Privacy Policy

Eduard Januzi, trading as Keyplan Studio, a sole proprietor based in Kosovo (Vicianum Arberi, Prishtine), is responsible for the personal data described here. You can reach us at hello@keyplanstudio.com.

• Your account. Your email address, your password (stored only as a one-way hash), your company or agency name and your role in the account. We use these to run your account and to contact you about it.
• Your content. The projects you build: names, unit details and statuses, images, panoramas and published versions. Images are re-encoded in your browser before upload, which removes the location and camera data inside photo files. We store your content to provide the service and publish it only where you choose to.
• Enquiries. When you use the contact form: your name, work email and what you tell us about your development. We use these to reply and follow up.
• Billing. Paddle, our merchant of record, collects your payment details itself. We keep the identifiers Paddle gives your account and subscription, your plan and billing status, and the notices Paddle sends us about each payment. Those include amounts, currency, country, and the card type, last four digits and expiry date, but never the full card number.
• Product analytics. On this website and in the studio we use PostHog to see how the product is used: the pages you visit with their full addresses, what you click, your browser and device type, and your IP address with the approximate location it indicates. When you are signed in this is linked to your account ID, email address, role and company.
• Embedded explorers. When someone views an explorer embedded on a customer’s website, we record anonymous statistics for that customer: a random identifier for the page view, whether it was a phone, tablet or desktop, the domain of the website it was embedded on, and which nodes, hotspots and cards were opened and for how long. No cookies are set, and no IP address or browser identifier is stored with these statistics.
• Server logs. Our servers log each request: the IP address, the browser’s user agent, the address requested and the time. Login tokens and cookies are removed from these logs. We use them to keep the service secure and to fix problems.

Where the GDPR or UK GDPR applies, we rely on these legal bases: performing our contract with you, for your account, content and billing; our legitimate interests in running, securing and improving the service and in answering enquiries, for logs, analytics, explorer statistics and enquiries; and our legal obligations, for keeping billing records.

• pe_refresh_token keeps you signed in. It is essential, set only when you log in, lasts 7 days, and cannot be read by scripts on the page.
• PostHog stores an identifier in a cookie and in your browser’s local storage for the product analytics described above. It lasts up to a year.
• theme remembers whether you chose light or dark mode. It sits in local storage until you clear it.
• pe.studio.draft.v1 keeps your work in the try-it-out studio before you sign up. It stays on your device, in local storage.
• During checkout, Paddle sets its own cookies, which its privacy notice explains.

Embedded explorers set no cookies and store nothing in the visitor’s browser. You can block or delete cookies in your browser settings; the analytics ones are not needed for the service to work.

• Railway hosts our application, database and logs in the United States, and stores uploaded files, which its storage network serves from locations around the world.
• PostHog provides product analytics, hosted in the United States.
• Paddle processes payments as merchant of record and is responsible for the payment data it collects, as its privacy notice explains.

We do not sell personal data, and we do not share it for advertising. We may disclose it where the law requires us to, or to protect our rights or someone’s safety. What you publish is public: anyone with your embed or its link can see your published explorers.

Our providers process data in the United States and, for uploaded files, wherever their storage network serves them. Where data protection law requires it, we rely on the safeguards these providers offer for international transfers, such as the European Commission’s Standard Contractual Clauses.

• Your account and content: while your account is open. When you ask us to close it, we delete them within 30 days.
• Billing records: for as long as tax and accounting law requires.
• Enquiries: as long as we need to reply and follow up, or until you ask us to delete them.
• Explorer statistics: while the customer’s account is open.
• Server logs and analytics: for the standard retention periods of Railway and PostHog.

Depending on where you live, you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to send it to you in a portable format. Email hello@keyplanstudio.com from the address on your account and we will reply within 30 days. There is no way to delete an account yourself yet, so deletion requests come to us by email too.

If you are in the EU or the UK and unhappy with how we handle your data, you can complain to your local data protection authority.

If you live in a US state with a privacy law, such as California, you have similar rights to know about, correct and delete your data, and we will not treat you differently for using them. We do not sell personal information or share it for cross-context behavioural advertising.

If you reached an explorer on a developer’s or an agent’s website, that business decides what to publish and is responsible for its own website and privacy notice. For the explorer itself we collect only the anonymous statistics described above, on that customer’s behalf.

Passwords are stored only as salted one-way hashes, your session uses a cookie scripts cannot read, everything travels over encrypted connections, and uploaded files are kept in private storage and reached through links that expire. No system is perfectly secure. If something goes wrong that affects your data, we will tell you as the law requires.

Keyplan Studio is a business tool and is not meant for anyone under 16. We do not knowingly collect their data.

We update this policy when what we do changes. The date at the top shows the current version, and for significant changes we will also email account owners.

Questions about your data go to hello@keyplanstudio.com. The rest of our agreement with you is in the Terms of Service.