Privacy Policy

We collect three kinds of information.

Information you give us.

• Account details — email address, and phone number if you add one. Authentication is handled by AWS Cognito; we never see or store your password.
• Content you upload — 3D scans of your space (GLB files), photos of furniture you want modelled, design names, and the furniture layouts you save.
• Support messages — the subject, message, category, and page URL you submit through the feedback form.

Information we collect automatically.

• Usage analytics via Google Analytics 4 — pages visited, approximate location derived from IP, device and browser type, and in-product events such as saving a design or starting a checkout.
• Technical logs — IP address and request metadata recorded by our hosting and API layer for security and debugging.

Information from payment processing. When you subscribe, Stripe collects and processes your card details directly. We never receive or store your full card number. We retain your Stripe customer ID, subscription status, and invoice history.

• To operate the product — render your space, store your designs, and load them when you return.
• To generate 3D furniture models from photos you submit, using the third-party services described below.
• To manage your subscription, process payments, and enforce plan limits.
• To respond to support requests you send us.
• To understand which features are used, so we can improve them.
• To detect, prevent, and investigate abuse, fraud, and security incidents.

We do not sell your personal information, and we do not use your uploaded scans or designs to train machine-learning models.

We share the minimum necessary with the following processors, each acting on our instructions:

• Amazon Web Services — hosting, authentication (Cognito), file storage (S3), and databases (DynamoDB). Your scans, designs, and account records live here, in the US East (Ohio) region.
• Stripe — payment processing and subscription billing.
• Anthropic — when you submit a furniture photo, it is analysed to extract the item's category, materials, and approximate dimensions.
• Meshy — converts your furniture photo into a 3D model.
• Google Analytics — product usage analytics. Only runs if you accept analytics cookies.

We may also disclose information where required by law, or to protect the rights, safety, and property of Layout or our users.

We use a small number of strictly necessary cookies and local storage entries to keep you signed in and to remember your cookie choice. These cannot be turned off without breaking the product.

Analytics cookies (Google Analytics) are off by default and only load after you accept them. You can change your choice at any time from the link in the footer.

• Account records, scans, and designs — for as long as your account is open, and deleted within 30 days of account deletion.
• Billing records — retained for up to 7 years where required by tax and accounting law, even after account deletion.
• Support tickets — up to 24 months after resolution.
• Analytics data — retained per the Google Analytics retention setting, currently 14 months.

Depending on where you live — in particular under the GDPR (EEA/UK) and the CCPA/CPRA (California) — you may have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate. Email and phone number can be changed directly in Account Settings.
• Delete your account and associated data. You can do this yourself from Account Settings → Delete account, or by emailing us.
• Export a copy of your data in a portable format.
• Object to or restrict certain processing, and withdraw consent for analytics at any time.
• Not be discriminated against for exercising any of these rights.

To exercise a right we can't action in-product, email privacy@withlayout.com. We respond within 30 days.

Data is encrypted in transit (TLS) and at rest. Access to production data is limited to staff who need it. Uploaded files are served through short-lived pre-signed URLs rather than public buckets. No system is perfectly secure, and we cannot guarantee absolute security.

Layout is operated from the United States and our infrastructure is hosted there. If you access the product from outside the US, your information is transferred to and processed in the US.

Layout is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us data, email us and we will delete it.

We will update the date at the top when this policy changes. For material changes we will notify you by email or with an in-product notice before they take effect.

Privacy questions: privacy@withlayout.com. Everything else: support@withlayout.com. See also our Terms of Service.