YODECOROpen the studio ↗

PRIVACY & GDPR

Your room. Your data. Your rights.

This notice explains what personal data YoDecor uses to provide its AI room-design service, why it is used, who may receive it and the choices available to you.Last updated: 11 September 2026

Optional Microsoft Clarity — updated 15 September 2026

Choosing Accept all in the cookie banner enables Microsoft Clarity together with YoDecor’s own visit counts; choosing Essential only enables neither. The banner names Clarity before you choose. This service helps us understand clicks, scrolling and usability through heatmaps and masked session recordings on our public pages, including the homepage, the Studio and the design guides.

It does not run on administration pages, shared project pages, password-reset pages, or on any address carrying a private value such as a referral code, invitation, token or email address.

Page content is explicitly masked wherever Clarity runs. YoDecor does not send uploaded room photos, generated designs, prompts, project names, account identifiers or email addresses to Clarity. What is recorded is interaction: where a pointer moves, what is clicked, how far a page is scrolled, and coarse product events such as opening Studio, selecting a workflow, completing an upload, starting or completing a render, registration and checkout progress. These events may include non-identifying categories such as language, workflow, input type, result status and whether the account is a test, registered or paid account.

Clarity is provided by Microsoft. With your consent, Microsoft receives interaction and technical data such as the page URL, browser/device information, network IP address and a pseudonymous session identifier. Advertising storage consent is denied.

The essential yodecor_clarity_consent_v1 cookie remembers this separate choice for six months. When enabled, Clarity may use _clck (one year) and _clsk (one day) for analytics. Microsoft applies its own retention periods to recordings and heatmaps; see its linked documentation.

To stop Clarity, open Cookie settings and choose Essential only. If Clarity is running, the page reloads to unload it and its YoDecor-domain cookies are cleared. Withdrawal stops future collection; it does not automatically erase recordings already held by Microsoft. Contact us through the privacy contact for a deletion request.

Microsoft Privacy Statement · Clarity retention

1. Controller and contact

YoDecor is the service name of the operator responsible for the processing described in this notice.

For privacy questions or to exercise a data-protection right, email teomihsav76@gmail.com. Please write “Privacy request” in the subject line. We may request reasonable proof of identity before disclosing or deleting account data.

2. Data we collect

  • Account data: email address, hashed password credentials or Google account identifier, account creation date, credit balance and sign-in sessions.
  • Referral data: a personal invitation code, the relationship between an inviter and a newly registered account, and the resulting credit reward. The public invitation link does not contain an email address.
  • Room-design content: room and furniture images, optional dimensions, style choices, prompts derived from your choices, generated images and saved projects.
  • Client review data: approval or change request, optional name or initials, revision note and a random browser identifier when someone responds through a creator-approved shared design link.
  • Private project invitations: the invited email address, permission level, invitation and expiry dates, last-opened date, and any approval or revision response submitted through the private link.
  • Payment records: purchased plan, credit amount, payment status and Stripe transaction references. YoDecor does not store complete card details.
  • Support and feedback: name, email address, message, page and limited technical information supplied with a feedback request.
  • Technical and usage data: locale, approximate country derived from browser or delivery headers, timezone, last activity and—only with consent—a random first-party visitor identifier, pages opened, campaign label and the referring website origin. Analytics records do not store your IP address or the full referring page path, although hosting and security systems may process IP addresses transiently.

3. Why and on what basis

PurposeLegal basis
Create accounts, keep sessions, provide credits, save projects and generate requested designs.Performance of the service contract (GDPR Art. 6(1)(b)).
Send and manage private project invitations and record requested review decisions.Performance of the requested collaboration service and legitimate interests in secure project delivery (Art. 6(1)(b) and (f)).
Attribute invitations, grant referral credits and prevent repeated or self-referral rewards.Performance of the referral offer and legitimate interests in preventing abuse (Art. 6(1)(b) and (f)).
Process payments, refunds, fraud controls and required financial records.Contract, legal obligations and legitimate interests (Art. 6(1)(b), (c) and (f)).
Protect YoDecor, prevent abuse, diagnose failures and answer support requests.Legitimate interests in operating a secure and reliable service (Art. 6(1)(f)).
Measure anonymous visits and improve the service.Your consent (Art. 6(1)(a)); analytics remains off when you select Essential only.

4. AI image processing

When you request a visualization, the images and design instructions needed for that request are sent to the configured AI image processor—currently Modal infrastructure or OpenAI, depending on service configuration. Processing is performed to create the output you requested.

Do not upload images containing people, identity documents, sensitive information, copyrighted material you cannot use, or details you do not want processed. YoDecor does not use AI to make decisions that produce legal or similarly significant effects about you.

5. Recipients and providers

Data is shared only where needed to operate the service:

  • Hetzner ↗ for hosting and storage.
  • Stripe ↗ for checkout, payments and fraud prevention.
  • Google ↗ when you choose Google sign-in.
  • Modal ↗ or OpenAI ↗ for requested AI image processing.
  • Telegram ↗ for forwarding feedback and refund requests to the operator’s private support channel, and for alerting the operator when a creator voluntarily submits a public before-and-after project for community-gallery review. Avoid including sensitive information in support messages.

Providers may act as processors or independent controllers for parts of their services, as described in their policies.

6. International transfers

Some providers may process data outside the European Economic Area. Where required, transfers are covered by an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism used by the relevant provider. Their linked privacy notices describe their locations and safeguards.

7. How long data is kept

  • Authentication sessions: up to 30 days; password-reset links: 30 minutes.
  • Consent preference: 6 months; optional visitor cookie and client-review browser identifier: 12 months; analytics events: up to 13 months.
  • A pending referral invitation code stored in the invitee’s browser: up to 30 days. Referral and awarded-credit records are retained with the related accounts for accounting and abuse prevention.
  • Private project links: 90 days unless revoked sooner; invitation and response records are normally removed with the related project or account.
  • Support feedback and client review responses: normally up to 24 months.
  • Accounts, uploads, generated results and project history: while the account is active, until deletion is requested, or as needed to provide the service.
  • Payment and credit records: for the period required by accounting, tax, fraud-prevention and legal-claims obligations.

Backups and records subject to a legal hold may remain for a limited additional period.

8. Your GDPR rights

Subject to applicable conditions, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent at any time without affecting earlier lawful processing.

Requests are free of charge and are normally answered within one month. You may also complain to the Bulgarian Commission for Personal Data Protection ↗ or the supervisory authority where you live or work.

9. Cookies and choices

Essential cookies support sign-in, security and your consent preference. Optional first-party analytics starts only after you select Accept analytics. You can change your choice at any time using the Cookie settings button.

Read the full Cookie Policy.

10. Security and updates

YoDecor uses access controls, encrypted transport, password hashing, restricted administration and service-provider safeguards. No internet service is completely risk-free, so please use a strong unique password.

This notice may be updated when the service or legal requirements change. Material changes will be highlighted on the site, and the date at the top will be revised.

This notice provides transparent information about YoDecor’s current data practices. It is not a substitute for legal advice tailored to the operator’s final legal entity, establishment and business operations.

11. Optional public design links

Projects remain private by default. Creating a public link requires your explicit agreement. Only the finished result is shared unless you separately choose to include the original photo. Your email, name, design prompt, furniture reference and other projects are not included on the public page.

Anyone with the link can view, save or reshare the selected images. Public previews are resized and image metadata is removed. Search indexing is disabled unless you separately allow it; permission does not guarantee indexing.

A recipient may approve the concept or privately request a change. The response, optional name or initials and note are visible only to the project owner; they are not published on the shared page or community gallery. YoDecor uses a random essential browser identifier so the recipient can update the same response without creating an account. The project owner may receive an email notification.

If you separately request community-gallery review, YoDecor sends the operator a private moderation alert containing your account email, the project reference and its creator-approved public link. Gallery submissions are reviewed before they can appear on the homepage, and you may withdraw sharing permission at any time.

Use Share result → Unpublish in your saved project to disable its public page and image links. Republishing creates a new link. Copies or social previews already saved by others cannot be recalled. Sharing choices and the time and version of your agreement are stored with the project. You can also contact us to report a shared design.

12. Private project invitations

A project owner may enter a client’s or colleague’s email address to send a private project invitation. Each recipient receives a separate random link with either view-only or review permission. The link is not indexed, expires after 90 days and can be revoked at any time by the project owner.

If a person signs in to YoDecor using the invited email address, the active project also appears in that account’s “Shared with me” workspace. Matching is case-insensitive and does not transfer project ownership. The same view-only or review permission, expiry and revocation controls continue to apply.

Recipients with review permission may approve the current design or request a change. The owner can see whether an invitation has been opened, the response and its date. YoDecor never displays the recipient’s email address on the invitation page.

Private links should not be forwarded. Anyone who obtains a valid link may use the assigned permission until it expires or is revoked. Contact YoDecor if you received an invitation unexpectedly or want the associated email and response data removed.

YODECOR

AI room design and furniture visualization for real homes.

Privacy & GDPRCookie policyTerms & refundsContact

Follow and review YoDecor

YouTube↗Instagram↗Facebook↗Trustpilot↗