Floor Optimizer

Privacy Policy

Last updated: 7 August 2026

This Privacy Policy explains how Floor Optimizer (“we”, “us”) collects, uses and protects your personal data when you use our website and floor-planning service (the “Service”). We are the data controller for the personal data described here.

Data we collect

  • Account data — your email address, used to sign you in and contact you about your account.
  • Project data — the rooms, measurements, flooring settings and layouts you create and save.
  • Billing data — subscription status, purchase records (such as which of your projects you have unlocked) and payment identifiers. Card details are handled entirely by our payment processor; we never see or store your full card number.
  • Technical data — IP address and request metadata, used for security, abuse prevention and rate limiting, and diagnostic logs to keep the Service running.
  • Usage data — we record which features of the site and app are used (for example that an optimisation was run or a cut list was exported) in our own systems, to understand and improve the Service. If you accept analytics cookies, we additionally collect usage information (pages visited, features used, anonymised session replays) via Google Analytics and PostHog.
  • How you found us — when you arrive through an advert or a campaign link, we record the campaign details carried in the link address (such as campaign tags and the advertising click reference), the site that referred you and the page you landed on. This is stored in a first-party cookie and, if you create an account, kept with it so we can tell which of our marketing actually works.
  • Cookies — strictly necessary cookies that keep you signed in, and optional analytics cookies you can accept or reject. See our Cookie Policy.

How we use your data

  • To provide the Service — creating layouts, saving projects and managing your account.
  • To process payments — one-time room unlocks and subscriptions.
  • To secure the Service, prevent abuse and enforce usage limits.
  • To understand how the site is used and measure our advertising, where you have consented to analytics.
  • To respond to your support requests.
  • To meet our legal and accounting obligations.

Legal bases (GDPR)

Where the GDPR applies, we rely on: performance of our contract with you (to provide the Service and process payments); our legitimate interests (to secure the Service, prevent abuse, understand how the Service is used, and measure which of our marketing brings visitors); your consent (where requested, including for sharing conversion data with our advertising partner); and compliance with legal obligations.

Service providers

We share data with trusted providers who process it only on our behalf:

  • Supabase — authentication and database hosting.
  • Stripe — payment processing and subscription billing.
  • Vercel — application hosting.
  • Upstash — rate limiting.
  • Better Stack — logging and monitoring.
  • Google — if you choose to sign in with Google; Google Analytics and Google Ads conversion measurement if you accept analytics cookies.
  • PostHog — product analytics and anonymised session replay, only if you accept analytics cookies.

Some providers may process data outside your country. Where they do, we rely on appropriate safeguards such as Standard Contractual Clauses.

Advertising measurement

We advertise on Google. To know whether that advertising works, we keep the arrival information described above in our own systems. It contains no name or contact details, it is not used to build a profile of you, and it is not used to follow you on other sites.

If you accept analytics and advertising cookies, we also report conversions (such as a sign-up or a purchase) back to Google Ads so we can measure our campaigns. This can include the advertising click reference from your visit and a hashed (unreadable) version of your email address that Google uses only to match the conversion to the ad click. If you do not accept, nothing about you is sent to Google Ads.

Data retention

We keep your account and project data for as long as your account is active. If you close your account, we delete or anonymise your personal data within a reasonable period, except where we must retain records to meet legal or accounting obligations.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at [email protected]. You also have the right to complain to your local data protection authority.

Children

The Service is not directed at children under 16, and we do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time. We will post the new version here and update the date above. Significant changes will be communicated where appropriate.

Contact

Questions about this policy or your data? Email us at [email protected].