1. Controller and contact
YoDecor is the service name of the operator responsible for the processing described in this notice.
For privacy questions or to exercise a data-protection right, email teomihsav76@gmail.com. Please write “Privacy request” in the subject line. We may request reasonable proof of identity before disclosing or deleting account data.
2. Data we collect
- Account data: email address, hashed password credentials or Google account identifier, account creation date, credit balance and sign-in sessions.
- Room-design content: room and furniture images, optional dimensions, style choices, prompts derived from your choices, generated images and saved projects.
- Payment records: purchased plan, credit amount, payment status and Stripe transaction references. YoDecor does not store complete card details.
- Support and feedback: name, email address, message, page and limited technical information supplied with a feedback request.
- Technical and usage data: locale, approximate country derived from browser or delivery headers, timezone, last activity and—only with consent—a random first-party visitor identifier and pages opened. Analytics records do not store your IP address, although hosting and security systems may process IP addresses transiently.
3. Why and on what basis
| Purpose | Legal basis |
|---|---|
| Create accounts, keep sessions, provide credits, save projects and generate requested designs. | Performance of the service contract (GDPR Art. 6(1)(b)). |
| Process payments, refunds, fraud controls and required financial records. | Contract, legal obligations and legitimate interests (Art. 6(1)(b), (c) and (f)). |
| Protect YoDecor, prevent abuse, diagnose failures and answer support requests. | Legitimate interests in operating a secure and reliable service (Art. 6(1)(f)). |
| Measure anonymous visits and improve the service. | Your consent (Art. 6(1)(a)); analytics remains off when you select Essential only. |
4. AI image processing
When you request a visualization, the images and design instructions needed for that request are sent to the configured AI image processor—currently Modal infrastructure or OpenAI, depending on service configuration. Processing is performed to create the output you requested.
Do not upload images containing people, identity documents, sensitive information, copyrighted material you cannot use, or details you do not want processed. YoDecor does not use AI to make decisions that produce legal or similarly significant effects about you.
5. Recipients and providers
Data is shared only where needed to operate the service:
- Hetzner ↗ for hosting and storage.
- Stripe ↗ for checkout, payments and fraud prevention.
- Google ↗ when you choose Google sign-in.
- Modal ↗ or OpenAI ↗ for requested AI image processing.
- Telegram ↗ for forwarding feedback to the operator’s private support channel. Avoid including sensitive information in feedback.
Providers may act as processors or independent controllers for parts of their services, as described in their policies.
6. International transfers
Some providers may process data outside the European Economic Area. Where required, transfers are covered by an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism used by the relevant provider. Their linked privacy notices describe their locations and safeguards.
7. How long data is kept
- Authentication sessions: up to 30 days; password-reset links: 30 minutes.
- Consent preference: 6 months; optional visitor cookie: 12 months; analytics events: up to 13 months.
- Feedback: normally up to 24 months.
- Accounts, uploads, generated results and project history: while the account is active, until deletion is requested, or as needed to provide the service.
- Payment and credit records: for the period required by accounting, tax, fraud-prevention and legal-claims obligations.
Backups and records subject to a legal hold may remain for a limited additional period.
8. Your GDPR rights
Subject to applicable conditions, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent at any time without affecting earlier lawful processing.
Requests are free of charge and are normally answered within one month. You may also complain to the Bulgarian Commission for Personal Data Protection ↗ or the supervisory authority where you live or work.
9. Cookies and choices
Essential cookies support sign-in, security and your consent preference. Optional first-party analytics starts only after you select Accept analytics. You can change your choice at any time using the Cookie settings button.
10. Security and updates
YoDecor uses access controls, encrypted transport, password hashing, restricted administration and service-provider safeguards. No internet service is completely risk-free, so please use a strong unique password.
This notice may be updated when the service or legal requirements change. Material changes will be highlighted on the site, and the date at the top will be revised.
This notice provides transparent information about YoDecor’s current data practices. It is not a substitute for legal advice tailored to the operator’s final legal entity, establishment and business operations.