Privacy policy
Updated: 20 October 2026
Courtesy translation. Only the French version of this document is binding; if the two differ, the French text prevails.
DecoScale processes personal data in compliance with the GDPR. The data controller is Nassim Hasni, sole trader (SIREN 109 183 475).
Data processed
- Photographs of your spaces
- A photo of an interior is personal data: it says something about your home. It is used solely to produce the layout you request. EXIF metadata, including geolocation, is removed on receipt.
- Viewpoints of your photographs
- When you send several photographs of the same room, we may estimate where and in which direction each one was taken, in order to place it on the plan of the room: an approximate three-dimensional reconstruction model infers a position and an orientation from them, which the arrow you place on the plan replaces when you place one. These estimates are not measurements, and are used only to place your photographs on the plan. They are stored with the render's session: deleted with it, after 90 days, or earlier if you use “Delete my photos”.
- Email address
- It identifies your account and receives the service messages: confirmation link, password reset, cancellation or withdrawal acknowledgements, payment alert. When you write to us, to reply to you. No newsletter is sent.
- Account and purchases
- Email address, password (stored hashed, never in clear), language, credit balance and purchase history, customer identifier at Stripe. Card data never reaches us.
- Page the account came from
- When you create your account after following a link from our site to the app, the name of the page you came from (a guide, the home page, pricing…) is stored with the account, so that we know which pages are useful. It is read from the address of the link you followed: no cookie, no storage on your device, no third-party analytics tool. An account that arrived any other way carries none.
- Messages in the “Edit this render” chat
- When you write a request in the chat under a render, we keep your message, the time it was written and the actions we drew from it. What you write is free text and may therefore contain personal data: do not put a name, an address or contact details in it. We read these messages to learn what people ask for and what the chat does not yet understand, in order to improve it. They are stored with the render's session: deleted with it, after 90 days, or earlier if you use “Delete my photos”. They are not used to train an artificial-intelligence model.
- Usage data
- Renders produced, products viewed and clicks to merchants, processed to run the service and measure its audience. Page views of the website (outside the app) are counted by Cloudflare Web Analytics, with no cookie and no storage on your device; we only receive aggregate statistics.
- Audience measurement by Google Analytics, if you accept it
- On your first visit, a banner lets you accept, reject or customise the audience
measurement cookies of the website (outside the app), set by Google Analytics. Nothing is
loaded or sent to Google until you accept them (“Accept all”, or audience measurement
turned on under “Customise”), and “Reject all” changes nothing in how the site works. If you accept, Google
Analytics sets two cookies (
_gaand_ga_followed by our site's identifier), lasting thirteen months at most, and receives the pages you view, where you came from, your browser, your device and your IP address, which Google Analytics does not store. We only receive aggregate statistics, kept for two months at most, and we do not use them for advertising (Google signals and ad personalisation are turned off). They tell us how many people visit the site and let the services that measure it for partner merchants verify that figure. Your choice is kept on your device for six months, then asked again; you can change it at any time with the “Cookie settings” link at the bottom of every page, or here: - Anti-bot check at sign-up
- When you create an account, a Cloudflare check (Turnstile) verifies that the sign-up comes from a person and not from a program: each confirmed account receives a free design, and this check prevents accounts from being created in bulk. For this, Cloudflare receives your IP address and technical information about your browser, for the duration of the check, and undertakes not to use them for advertising. This check is only loaded on the account-creation form, never when signing in. Disposable email addresses (temporary mailboxes) are not accepted at sign-up.
- Photographs of the products offered
- The photos of the other products offered under a render (“Other products”) come from the affiliate feed of some merchants. They are served to you by our servers (Cloudflare), which fetch them from the merchant themselves: neither your IP address, nor your cookies, nor the page you are viewing are passed to the merchant until you click a product. The click is described in the Awin row of the table below.
- Voice dictation
- Where the app invites you to write a detail, a microphone button lets you dictate instead of typing. It is optional. Speech recognition is performed by the service built into your browser, not by DecoScale: depending on the browser, the sound may be sent to its publisher (for example Google for Chrome, Apple for Safari), under its own terms. DecoScale never receives the sound: only the text transcribed into the field, and only if you send it, like typed text. The button does not appear in a browser that does not offer this service.
- Public share link
- If you create a public link from a render's screen — with a button, or by sharing that render to X, Facebook, LinkedIn, WhatsApp or Pinterest, which display it from that link —, a decoscale.com/p/… page shows anyone who has its address the image of that render, which carries the “AI-generated image · DecoScale” label, the type of room and the style. Your original photograph, your name and your email address never appear on it. The page is not indexed by search engines. You remove it at any time from the same screen; it also disappears with the render, after 90 days, or sooner if you use “Delete my photos”. A social network on which you post this link may keep its own copy of the preview: we cannot remove it on its behalf.
Legal bases
Performance of the contract for the account, the credits, the service messages and the processing of photographs and layouts, and for the public share link, created at your request; legal obligation for accounting data and acknowledgements of receipt; consent for audience measurement by Google Analytics, which you can withdraw at any time; legitimate interest for audience measurement, including the page an account came from, the improvement of the chat from the messages sent to it, and the fight against abuse.
What we do not do
We do not use your photographs to train models, we do not publish them, and we neither sell nor pass them on to third parties for advertising purposes. A render is only published if you create a public link or share it to a social network, and until you remove that link.
Processors
Producing a layout calls on technical providers. They act on our instructions, are bound by a processing agreement within the meaning of article 28 of the GDPR, and do not use your data for their own purposes. Here is the list, and where each processes the data:
| Recipient | What it receives | Place of processing |
|---|---|---|
| Fly.io | Your photographs, the emptied room and the layout produced | Paris, France |
| Brevo | Your email address, for service messages | European Union |
| Cloudflare | The website, your account and your credits, page-view measurement, the relaying of the photos of the products offered, the anti-bot check at sign-up | European Union and worldwide network |
| Anthropic | Your photographs, for the analysis of the room, of its fixed elements (door, window, wall-mounted television…) and the measurements; the messages you write in the chat, to translate them into actions | United States |
| Your photographs, to produce the layout image | Outside the European Union, no guaranteed region | |
| Google (Google Analytics) | Only if you accept it: the pages of the website you view, where you came from, your browser, your device and your IP address, for audience measurement | European Union and United States |
| Awin | Your IP address and browser, at the moment you click an SLF24 or Massivmoebel24 product. The network then sets its own trackers to attribute a possible purchase. No other click is passed to it. | European Union and United Kingdom |
| Modal | Your photographs, to measure the room and, when you send several, to estimate where each one was taken from; and the image produced, to outline the clickable areas | Ireland |
| Stripe | Your payment data, which we never see; when you request a refund, the payment concerned, the amount refunded, the identifier of your account with us and, if you answered the question “What happened?”, the answer chosen from four (“A render failed”, “The result does not match my room”, “I chose the wrong offer”, “Something else”), never free text | United States and Ireland |
Transfers outside the European Union
Three of these providers process data outside the European Union: Anthropic and Google, which analyse the photograph and produce the image, and Stripe, for payment. Your photographs therefore leave the European Union for the time it takes to analyse and transform them. We would rather write it than let you guess.
If you accept audience measurement by Google Analytics, the visit data described above may also be processed in the United States by Google LLC, which participates in the EU–US Data Privacy Framework. Your photographs are never attached to it.
The rest is processed in Europe, and by choice: the engine that handles your photographs is in Paris, the measurement of the room, the estimation of the viewpoints and the computation of the clickable areas in Ireland, the emails with a French provider. The technical storage of these computations is not contractually guaranteed to be European; neither your photographs nor the image are kept there beyond the processing.
These transfers are governed by the standard contractual clauses adopted by the European Commission (implementing decision 2021/914), stipulated in the processing agreement of each of these providers. You can obtain a copy by writing to rgpd@decoscale.com.
Before anything is sent, the metadata of your photographs, including geolocation, is removed on receipt. A photograph in which a person is identifiable is refused: we check it at analysis, and the render is not produced. No name, no address and no payment data is transmitted to a provider of artificial-intelligence models.
Processing artificial-intelligence models in Europe is a goal we are pursuing; it depends on these models being available in a European region, which is not yet the case. This page will state the real situation, not the intention.
Retention period
Photographs and renders: 90 days, then automatic deletion. Chat messages: with the render's session, so 90 days. Estimated viewpoints: with the render's session, so 90 days. Clicks to merchants: 13 months, then automatic deletion. Sign-in, sign-up and request attempts (address entered, IP address): 30 days, then automatic deletion. Sign-in sessions: deleted when they expire. Confirmation and password-reset links: 7 days after they expire. Your gallery's render history: with the renders, so 90 days. Public share links: until you remove them, and at most with the render, so 90 days. Cancellation or withdrawal requests: 3 years, like correspondence. Account, including the page it came from, and credits: as long as the account exists, then deletion on request at rgpd@decoscale.com, or by yourself from the app (Settings, “Delete my account”): your photos, your renders, your email address and your password are then erased at once; your payments and your credit history are kept, detached from your address, for the statutory period, with a fingerprint of the address that stops a re-created account from receiving the free room design a second time. Correspondence: 3 years. Accounting data: statutory period.
Your rights
Access, rectification, erasure, restriction, objection and portability, to be exercised at rgpd@decoscale.com. You may lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
People visible in the photographs
Do not send a photograph in which a person is identifiable. Such images are refused: we check them at analysis, and the render is not produced.