | Object to processing based on legitimate interest or marketing |
| Right to Withdraw Consent | Withdraw consent for processing based on consent |
If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.
With your consent, we may send marketing-related emails, SMS, or in-app notifications. You can opt out at any time by clicking the "Unsubscribe" link in any marketing email, disabling marketing notifications in Account Settings, or contacting us. Opting out does not affect service-essential notifications (billing, security, policy updates).
Our servers and partners may be located in the United States and other countries. When data is transferred internationally, we protect it through:
This Service is intended for users aged 18 and above. We do not knowingly collect data from individuals below this age. If you believe your child has provided us with personal information, please contact us immediately at privacy@pandada.ai and we will promptly delete it.
The Service may contain links to third-party websites or integrate with third-party services. This Policy applies only to information we directly collect. We are not responsible for the data practices of third parties and recommend reviewing their policies before use.
If we make material changes to this Policy, we will notify you at least 15 days in advance via platform announcement or your registered email address, and update the "Last updated" date at the top of this page. Your continued use after the effective date constitutes acceptance of the revised Policy.
This Privacy Policy is for informational purposes only and does not constitute legal advice. We recommend consulting a qualified legal professional familiar with your target market before official publication.
Plan2D AI · https://plan2d.tech