Privacy Policy
Last updated
This policy explains what personal data we, SolarAI Pte. Ltd., collect through Andre, our AI rendering platform for architects and interior designers, how we use it, who we share it with and the choices you have. It takes effect on the date it was last updated, shown above. The short version below gives the main points; it doesn't replace the full policy that follows it. This policy is a notice, not a contract: the agreement between us is set out in our Terms of Service, and signing up or signing in doesn't mean you consent to everything in this policy. We rely on the legal grounds it sets out, and where we need your express consent for something, we'll ask for it separately.
The short version
- We collect what you give us, such as your account details, projects, uploads and prompts, and what the app records while you use it.
- In most of the app, including its sign-in and sign-up screens, PostHog session replay records what's on your screen, your prompts and renders included. Our public website (the home page, this policy and our Terms of Service) uses no analytics at all.
- To make a render, we send your prompt and pictures to the AI provider behind the engine you choose, which handles them under its own terms. SolarAI does not use your content to train AI models.
- If you sign in with Google, we receive your name, email address, profile picture and Google account ID. We use them to sign you in, show who you are to your team and contact you about your account. We never sell them, use them for ads or share them with AI providers.
- Uploads and renders are stored at hard-to-guess links that anyone with the link can open. Photos keep their embedded metadata, such as location, unless you remove it before uploading.
- We don't sell your personal data or use it for advertising.
- Deleting your account removes your personal projects and profile, but team work stays with the team and some records are kept. It doesn't cancel your own paid plan, so cancel that first.
- You can change your profile and delete your account yourself in Settings. To see, correct or delete anything else, or to ask us anything, email hello@andreai.design.
1. Who we are
Andre is an AI rendering platform for architects and interior designers. It is run by SolarAI Pte. Ltd., a company registered in Singapore. In this policy, “SolarAI”, “we” and “us” mean SolarAI Pte. Ltd., and “you” means anyone whose personal data we handle through Andre.
SolarAI decides how and why the personal data described here is used, which makes us its “controller” in data protection terms. You can reach our Data Protection Officer under Singapore's Personal Data Protection Act at hello@andreai.design.
This policy covers:
- our public website: the home page you see at andreai.design when you're signed out, this Privacy Policy and our Terms of Service;
- the Andre app: every other page on andreai.design, including the sign-in and sign-up screens, invitation pages and the 360 share links you create;
- the Andre plugin for SketchUp;
- the files we serve;
- the emails we send.
It also covers people who don't have an Andre account but whose data we hold, such as someone invited by email, a client who opens a 360 link, or a person whose details appear in a project.
2. What we collect
We collect what you give us, what the app records while you use it, and a little from other sources. Here it is, by source.
Your account and profile
- Your email address and, if you sign up with one, your password. The password goes to our sign-in provider, Supabase, which stores it only in hashed form.
- Your display name, which starts out as your email address until you change it, and anything else you add to your profile: firm, phone number, bio, location and photo.
- Your settings, such as language, time zone, notification choices and canvas controls.
- Your two-factor authentication set-up, if you turn it on.
- Your answers to the welcome questions we ask when you join (your profession and how you heard about Andre). These go to our analytics tool, not to your profile.
- If you add other accounts to switch between on the same device, a cookie in your browser holds their email addresses and sign-in tokens (see Cookies).
Google sign-in. If you sign in with Google, or connect Google to your account, we receive your name, email address, profile picture and Google account ID. See Google user data.
Workspaces, projects and invitations
- Workspaces you create or join: their name and logo, who owns them, your role, any credit limit set for you, and whether you hold an editor seat.
- Invitations. To invite someone who isn't on Andre yet, a workspace member gives us that person's email address. We store it with the invitation and email them a link, which stops working after 7 days.
- Project membership and activity: who joined or left, and who commented, edited, uploaded or rendered, with the credits each render used.
- Live presence. While you're on a canvas with others, your name, colour and cursor position pass to them through our collaboration server. We don't save them.
Your content. This is the work you put into Andre and what Andre makes from it. It can include other people's personal data, such as a client's name, a site address or a face in a photo. Please add it only if you're allowed to.
- Projects: name, description, type, client name, location and thumbnail.
- Design Brief: the brief, scope, aesthetic, client preferences and needs you write, and the documents and pictures you attach.
- Canvases: the steps you build, your prompts and settings, text notes, and links to pictures and videos.
- Uploads: pictures and videos you add. Photos keep their embedded metadata (see Files, links and photo metadata).
- SketchUp captures: viewport images, the model's title and scene names, and when you captured them. The plugin also sends its version, your SketchUp version and operating system, and the model's file path on your computer, which can include your computer's user name. We don't store or use the file path.
- Renders and videos that Andre makes, with the prompt, engine, settings, size and credits of each.
- Andre AI chats, where Andre AI is available to you: your messages, Andre AI's replies, the project or canvas the chat started on, and usage. Other members of your workspace can't see your chats. They do go to Google to produce Andre AI's replies, and session replay can record them on your screen.
- Dictation. When you speak instead of typing, your recording (up to about 2 minutes) is sent to OpenAI to be turned into text. We don't store the recording. The text comes back into your message box, where session replay can capture it like anything else on your screen. If you send it, we keep it like anything else you type.
- Comments, replies, mentions, reactions and text notes on canvases, and the notifications they create.
- 360 share links you create, and the panorama images they show.
- Your presets, templates, favourites, archived projects and personal categories.
Billing and credits
- Card and billing details. You enter these on Stripe's own checkout and billing pages, and your full card number never reaches our servers. When Stripe tells our servers about a payment, its message can include billing details, such as your name and billing country or postcode, and the card's brand, last four digits and expiry date. We don't store these details.
- From Stripe, we keep your customer and subscription IDs and your subscription status. We send Stripe your account email address, your account or workspace ID and, for a workspace plan, the workspace name.
- If a payment fails or a card is about to expire, we email the person who pays. These emails can show the card's last four digits and expiry date, which we read from Stripe at the time and don't store.
- A credit ledger: credits granted, bought, spent and refunded, with the engine, project, render and time of each.
Device, usage and log data
- Sign-in sessions: the IP address and browser of each device signed in to your account, and when it was last active. You can see them in Settings → Session.
- Rate limits. To stop abuse, we use IP addresses and email addresses to limit how often some actions can be tried, such as sign-ups, password-reset emails and adding accounts. These records are deleted after 7 days without activity.
- Request logs. Our hosting providers log the requests your browser makes: IP address, browser details and the page or file requested.
- Audit records of important events, such as billing changes, membership changes and deletions. They hold account IDs and amounts, not email addresses. Changes our staff make through our admin tools are recorded too.
Analytics and session replay, in the app only. In the app, PostHog records page views, product events and recordings of your screen, your prompts and renders included. Our public website uses no analytics at all. The details are in Analytics and session replay.
Error reports. When something breaks, our website, the app, our web servers and our collaboration server send an error report to Sentry. A report holds technical details of the error, your browser type and, if you're signed in, your Andre account ID. Reports from the collaboration server also name the canvas. Before a report leaves our website, the app or our web servers, we strip out what was sent with the request, your cookies, your IP address, most other request details and anything that looks like an email address. Every page of our website and the app also sends Sentry a short status message when it opens, holding a random ID, your browser type and whether the page has run into an error, so we can see how often Andre fails. It sets no cookie.
Emails
- We send service emails only: invitations and sharing notices, payment and card reminders, and account emails such as password resets and email-address changes. We don't send marketing emails.
- Invitation, sharing and billing emails go out through Resend. Account emails go out through our sign-in service.
- If you email us, we keep the conversation so we can help you.
3. Google user data
This section explains how we access, use, store and share the data we receive from Google when you use Google sign-in.
What we receive. When you choose “Sign in with Google”, or press Connect next to Google in Settings → Access, Google shares the basic profile data covered by its sign-in scopes (openid, email and profile):
- your name;
- your email address;
- your profile picture (a link to the image, which Google hosts);
- your Google account identifier.
We don't ask for access to your Gmail, Google Drive, Calendar, contacts or any other Google data.
How we use it
- To create your Andre account and sign you in. If an Andre account already uses the same email address, Google is connected to that account, so you keep one account.
- To show who you are to the people you work with. Your profile picture appears beside your work and comments, and your Google name appears beside your cursor when you're on a canvas together. Your display name starts out as your email address, so collaborators see that until you change it in your profile.
- Your email address becomes your account email. We use it for account and service emails, and if you buy a plan, Stripe uses it for your billing record. The owner, admins and managers of any workspace you belong to can see it.
- To match you to invitations sent to your email address, and to protect your account, for example by limiting how often some actions can be tried with the same email address.
What we don't do. We don't sell Google user data. We don't use it for advertising. We don't share it with AI providers, and we don't use it to train AI models. Text that you or your collaborators write can still name you, such as an @-mention in a project's notes, and that text reaches an AI provider when Andre AI reads it (see AI processing).
Where it's stored and who else receives it
- It's stored by our database and sign-in provider, Supabase, in Singapore.
- While you're on a canvas with others, your name passes through our real-time collaboration server, which DigitalOcean runs for us in Singapore, so they can see it beside your cursor. It isn't saved there.
- Our hosting provider, Vercel, handles your Google details as they pass through our website and app.
- Your email address goes to Stripe if you buy a plan, and to our email providers when we email you.
- Our analytics and error-reporting tools identify you only by your Andre account ID. Session replay records the app's screen, though, so a recording can show your name, email address or picture wherever the app displays them (see Analytics and session replay).
- Your profile picture loads from Google's servers whenever it's shown, so Google can see that it was requested.
How long we keep it, and how to remove it
- We keep it until you delete your Andre account. Disconnecting Google stops Google sign-in, but the details Google already sent, such as your name and profile picture, stay with your account until you delete it. You can change the name and picture other people see in your profile.
- To disconnect Google, go to Settings → Access and choose Disconnect. You can do this only if you have another way to sign in, such as a password; the app won't remove your only sign-in method.
- To remove everything, delete your account (see Deleting your account).
- You can also remove Andre's access in your Google Account, at myaccount.google.com/connections.
Our use of information we receive from Google APIs follows the Google API Services User Data Policy. Before we use Google user data in any new way, we'll update this policy and ask for your consent.
4. Analytics and session replay
Our public website uses no analytics at all. When you open the home page you see when signed out, this Privacy Policy or our Terms of Service, they load no analytics, session replay or advertising tools and set no analytics cookies. Like every page of Andre, they do send Sentry, our error-reporting tool, a short status message when they open, and a report if something breaks (see What we collect).
The app uses PostHog. Inside the Andre app, including its sign-in and sign-up screens, we use PostHog to learn how people use Andre and to find and fix problems. It does three things:
- Session replay records what's on your screen. It captures each page as you see it and what you do there: clicks, typing, scrolling and moving between pages. That includes the text you type, such as prompts, and the pictures on screen, such as your uploads and renders. It also captures messages the app writes to your browser's console. We keep recordings of every session that lasts 5 seconds or more.
- Product events. We record page views, when you leave a page, page-speed measurements, and actions such as signing up, creating a project, opening a canvas, finishing a render or buying credits. The details we attach to these actions are things like counts, amounts and your plan, and a filter drops any detail labelled as an email address, prompt, link, name, phone number or address.
- An analytics cookie. It gives your browser a random ID so your visits can be connected (see Cookies).
What isn't recorded. Session replay never records what you type into password fields, or the few items we mark as secret, such as the code shown when you set up two-factor authentication and a newly created plugin token. It doesn't record network traffic. There's no session replay on invitation pages or in the 360 share viewer, although those pages still send page views and other events. Our staff admin portal sends nothing to PostHog.
How you're identified. Before you sign in, the random ID in the cookie connects your visits. Once you sign in, PostHog files your analytics and recordings under your Andre account ID, not your name or email address, though a recording can still show them on screen. When you sign out, PostHog stops connecting your activity to your account. PostHog also receives your browser and device details and your IP address.
Who sees it. Our team uses the recordings and events to understand how Andre is used, find bugs and improve the product. PostHog stores them for us in the United States for a limited period.
Your choices. There's no setting in the app to turn analytics or session replay off. You can ask us to delete the analytics data and recordings linked to your account by emailing hello@andreai.design. You can also object to this use of your data. The app has no way to switch analytics off for one person, so if you object, tell us and we'll explain what we can do, including deleting what's linked to your account.
5. How we use data, and our legal bases
We use personal data to provide Andre, keep it safe and make it better. If you're in the European Economic Area (EEA), the UK or Switzerland, data protection law asks us to name a legal basis for each use:
| What we do | Data we use | Legal basis |
|---|---|---|
| Run Andre for you: your account, sign-in, projects, canvases, rendering, collaboration, Andre AI, dictation and the SketchUp plugin | Account, profile, workspace and content data; device data | Contract: we need it to provide the service you signed up for, under our Terms of Service. For people without an account, such as a client opening a 360 link: legitimate interests (delivering what our user shared with them) |
| Send your inputs to the AI provider behind the engine you choose, to produce your result | The content of that request | Contract |
| Take payments, run plans and credits, and give credits back for failed runs | Billing data, the credit ledger, your account email | Contract; legal obligation for financial records |
| Send service emails: invitations, sharing notices, payment reminders and account emails | Email addresses; names of people, workspaces and projects | Contract. For someone invited by another person: legitimate interests (delivering the invitation that person asked us to send) |
| Answer your emails and requests, including requests about your data | Your messages, your contact details and what you send us | Contract; legitimate interests (helping people who contact us); legal obligation for requests about your data |
| Keep Andre secure: sign-in sessions, rate limits, a firewall, audit records and abuse checks | IP addresses, email addresses, device and log data, account IDs | Legitimate interests (protecting our users and the service); legal obligation where it applies |
| Understand and improve Andre: product analytics and session replay in the app | Product events, screen recordings, your answers to our welcome questions, device data | Legitimate interests (learning how Andre is used and fixing what doesn't work) |
| Find and fix errors | Error reports | Legitimate interests (keeping Andre working) |
| Build and test new versions of Andre | The data in our live database, which our development and test versions of the app use | Legitimate interests (making sure changes work before they reach you) |
| Meet legal duties, answer lawful requests and enforce our Terms of Service | Whatever the matter needs | Legal obligation; legitimate interests |
| Pass Andre to a new owner if SolarAI merges, is bought or sells its business | The personal data Andre holds | Legitimate interests (keeping Andre running under its new owner) |
| Anything we ask your permission for | What we describe when we ask | Consent, which you can withdraw at any time |
Where we rely on legitimate interests, you can object (see Your rights).
To have an account, you must give us an email address or sign in with Google. Everything else in your profile is optional. A feature can't work without the data it needs, such as the pictures for a render.
We don't let automated systems alone make decisions that have a legal or similarly serious effect on you. Automated checks do limit how often some actions can be tried, and alert our team to unusual activity.
6. AI processing
Andre makes images and videos with AI engines that other companies run. When you run a step, we send what's needed to produce your result to the company that runs the engine you chose:
- Rendering, editing and selecting parts of a picture: your prompt and settings, and the pictures or videos you connected, sometimes as a link to the file. Depending on the engine, this goes to Google (Gemini API), OpenAI, Replicate, fal.ai or Topaz Labs.
- “Prompt Expert” and “Brief Parser” steps: the text you give them goes to Anthropic.
- Andre AI: your conversation goes to Google's Gemini API, with what Andre AI reads to answer you: project names, addresses and notes (including any @-mentions of people in them), the words on a canvas, and the prompts of past renders.
- Dictation: your voice recording goes to OpenAI to be turned into text.
We send content, not your identity: these requests don't carry your account ID, name or email address as details about you. Content can still contain personal data, such as a face in a photo, a client's name or address in a project's notes, or a colleague's name in an @-mention.
Some engines that Replicate and fal.ai run were built by other AI companies, such as ByteDance, Alibaba, Kuaishou, Tencent and Black Forest Labs. Replicate's and fal.ai's terms apply to what we send them, and for some of these engines they may pass your request on to the company that built it, which then handles it under its own terms.
SolarAI does not use your content to train AI models.
The providers handle what we send under their own business terms. In general, they use it to produce the result and may keep it for a limited time to detect abuse. Some may also use de-identified or aggregated data to improve their services. You can read their terms: OpenAI, Google Gemini API, Anthropic, Replicate and fal.ai.
The results come back into your project and are stored like the rest of your content.
8. Files, links and photo metadata
Most files open for anyone with the link. Pictures and videos you upload, images from the SketchUp plugin, and the renders and videos Andre makes are stored with Cloudflare. They're served from cdn.andreai.design, and also from Cloudflare's own address for the same storage. Each file has a long, random web address that's hard to guess. We don't publish these addresses, but anyone who has one can open the file without signing in. That's how your collaborators, and the AI providers working on your requests, load your files. Profile photos you upload, and small thumbnails of renders and videos, are stored by Supabase and also open for anyone who has their address. A Google profile picture stays on Google's servers (see Google user data).
Treat file links like passwords. If you paste one into an email or chat, or someone you shared it with passes it on, whoever receives it can open the file.
360 share links work for anyone who has them until you revoke them in Settings → Shared links, or delete the project or canvas they belong to.
Removing a picture from a canvas doesn't delete it. Pictures, videos and SketchUp captures you add stay at their addresses until their project is deleted, even if you remove them from the canvas or delete the canvas. A profile photo you replace stays at its old address until you delete your account.
Deleted files. When a project is deleted, we remove its uploads and the full-size files of its renders from storage, unless the same file is still used elsewhere in Andre, such as in a copy of the project. A render's files are also removed when the person who made it deletes it, in History or on its project's Summary page. The small thumbnails Supabase keeps of renders and videos aren't removed at the same time; email us and we'll delete them. Removal can occasionally fail; if you find a deleted file still online, tell us. Files are served with long cache times, so copies can stay for a while in browsers and network caches that already fetched them.
Design Brief attachments are private. They're kept in separate, private storage. Each time you open one, we check that you can open the project and give you a link that works for 60 seconds.
Photos can carry hidden details. Photos and videos often include metadata, such as the camera used, when the picture was taken and sometimes its GPS location. We store uploads as they arrive, so that metadata stays in the file, and anyone with the file's link can read it. If you don't want to share it, remove it before you upload; most phones and photo apps can. A picture we have to rotate to stand upright is re-saved without its metadata, but don't rely on that.
9. International transfers
SolarAI is based in Singapore, and our database, app servers and collaboration server run in Singapore. Some providers handle data elsewhere: analytics, error reports, AI processing and email mainly in the United States, and payments in the United States and other countries. For some engines, the company that built the engine may handle your request in another country. Cloudflare and Vercel deliver files and pages through worldwide networks. The table in Who we share data with shows where each provider handles data.
When we send personal data out of Singapore, we rely mainly on each provider's contract with us to make sure it protects the data to a standard comparable to Singapore's Personal Data Protection Act. For data from the EEA, the UK or Switzerland, we rely on our providers' data processing terms, which include the European Commission's Standard Contractual Clauses, with the additions UK and Swiss law require.
You can ask us for a copy of the safeguards that cover your data by emailing hello@andreai.design. The European Commission publishes its Standard Contractual Clauses at eur-lex.europa.eu.
10. How long we keep data
We keep personal data only as long as we need it for the purposes in this policy. Then we delete it or make it anonymous.
| Data | How long we keep it |
|---|---|
| Account and profile | Until you delete your account. That includes profile photos you've since replaced. |
| Projects, canvases, renders and comments | Until you, or the workspace that owns them, delete them. They don't expire on a timer. |
| Uploads and SketchUp captures | Until their project is deleted. Removing one from a canvas doesn't delete it. |
| Small thumbnails of renders and videos | Not deleted when the render, its project or your account is deleted. Email us and we'll remove them. |
| Project activity feed | As long as the project exists. If you delete your account, your name is removed from it. |
| Andre AI chats | Until you delete the chat or your account |
| Dictation recordings | We don't keep them. OpenAI processes them to return the text and, under its terms, may keep them for a limited time to check for abuse. |
| Design Brief attachments | As long as the project exists. Uploads that never finish are cleared out daily. |
| Invitations, including invitee email addresses | The link works for 7 days. We keep the invitation, with the email address it went to, for as long as the workspace exists, even if that person later deletes their account. |
| 360 share links | Until you revoke them, or delete the project or canvas |
| SketchUp plugin tokens | A token stops working 365 days after you create it, or when you revoke it. We keep a record of its name and dates until you delete your account. |
| Sign-in sessions (IP address and browser) | Until you sign out, the session expires, or you end it in Settings → Session |
| Rate-limit records (IP addresses and email addresses) | Deleted after 7 days without activity |
| Credit ledger and billing records | While your account exists. Records of credits spent from a workspace's pool stay with the workspace, without your account ID. Stripe keeps its own payment records. |
| Audit records | While your account exists. A record that an account was deleted, and records of staff actions, are kept permanently. |
| Analytics, session recordings and error reports | For a limited period, at PostHog and Sentry |
| Hosting logs, email delivery logs and backups | For a limited period set by each provider |
11. Deleting your account
You can delete your account in Settings → Delete account. Deletion is permanent.
Cancel your own paid plan first. Deleting your account doesn't cancel your personal subscription. Cancel it in Settings → Plan & Billing, under “Manage subscription”, before you delete. If you've already deleted your account and are still being charged, email us: we'll cancel the subscription and refund every charge made after you deleted your account, as our Terms of Service say. A workspace's plan belongs to the workspace and isn't affected when a member deletes their account.
If you own a workspace, the app won't delete your account while you still own it. Email us and we'll work out with you what happens to the workspace.
What deletion removes
- your account, profile, profile photo, settings and credit balance;
- your sign-in details, including the connection to Google;
- your personal projects, with their canvases, uploads and renders;
- your Andre AI chats;
- your comments, wherever you left them, with the replies other people left under them, and the text notes and reactions you added to canvases;
- your presets, templates, favourites and personal categories;
- your workspace and project memberships.
Once your account is gone, we remove its full-size files from storage, unless a file is still used somewhere else, such as in a team project. Small thumbnails of your renders and videos aren't removed; email us and we'll delete them. Removal can occasionally fail. If you find one of your files still online, tell us and we'll remove it.
What deletion keeps
- Team work. Projects in a workspace stay with that workspace, and team projects you owned pass to the workspace owner. Canvases, renders, brief edits and attachments you made in them stay, no longer linked to you, and your name is removed from the project's activity feed.
- Shared links and invitations. 360 share links you created in team projects keep working until someone who can edit the project revokes them, or the project or canvas is deleted. Invitations sent to your email address stay in the inviting workspace's records.
- Workspace spending records. Credits you spent from a workspace's pool stay in its records without your account ID, so its balance and history stay correct.
- Audit records. A record that your account was deleted, holding your former account ID, is kept permanently. Records of actions our staff took on your account are kept permanently without your account ID, although they can still contain the details that were changed.
- Copies held by other companies. Stripe keeps your customer record and payment history. Analytics data and recordings, error reports, email delivery logs, hosting logs and backups are kept for their limited periods. If you'd like your analytics data and recordings deleted sooner, ask us.
12. Security
Our protections include:
- HTTPS for the whole website and app, with browsers told to always use it. The SketchUp plugin connects over HTTPS too.
- Database rules that limit what each signed-in person can read or change. Some data, such as Andre AI chats, can be reached only by our servers.
- Passwords handled by our sign-in provider and stored only in hashed form.
- Optional two-factor authentication with an authenticator app, in Settings → Password.
- A list of the devices signed in to your account, any of which you can sign out, in Settings → Session.
- Rate limits on sign-up, password-reset emails, adding accounts, uploads, rendering, dictation and Andre AI.
- Card details entered only on Stripe's pages, so your full card number never reaches our servers.
- Plugin tokens and 360 share-link tokens stored only in hashed form.
- Design Brief attachments kept in private storage and opened through 60-second links, after a check that you can open the project.
- A staff admin portal kept apart from the app, with its own 12-hour sessions and no analytics, and a permanent log of the changes staff make through it.
- Error reports from our website, the app and our web servers have request contents, cookies, IP addresses and anything that looks like an email address removed before they're sent. They keep your account ID so we can trace the problem.
No system is completely secure, and some protections are in your hands. Use a strong password, turn on two-factor authentication in Settings → Password, share file and 360 links only with people you trust, and revoke plugin tokens you no longer use in Settings → SketchUp. The plugin keeps its token unencrypted in SketchUp's settings on your computer, so revoke it if a computer is lost or shared.
If a data breach puts your personal data at risk, we'll tell you and the authorities, such as Singapore's Personal Data Protection Commission, whenever the law requires it.
13. Your rights and choices
You can do a lot yourself:
- edit your profile in Settings;
- disconnect Google in Settings → Access;
- see and end sign-in sessions in Settings → Session;
- revoke 360 share links in Settings → Shared links;
- revoke plugin tokens in Settings → SketchUp;
- delete chats in Andre AI;
- delete your account in Settings → Delete account.
For anything else, email hello@andreai.design, ideally from the address on your account. You can ask us to:
- give you a copy of your personal data, and tell you how we've used and shared it;
- correct it;
- delete it;
- stop or limit a use of it, or object to it;
- give it to you in a portable format;
- withdraw consent you've given.
We may need to confirm who you are first. We'll reply within one month, unless the law where you live sets a different limit: 30 days in Singapore and 45 days in California. If we need longer, we'll tell you why. If we have to keep some data, for example for legal reasons, we'll explain. Using your rights won't affect how we treat you.
Depending on where you live, you may have more rights: see EEA, UK and Switzerland, Singapore and California.
If you live somewhere else whose law gives you other rights over your personal data, email us and we'll honour them as that law requires.
14. EEA, UK and Switzerland
If you're in the EEA, the UK or Switzerland, SolarAI Pte. Ltd. is the controller of your personal data. Under the GDPR, the UK GDPR and Swiss data protection law you have the right to:
- access your personal data;
- have it corrected;
- have it erased;
- restrict how we use it;
- receive it in a portable format;
- object to uses based on legitimate interests, such as analytics and session replay;
- withdraw consent at any time, without affecting what we did before;
- complain to a data protection authority: in the UK, the Information Commissioner's Office; in the EEA, the authority where you live or work; in Switzerland, the Federal Data Protection and Information Commissioner.
We reply within one month. For complex requests this can extend by up to two more months, and we'll tell you if it does. Our legal bases are in How we use data, and our transfer safeguards in International transfers.
15. Singapore
We handle personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA).
- Consent, and when we don't need it. We collect, use and share personal data with your consent, or where the PDPA lets us do so without it. When you give us data so that you can use a feature, the law treats that as your consent to use it for that feature. Where we act without consent, we rely mainly on the PDPA's legitimate interests exception: to keep Andre secure and prevent abuse (sign-in records, rate limits and audit records), and to understand and improve Andre through analytics and session replay. You can ask us about this at hello@andreai.design.
- Withdrawing consent. Email us. We'll explain what withdrawing means for you, for example that we may no longer be able to provide some or all of Andre, and then act on it within a reasonable time.
- Access. You can ask for the personal data we hold about you, and how it has been used or shared in the past year.
- Correction. You can ask us to correct errors or gaps. You can fix most profile details yourself in Settings.
- Timing. We reply to access and correction requests within 30 days, or tell you within that time when we will.
- Data Protection Officer. Email hello@andreai.design.
- Complaints. Please contact us first. You can also contact the Personal Data Protection Commission.
16. California notice
This section is for California residents. It adds the details the California Consumer Privacy Act (CCPA) asks for to the rest of this policy.
What we collect and who receives it. In the past 12 months we collected these categories of personal information, from the sources and for the purposes described above:
| Category | Examples | Disclosed for business purposes to |
|---|---|---|
| Identifiers | Name, email address, account ID, IP address, cookie IDs | Our hosting, database, email, analytics, error-reporting and payment providers |
| Customer records | Name, email address, phone number if you add it, payment details (held by Stripe) | Stripe; our database provider |
| Commercial information | Plans, purchases and credit history | Stripe; our database provider |
| Internet or other network activity | Page views, product events, screen recordings in the app, sign-in sessions, request logs | Our analytics, error-reporting and hosting providers |
| Geolocation | A location you type into your profile or a project; GPS data inside photos you upload | Our database and storage providers; AI providers when a photo is used in a render, or when Andre AI reads a project's address |
| Audio, electronic and visual information | Dictation recordings, photos and videos you upload, renders, screen recordings | AI providers; our storage and analytics providers |
| Professional information | Firm, profession, bio | Our database and analytics providers |
| Sensitive personal information | Your account login (email address and password); precise location, only if it's inside photos you upload | Our sign-in and storage providers; AI providers when a photo with location data is used in a render |
We use sensitive personal information only to provide Andre and keep it secure, not to infer things about you. We don't read or use location data inside photos.
No sale or sharing. We don't sell personal information or share it for cross-context behavioural advertising, and we haven't in the past 12 months. That includes the personal information of anyone under 16.
How long we keep it. See How long we keep data.
Your rights. You can ask us what personal information we've collected about you, and to delete or correct it. Because we don't sell or share personal information, there's nothing to opt out of. We won't treat you differently for using these rights.
How to ask. Email hello@andreai.design. We'll check your identity by matching your request to your account, for example by asking you to write from your account's email address. An authorised agent can ask for you with your signed permission, and we may confirm with you directly. We'll respond within 45 days, or tell you if we need up to 45 more.
18. Children
Andre is for people aged 18 and over, as our Terms of Service require. It isn't meant for children, and we don't knowingly collect personal data from anyone under 18. If you think someone under 18 has given us personal data, email us and we'll delete it.
19. Changes to this policy
We'll update this policy when Andre or the law changes, and change the date at the top each time. If a change significantly affects how we use your personal data, we'll tell you by email or in the app before it takes effect. Before we use Google user data in any new way, we'll ask for your consent.
20. Contact us
SolarAI Pte. Ltd., Singapore
Email hello@andreai.design with privacy questions or requests about your data. The same address reaches our Data Protection Officer under Singapore's Personal Data Protection Act. If your question is about your account, please write from the email address on that account. Questions about our Terms of Service go to the same address.
If you're not happy with our answer, you can complain to a data protection authority, such as Singapore's Personal Data Protection Commission or the authority where you live.