Legal
Privacy Policy
Enfilade helps architects and interior designers present their designs to clients and collect their decisions. This policy explains what information we handle, why, and the choices you have. We do not sell personal data and we do not show advertising.
1. Who we are
Enfilade is run by Jayesh Porwal, Kanth Road, Moradabad, Uttar Pradesh, India ("Enfilade", "we", "us"). For the personal data of studios and website visitors we decide how it is used. For the personal data of a studio's clients, see section 6.
2. Who this covers
- Studios: architects, interior designers and their teams who create an account.
- Clients: the people a studio shares a design book link with, who view it and may leave approvals, notes or pictures. Clients do not need an account.
- Visitors: anyone browsing our public pages, including people who register interest in joining.
- Customers: studios that buy a paid plan.
3. What we collect
From studios
- Account details: studio name, email address, password (stored only as a secure hash), and optional tagline, logo, brand colour and payment details you choose to show clients (such as a UPI ID or payment link).
- Project content you upload or create: floor plans and drawings, images, mood boards, palettes, materials, notes, room details, client name and city, and presentation settings.
- Activity in your account, such as what was published and when, and your answers when Enfilade suggests a room name.
- Sign-in and security records: one-time codes, signed-in devices and sessions, and the time and approximate network address of sign-ins.
From clients, through a design book link
- The name they enter when reviewing, their approvals, requests for changes, comments and any pictures they add, with the time of each.
From people who register interest
- Your name, email address, and optionally your studio's name and website, so we can invite your studio to Enfilade and contact you about it. Ask us and we will delete them.
From customers
- When a studio buys a plan, we receive from our payment provider the plan, the amount and currency, the date, the payment's status and reference, and the name and email used to pay. We never receive full card numbers or UPI details.
From visitors
- Standard technical information that any website receives (such as network address and browser type), used for security and to deliver the page. We do not use advertising or analytics trackers.
- When a studio signs up, the link or site that brought it (for example, a post of ours on Instagram) and the page it arrived on, kept with the studio so we learn which of our posts help studios find us. Nothing is stored in your browser for this, and nothing follows you to other sites.
4. How we use it
- To provide Enfilade: hosting projects, showing design books to the people you share them with, recording feedback and approvals, keeping versions, and creating presentations and PowerPoint files.
- To keep accounts and the service secure, prevent misuse and fix problems.
- To send service messages, such as sign-in codes, receipts, renewal reminders and important notices.
- To run paid plans: switching a plan on when it is paid, renewals, cancellations and refunds.
- To improve Enfilade, for example how it reads room names from drawings, using your confirmations and corrections.
- To meet legal obligations.
We rely on the consent you give and on what is needed to provide the service you asked for, as permitted by applicable law.
5. Service providers
We use a small number of providers to run Enfilade. They may only use the data to provide their service to us.
- Hosting: our servers are run by Oracle Cloud Infrastructure in Frankfurt, Germany.
- Optional assistant features: when a studio uses features that read drawings or images, write room notes or make concept images, the relevant drawings and images are sent to Anthropic and Google to produce the result. Pictures a studio adds to a board or its materials are sent to Groq (or to Google or Anthropic, when Groq is busy) to caption them, name the materials and arrange the board. The words of an image search are sent to the image search service that answers it (Google results through Serper or SerpApi), and a Pinterest board a studio pastes is read from Pinterest. A studio that connects its Pinterest account lets Enfilade read its boards and saved pins; the connection is kept on our server only, and can be ended in Find images; the AI turning a room's look into searches sees the room's name, words and captions. Questions asked of the editor's guide are sent to Groq (or to Google, when Groq is busy) to answer them, with a short summary of where the project stands (its stage, room counts and statuses, and the selected room's name); the client's name and contact details are not included. To brief the studio on where a project stands, the feedback its client left (who said what about which room) is summarised the same way.
- Fonts and scripts: our pages load fonts from Google Fonts, and design books load a small QR-code script from Cloudflare's cdnjs. These services receive your network address when your browser fetches them.
- Email: sign-in codes and notices are delivered through Google (Gmail).
- Bot check: when it's switched on, signing up, asking for a sign-in code and applying for the pilot use Cloudflare Turnstile to check that a person is there. Cloudflare receives your network address and some details of your browser for that check, and uses them only for it.
- Payments: paid plans are sold through Dodo Payments, our reseller and merchant of record. You pay on Dodo Payments' own checkout, which collects your name, email, billing address and payment details and processes them under its own privacy policy, including for tax, fraud prevention and its legal obligations. We share the studio's name and email with it to start the payment, and receive the details listed under "From customers", never card or UPI details.
6. Studios and their clients
A studio decides what goes into its design books and who receives the link. For the information about clients that a studio uploads or that clients enter in a design book, we act on the studio's behalf. Studios are responsible for having the right to share their clients' information with us and for telling their clients how it is used. Clients who want to access, correct or delete their information should contact the studio first; we will help the studio respond, and you can also contact us.
Anyone who has a design book link can open it. Studios should share links only with the people they intend to.
7. When we share
- With the people a studio shares a design book with, who see that project's content and its feedback.
- With the service providers in section 5.
- With our payment providers, to take payments, renewals and refunds, as described in section 5.
- When required by law, or to protect the rights, safety and security of Enfilade, our users or others.
- As part of a merger, acquisition or sale of assets, in which case this policy continues to apply to your data.
We never sell personal data.
8. Cookies and storage
We use one essential cookie to keep a studio signed in. It is not used for advertising or tracking. Our pages also keep a few small preferences in your browser's storage, such as whether you have already seen the opening animation. You can clear these at any time in your browser settings.
9. How long we keep it
We keep your information while your account is active. You can delete projects, rooms and images at any time, and you can delete your studio from your account page. When something is deleted it is removed from our live systems, and its links stop working. Backups are kept for up to 14 days and then overwritten. Records of payments are kept for as long as tax and accounting law requires, usually up to 8 years. We may keep other limited records for longer where the law requires it.
10. Security
Connections to Enfilade are encrypted, passwords are stored only as secure hashes, design books are reached through long private links, and access inside the service is restricted to each studio's own projects. No system is perfectly secure, so please use a strong password and keep your sign-in details private.
11. Your rights
Depending on where you live, including under India's Digital Personal Data Protection Act, 2023 and, where it applies, the EU and UK GDPR, you may have the right to:
- access the personal data we hold about you and get a copy,
- correct or update it,
- delete it, or withdraw consent you have given,
- object to or restrict some uses of it,
- nominate someone to exercise your rights if you cannot, and
- raise a grievance with us, and with the relevant data protection authority.
To use these rights, contact us as described below. We may need to confirm your identity first.
12. Where data is processed
Some of our providers process data in other countries, including the United States. Where this happens we rely on the safeguards the law requires.
13. Children
Enfilade is a professional tool and is not intended for anyone under 18.
14. Changes to this policy
We may update this policy as Enfilade changes. If the changes are significant we will tell studios by email or in the app before they take effect. The date at the top shows when it was last updated.
15. Contact and grievances
For questions, requests or complaints about privacy, contact our Grievance Officer, Shubh Porwal, at teamenfilade@gmail.com, or write to Jayesh Porwal, Kanth Road, Moradabad, Uttar Pradesh, India. We aim to respond within 30 days.