Legal
Privacy Policy
Who We Are
Maquete is based in England and Wales. We operate the Maquete.ai platform, an AI-powered architectural rendering service. We are the data controller for personal data collected through the Service. You can reach us at contact@maquete.ai.
What Data We Collect
We collect the following categories of personal data: Account data — your name and email address provided at registration, or obtained via Google OAuth when you choose to sign in with Google. Usage data — information about how you interact with the Service, including pages visited, features used, and render activity. Technical data — your IP address, browser type, device information, and cookies. We do not collect payment card details directly — these are handled by our payment processor.
How We Use Your Data
We use your personal data to: provide and operate the Service; authenticate your identity and manage your account; communicate with you about your account, updates, and support; improve and develop the Service through anonymised usage analytics; comply with our legal obligations. We do not sell your personal data to third parties. We do not use your uploaded design files or renders to train AI models without your explicit consent.
Your Uploaded Content
Design files and images you upload are processed solely to generate your render output. Currently, rendered images are delivered directly to you for download and are not retained on our servers after delivery. In a future update, we plan to offer optional cloud render history — a feature that will allow you to retrieve past renders. This will be opt-in, clearly communicated in advance, and you will retain full control over your stored files including the ability to delete them at any time.
Legal Basis for Processing
Under UK GDPR, we process your personal data on the following legal bases: Contract — processing necessary to provide you with the Service you have signed up for. Legitimate interests — processing for service improvement and security, where this does not override your rights. Legal obligation — processing required to comply with applicable laws. Consent — where we ask for your agreement before processing, such as for optional communications.
Cookies
We use strictly necessary cookies to operate the Service, including session authentication cookies. We may use analytics cookies to understand how the Service is used, in which case we will request your consent. You can control cookies through your browser settings. Disabling strictly necessary cookies may affect your ability to use the Service.
Third-Party Services
We use a limited number of third-party services to operate Maquete.ai, including: Google OAuth for authentication (subject to Google's privacy policy); Resend for transactional email; a cloud database provider for account storage; and Google's Gemini API for AI image generation. Each provider is subject to appropriate data processing agreements. We ensure that any transfer of personal data outside the UK is done in compliance with UK GDPR requirements.
Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law. Currently, uploaded images and renders are not retained after delivery. When cloud render history is introduced, you will be able to delete stored renders at any time from your account.
Your Rights
Under UK GDPR, you have the right to: access the personal data we hold about you; correct inaccurate data; request erasure of your data ("right to be forgotten"); restrict or object to processing; receive your data in a portable format; withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at contact@maquete.ai. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission, access controls, and regular security reviews. However, no method of transmission over the internet is completely secure and we cannot guarantee absolute security.
Children
The Service is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice within the Service before they take effect. The date of the most recent revision appears at the top of this page.
Contact & Complaints
If you have any questions, requests, or concerns about this Privacy Policy or how we handle your data, please contact us at contact@maquete.ai. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk or 0303 123 1113.