This English version prevails over the French version (Politique de confidentialité) in case of discrepancy, unless the applicable law requires the French version.
1. In short
- Your projects stay on your computer, except those for which you turn on sync yourself to find them on your other devices, and except what you deliberately send to the AI assistant, for the time needed to answer.
- We collect the minimum needed to run your account, the AI assistant and your subscription.
- The newsletter is optional and off by default. Usage statistics (never the content of your projects) are on by default and you can turn them off at any time in My account › Privacy.
- We do not sell your data and do not use it for targeted advertising.
- We do not train any AI model on your data or your projects.
- You can access, correct, export or delete your data at any time by writing to privacy@abrh.app or from the Software.
2. Who is responsible for your data?
The controller is ABRH OR LLC, a limited liability company organized under the laws of the State of Florida (United States), with its principal office at 1056 Euclid Avenue, Miami Beach, FL 33139, United States ("ABRH", "we", "us").
For any question about your data: privacy@abrh.app.
[If required: representative in the European Union under Article 27 GDPR: NAME, ADDRESS.]
This policy applies to the ABRH software, the online services that come with it (account, AI assistant, subscriptions, emails, support) and the abrh.app website. Capitalized terms have the meaning given in the Terms of Service.
3. Data we collect
3.1. Account data (required)
At sign-up, we collect:
- your first name and last name;
- your date of birth, solely to check the minimum age;
- your email address, confirmed with a 6-digit code;
- your password, which we never know in plain text: only a salted hash (scrypt) is stored;
- your profession (architect, student, designer…).
3.2. Profile data (optional)
Your firm size and how you heard about ABRH, if you choose to provide them.
3.3. Technical and security data
- Your computer's language and time zone, its operating system (macOS or Windows) and the Software version, to adapt the service and ensure compatibility.
- A random computer identifier, created by the Software and containing no information about your machine, which lets us warn you of a sign-in from a new computer.
- Session tokens, of which we store only a hash.
- Your IP address, used on the fly to protect our services against repeated attempts (sign-up, sign-in, reset); it is not stored in your account record. Our hosting providers may record it in their technical logs for a limited time.
- The dates of account creation, last activity and acceptance of the Terms (and their version).
3.4. Usage statistics (can be turned off at any time)
Provided for in the Terms of Service (section 4.5), on by default:
- active usage time, measured in 5-minute slices while the Software is in the foreground and in use;
- the number of projects created and opened, files saved and imports, with their type.
Never the content of your projects. You may object at any time in ABRH › My account › Privacy; measurement stops immediately.
3.5. AI assistant
When you use the AI assistant:
- your request, the current conversation and a description of your model (layers, object names and types, dimensions, settings), along with any images you choose to attach, are sent through our servers to our AI model provider, which processes them to produce the answer. Our servers do not store the content of these exchanges: they relay it and forget it;
- for each call, we record the model used, the number of tokens processed, the cost and the date, to count your credits and bill you correctly.
3.6. Subscription and payment
- Your plan, its status, its period dates and your customer ID with our payment provider.
- Payment data (card number, billing address, any tax ID) are collected and stored directly by Stripe, our payment provider. ABRH never has access to your card numbers.
3.6a. Online projects (optional)
Only for the projects for which you tick “Sync” on the home screen (unticked by default, project by project; a notice is shown before the first upload): the compressed project file (model, layers, settings, texture images, created commands), its name, size, number of objects, thumbnail, version and dates. This data is used only to give you your projects on your other devices; we do not look at it, except at your request (support) or where required by law. The project is not moved: it stays on your computer, and a copy is kept online. Unticking “Sync” removes the online copy, at any time.
3.7. Communications
- The automatic emails we send you (verification code, welcome, password, security alerts, subscription) and their delivery status.
- The content of your exchanges with support (support@abrh.app).
- If you join the waitlist or the newsletter: your email address, operating system and language.
3.8. What we do not collect
The content of your projects (apart from the AI assistant and the projects you sync, above), your files, your precise location, your contacts, your browsing history. The Software may access your camera only if you turn on hand control; images are analyzed on your computer and never sent to us.
4. Why we use your data, and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Create and manage your account, sign you in, secure access | Account, technical, security | Performance of the contract |
| Check the minimum age | Date of birth | Legal obligation and performance of the contract |
| Run the AI assistant and count your credits | AI assistant | Performance of the contract |
| Store and sync the projects you put online | Online projects | Performance of the contract |
| Manage your subscription, invoice, keep accounts | Subscription and payment | Performance of the contract, legal obligation |
| Send emails required by the service (verification, security, password, subscription) | Email, technical | Performance of the contract, legitimate interest (security) |
| Prevent fraud and abuse, protect our services | Technical, security, IP | Legitimate interest |
| Improve ABRH from aggregate statistics | Usage statistics | Our legitimate interest in improving the Software (limited measurements, never project content, can be turned off at any time) |
| Send you ABRH news | Your consent | |
| Answer your support requests | Communications | Performance of the contract, legitimate interest |
| Comply with legal obligations and defend our rights | As applicable | Legal obligation, legitimate interest |
We make no automated decisions producing legal effects concerning you. The AI assistant's suggestions remain proposals that you accept or decline.
5. Who we share your data with
We do not sell or rent your data, and we do not share it for advertising purposes. We only entrust it to service providers acting on our behalf, under our instructions and under contract:
| Provider | Role | Data concerned | Location |
|---|---|---|---|
| Render | Hosting of our servers and database | All account and usage data | United States |
| Anthropic | AI models of the assistant | Requests, conversation, model description | United States |
| Stripe | Subscription payments and invoicing; Stripe acts as merchant of record and handles taxes, under its own privacy policy for this data | Subscription, payment, email, name, billing address | United States, Ireland |
| Resend (with Amazon Web Services) | Sending automatic emails | Email, first name, email content | United States |
| Cloudflare | Hosting of the abrh.app website; storage of online projects (R2) | Technical connection data, waitlist; files of synced projects | Worldwide (R2 storage: automatically chosen region) |
| color.pizza (open color-name service) | Searching a color by name, only if you use “Search” in the color picker | The color name typed (and the request's IP address), not linked to your account | Europe |
| Google (Workspace) | Support mailbox | Your exchanges with us | United States, European Union |
Under its commercial terms, our AI model provider commits not to use data received through its programming interface to train its models, and to retain it only for a limited time, in particular for safety purposes.
We may also disclose data:
- where required by law, a court order or a competent authority;
- to protect our rights or the safety of our users or of the Platform;
- in the event of a merger, acquisition or sale of business, the acquirer being bound by this policy. We would inform you beforehand.
6. Transfers outside the European Union
ABRH is a US company and its providers mainly process data in the United States. If you reside in the European Economic Area, the United Kingdom or Switzerland, these transfers are governed by the European Commission's Standard Contractual Clauses and, where applicable, our providers' certification under the EU–US Data Privacy Framework. You may obtain a copy of these safeguards by writing to privacy@abrh.app.
7. How long we keep your data
| Data | Period |
|---|---|
| Account, profile, technical | As long as your account exists; erased upon its deletion |
| Usage statistics | As long as your account exists; erased upon its deletion, or no longer collected once you turn them off |
| Email verification code | 15 minutes |
| Password reset link | 1 hour, single use |
| Sign-in sessions | 365 days at most, or until sign-out |
| AI usage records (tokens, cost) | As long as your account exists, then erased with it |
| Online projects | Until you remove the project from your online account or delete your account (immediately erased from storage) |
| Billing data (at Stripe and in our accounts) | Period required by tax and accounting law (up to 7 to 10 years depending on the country) |
| Waitlist and newsletter | Until you unsubscribe |
| Support exchanges | 3 years after the last exchange |
| Technical backups | Automatically erased within 30 days at most |
8. Your rights
Depending on where you live, you have in particular the following rights:
- access: obtain a copy of your data;
- rectification: correct inaccurate data;
- erasure: delete your account and data, directly from the Software or on request;
- restriction and objection, in particular to processing based on our legitimate interest;
- portability: receive your data in a structured, machine-readable format;
- withdrawal of consent at any time for the newsletter, and objection at any time to usage statistics (My account › Privacy), without affecting the rest of the service;
- post-mortem instructions (France) regarding your data after your death.
Residents of California and other US states. You have the right to know which categories of personal information we collect (Section 3), for what purposes (Section 4) and with whom we share them (Section 5), to request their deletion or correction, and not to be discriminated against for exercising your rights. We do not sell or "share" your personal information within the meaning of the California Consumer Privacy Act (CCPA/CPRA), and we do not process sensitive personal information for purposes other than those permitted.
How to exercise your rights. Write to privacy@abrh.app from your account's email address. We may ask you to confirm your identity. We answer within one month (45 days in California), which may be extended where the law allows.
Complaints. If you believe your rights are not respected, you may lodge a complaint with your country's data protection authority (in France, the CNIL, www.cnil.fr).
9. Children
ABRH is not intended for children under 13, and we do not knowingly collect their data. In the European Union, a user under the age of digital consent of their country (15 in France) must obtain authorization from a parent or legal guardian. If you believe a child has provided us with data, write to us: we will delete it.
10. Security
We protect your data with appropriate technical and organizational measures, including:
- encryption in transit (HTTPS / TLS) between the Software, our servers and our providers;
- passwords, session tokens and codes stored only as hashes;
- provider access keys kept on our servers, never in the Software;
- sign-in attempt limits and email security alerts;
- access to data restricted to the people who need it.
As no system is infallible, we will notify you, and the competent authorities, of any data breach likely to present a risk to you, as required by law.
11. Local storage and cookies
- The Software keeps your sign-in session, your preferences (language, display, AI model) and your projects on your computer. This information stays on your computer (a copy of the projects you sync is also kept online, see 3.6a).
- The abrh.app website uses no advertising cookies and no third-party audience measurement tools. [To be updated if an audience measurement tool is added.]
12. Changes
We may change this policy. For material changes, we will notify you at least 30 days in advance, by email or in the Software. The version date appears at the top of this document.
13. Contact us
ABRH OR LLC — 1056 Euclid Avenue, Miami Beach, FL 33139, United States Personal data: privacy@abrh.app — Support: support@abrh.app