YODECOROpen the studio ↗

PRIVACY & GDPR

Your room. Your data. Your rights.

This notice explains what personal data YoDecor uses to provide its AI room-design service, why it is used, who may receive it and the choices available to you.Last updated: 5 October 2026

Optional Microsoft Clarity and Google Analytics — updated 22 October 2026

Choosing Accept all in the cookie banner enables Microsoft Clarity together with YoDecor’s own visit counts; choosing Essential only enables neither. The banner names Clarity before you choose. This service helps us understand clicks, scrolling and usability through heatmaps and masked session recordings on our public pages, including the homepage, the Studio and the design guides.

It does not run on administration pages, shared project pages, password-reset pages, or on any address carrying a private value such as a referral code, invitation, token or email address.

Page content is explicitly masked wherever Clarity runs. YoDecor does not send uploaded room photos, generated designs, prompts, project names, account identifiers or email addresses to Clarity. What is recorded is interaction: where a pointer moves, what is clicked, how far a page is scrolled, and coarse product events such as opening Studio, selecting a workflow, completing an upload, starting or completing a render, registration and checkout progress. These events may include non-identifying categories such as language, workflow, input type, result status and whether the account is a test, registered or paid account.

Clarity is provided by Microsoft. With your consent, Microsoft receives interaction and technical data such as the page URL, browser/device information, network IP address and a pseudonymous session identifier. Advertising storage consent is denied.

Google Analytics is enabled by the same Accept all choice, on the same pages and with the same exclusions as Clarity. It receives page views and the coarse product events listed above, together with technical data such as the page URL, browser and device type and a pseudonymous client identifier in the _ga and _ga_* cookies (up to two years). Advertising storage, ad personalisation and Google signals are switched off, so the data is used for statistics only; Google keeps event-level data for 14 months. Choosing Essential only stops it, removes its cookies from this site and reloads the page.

The essential yodecor_clarity_consent_v1 cookie remembers this separate choice for six months. When enabled, Clarity may use _clck (one year) and _clsk (one day) for analytics. Microsoft applies its own retention periods to recordings and heatmaps; see its linked documentation.

To stop Clarity, open Cookie settings and choose Essential only. If Clarity is running, the page reloads to unload it and its YoDecor-domain cookies are cleared. Withdrawal stops future collection; it does not automatically erase recordings already held by Microsoft. Contact us through the privacy contact for a deletion request.

Microsoft Privacy Statement · Clarity retention

1. Controller and contact

YoDecor is the service name of the operator responsible for the processing described in this notice.

For privacy questions or to exercise a data-protection right, email hello@yodecor.com. Please write “Privacy request” in the subject line. We may request reasonable proof of identity before disclosing or deleting account data.

2. Data we collect

  • Account data: email address, hashed password credentials or a third-party sign-in identifier, account creation date, credit balance and sign-in sessions.
  • Referral data: a personal invitation code, the relationship between an inviter and a newly registered account, and the resulting credit reward. The public invitation link does not contain an email address.
  • Room-design content: room and furniture images, optional dimensions, style choices, prompts derived from your choices, generated images and saved projects.
  • Client review data: approval or change request, optional name or initials, revision note and a random browser identifier when someone responds through a creator-approved shared design link.
  • Private project invitations: the invited email address, permission level, invitation and expiry dates, last-opened date, and any approval or revision response submitted through the private link.
  • Payment records: the email used at checkout, purchased plan, credit amount, payment status and the transaction reference our payment provider sends us. Card details and the billing address are entered on the payment provider’s page; YoDecor never receives or stores card numbers.
  • Model-improvement samples (only with your consent): a resized copy of a room photo, with its metadata removed, and your answers about which way the sofa faces and which side its chaise is on.
  • Support and feedback: name, email address, message, page and limited technical information supplied with a feedback request.
  • Technical and usage data: locale, approximate country derived from browser or delivery headers, timezone, last activity and—only with consent—a random first-party visitor identifier, pages opened, campaign label and the referring website origin. Analytics records do not store your IP address or the full referring page path, although hosting and security systems may process IP addresses transiently.

3. Why and on what basis

PurposeLegal basis
Create accounts, keep sessions, provide credits, save projects and generate requested designs.Performance of the service contract (GDPR Art. 6(1)(b)).
Send and manage private project invitations and record requested review decisions.Performance of the requested collaboration service and legitimate interests in secure project delivery (Art. 6(1)(b) and (f)).
Attribute invitations, grant referral credits and prevent repeated or self-referral rewards.Performance of the referral offer and legitimate interests in preventing abuse (Art. 6(1)(b) and (f)).
Process payments, refunds, fraud controls and required financial records.Contract, legal obligations and legitimate interests (Art. 6(1)(b), (c) and (f)).
Protect YoDecor, prevent abuse, diagnose failures and answer support requests.Legitimate interests in operating a secure and reliable service (Art. 6(1)(f)).
Improve YoDecor’s own sofa-recognition model.Your consent (Art. 6(1)(a)); off unless you tick the box, and you can withdraw at any time.
Measure anonymous visits and improve the service.Your consent (Art. 6(1)(a)); analytics remains off when you select Essential only.

4. AI image processing

When you request a visualization, the images and design instructions needed for that request are sent to the configured AI image-processing provider. Processing is performed to create the output you requested.

Depending on the feature, that provider may be a GPU service running a model YoDecor operates, or a third-party AI model service. In either case the provider processes your images only to produce the result you asked for: your photos, your design instructions and the generated images are not used to train or improve the provider’s models. A provider may keep a short-lived log of requests solely to detect abuse of its own service; those logs serve no other purpose and are not accessible to YoDecor.

Separately, if you opt in, YoDecor keeps a copy of a room photo and your sofa answers to train its own sofa-recognition model. That model runs only on YoDecor’s servers in the European Union; these samples are never sent to an AI provider. Photos in which a person is detected are discarded automatically. The trained model stores learned patterns, not copies of your photos. See section 13.

Do not upload images containing people, identity documents, sensitive information, copyrighted material you cannot use, or details you do not want processed. YoDecor does not use AI to make decisions that produce legal or similarly significant effects about you.

5. Recipients and providers

Data is shared only where needed to operate the service, with these categories of recipients:

  • Cloud hosting and storage providers — servers and file storage, in the European Union.
  • Payment provider and merchant of record — purchases are sold and invoiced by Polar Software, Inc. ↗, which acts as merchant of record: it runs the checkout, calculates, collects and pays VAT and sales tax, issues receipts and handles refunds and chargebacks. Polar processes card payments through Stripe ↗, which also performs fraud prevention. You give your card details and billing address directly to Polar and Stripe; they process them as independent controllers under their own policies (Polar privacy policy ↗, Stripe privacy policy ↗), in the United States and the European Union.
  • Identity providers — only if you choose to sign in with a third-party account instead of a password, in the United States.
  • AI image-processing providers — GPU services and third-party AI model services that produce the renders and walkthrough videos you ask for, in the United States. They receive the room photo, any furniture reference image and the design instructions for that one request, and return the generated image or video.
  • Messaging providers — used to forward feedback and refund requests to the operator’s private support channel, and to alert the operator when a creator voluntarily submits a public before-and-after project for community-gallery review. Outside the European Union. Avoid including sensitive information in support messages.

Providers may act as processors or independent controllers for parts of their services. You can ask which providers are currently used in each category, and for a copy of the safeguards that apply, using the contact details in section 1.

6. International transfers

Some of the categories above process data outside the European Economic Area, including in the United States. Those transfers rely on an adequacy decision where one covers the provider, and otherwise on the European Commission’s Standard Contractual Clauses together with the provider’s technical and organisational safeguards. You can request the transfer mechanism and safeguards that apply to any category, using the contact details in section 1.

7. How long data is kept

  • Authentication sessions: up to 30 days; password-reset links: 30 minutes.
  • Consent preference: 6 months; optional visitor cookie and client-review browser identifier: 12 months; analytics events: up to 13 months; Google Analytics cookies: up to 2 years, and its reports keep event data for 14 months.
  • A pending referral invitation code stored in the invitee’s browser: up to 30 days. Referral and awarded-credit records are retained with the related accounts for accounting and abuse prevention.
  • Private project links: 90 days unless revoked sooner; invitation and response records are normally removed with the related project or account.
  • Support feedback and client review responses: normally up to 24 months.
  • AI provider request logs: a short period held by the AI image-processing provider solely for abuse detection. These are separate from your YoDecor project history, and deleting a project or your account does not extend or shorten them.
  • Accounts, uploads, generated results and project history: while the account is active. You can delete your account yourself from the account panel; it is then erased after a 30-day grace period during which you can cancel, and the erasure removes your uploaded photos and generated images from our storage.
  • Model-improvement samples: until you withdraw consent or ask to delete your account (both remove them straight away), or for 24 months, whichever comes first. A model already trained is not retrained when a sample is withdrawn.
  • Invoices and payment records survive account deletion, detached from the account and retained only for the period accounting and tax law require.
  • Payment and credit records: for the period required by accounting, tax, fraud-prevention and legal-claims obligations.

Backups and records subject to a legal hold may remain for a limited additional period.

8. Your GDPR rights

Subject to applicable conditions, you may request access, correction, deletion, restriction, portability, or object to processing. Deletion is also available directly in the account panel, without contacting us. You may withdraw consent at any time without affecting earlier lawful processing.

Requests are free of charge and are normally answered within one month. You may also complain to the Bulgarian Commission for Personal Data Protection ↗ or the supervisory authority where you live or work.

8a. Support chat

To start the chat you give an email address (signed-in people are known by their account). We keep that address with the language, the page, the number of messages and the time of the first and last one, so that support can reply; if you tick the box, we may also email you tips and offers from YoDecor and partner shops - reply "stop" or write to hello@yodecor.com to end that at any time. The help bubble sends your messages, the page language and, if you are signed in, your own credit balance and the status of your last design to OpenAI to produce an answer; the conversation itself is not stored by us until you choose Send to support. That choice saves the conversation with the email address you give (or your account email) so that our support can reply, and sends a copy to the founder's private Telegram. Support requests are kept for up to 12 months. Do not put passwords or card numbers in the chat. The chat uses no cookies; the open conversation is kept in your browser only until the tab is closed.

9. Cookies and choices

Essential cookies support sign-in, security and your consent preference. Optional first-party analytics, Google Analytics and Microsoft Clarity start only after you select Accept all. You can change your choice at any time using the Cookie settings button.

Read the full Cookie Policy.

10. Security and updates

YoDecor uses access controls, encrypted transport, password hashing, restricted administration and service-provider safeguards. No internet service is completely risk-free, so please use a strong unique password.

This notice may be updated when the service or legal requirements change. Material changes will be highlighted on the site, and the date at the top will be revised.

This notice provides transparent information about YoDecor’s current data practices. It is not a substitute for legal advice tailored to the operator’s final legal entity, establishment and business operations.

11. Optional public design links

Projects remain private by default. Creating a public link requires your explicit agreement. Only the finished result is shared unless you separately choose to include the original photo. Your email, name, design prompt, furniture reference and other projects are not included on the public page.

Anyone with the link can view, save or reshare the selected images. Public previews are resized and image metadata is removed. Search indexing is disabled unless you separately allow it; permission does not guarantee indexing.

A recipient may approve the concept or privately request a change. The response, optional name or initials and note are visible only to the project owner; they are not published on the shared page or community gallery. YoDecor uses a random essential browser identifier so the recipient can update the same response without creating an account. The project owner may receive an email notification.

If you separately request community-gallery review, YoDecor sends the operator a private moderation alert containing your account email, the project reference and its creator-approved public link. Gallery submissions are reviewed before they can appear on the homepage, and you may withdraw sharing permission at any time.

Use Share result → Unpublish in your saved project to disable its public page and image links. Republishing creates a new link. Copies or social previews already saved by others cannot be recalled. Sharing choices and the time and version of your agreement are stored with the project. You can also contact us to report a shared design.

12. Private project invitations

A project owner may enter a client’s or colleague’s email address to send a private project invitation. Each recipient receives a separate random link with either view-only or review permission. The link is not indexed, expires after 90 days and can be revoked at any time by the project owner.

If a person signs in to YoDecor using the invited email address, the active project also appears in that account’s “Shared with me” workspace. Matching is case-insensitive and does not transfer project ownership. The same view-only or review permission, expiry and revocation controls continue to apply.

Recipients with review permission may approve the current design or request a change. The owner can see whether an invitation has been opened, the response and its date. YoDecor never displays the recipient’s email address on the invitation page.

Private links should not be forwarded. Anyone who obtains a valid link may use the assigned permission until it expires or is revoked. Contact YoDecor if you received an invitation unexpectedly or want the associated email and response data removed.

13. Improving sofa recognition

When you design a room around a new sofa, YoDecor asks which way your current sofa faces and which side its chaise is on, and suggests an answer. The suggestion comes from a small model YoDecor runs on its own servers in the European Union. It is weakest on sofas photographed from the side or from behind, and real room photos with confirmed answers are what improves it.

A separate tick box on the sofa card lets you help. It is not ticked unless you tick it, and your designs work the same either way. If you tick it:

  • YoDecor keeps a resized copy of the room photo, with its metadata (such as location and camera details) removed, together with your answers and the model’s own guesses.
  • Before anything is kept, the photo is checked for people. If a person is detected, or the check cannot run, nothing is kept.
  • The samples are used only to train YoDecor’s own sofa-recognition model, on YoDecor’s servers. They are never sent to an AI provider, published or sold.
  • The trained model stores learned patterns, not copies of your photos.

You can withdraw at any time by unticking the box on the sofa card or in your account panel. Withdrawing, or asking to delete your account, removes your samples straight away. Otherwise each sample is removed after 24 months. A model already trained is not retrained when a sample is withdrawn. The time and wording version of your choice are recorded as proof of consent.

YODECOR

AI room design and furniture visualization for real homes.

Privacy & GDPRCookie policyTerms & refundsContact

Follow and review YoDecor

YouTube↗Instagram↗Facebook↗Trustpilot↗