Privacy policy.

Who is responsible

Domus Wizard at domus-wizard.com is operated by Mindhack-Software, the controller responsible for the personal information described in this policy.

Use this email address for privacy questions or requests concerning your account and personal data.

Accounts & Google sign-in

We process your name, email address, verification status, account identifiers and account timestamps to create and secure your account and connect it to your saved designs. Email-and-password accounts also have a securely hashed password.

When you choose Google sign-in, Google provides your Google account identifier, name, email address, email verification status and profile picture when available. We use this basic identity information for authentication and your account. Linked-account information and authentication tokens are stored as needed for sign-in; OAuth tokens are encrypted in the account database.

Your designs

Cloud-saved designs contain the plan name, rooms, dimensions, furnishings and other design content you save, together with an account association and update time. Access to saved plans is restricted to their owning account.

The studio also keeps working drafts and a limited backup history in your browser’s local storage. Signing out does not necessarily remove these local copies. Clear this site’s browser data to remove them, and export anything you want to keep first. Deleting a cloud-saved plan does not automatically erase local drafts or exported copies.

Cookies & security

Session cookies keep you signed in. The account system records session times, expiry, IP address and browser information. Sessions are configured for seven days and may be renewed while you use the service. Email-verification codes expire after ten minutes; password-reset links expire after thirty minutes. Expiry prevents further use and does not necessarily delete the record immediately.

Registration uses invitation codes and temporary registration records. Rate-limit records and operational logs help protect accounts and investigate failures. Cloudflare Turnstile processes browser and security signals during sign-in and registration. The current application does not include advertising or marketing-tracking features.

Why we use information

Account and design information is used to provide the studio and account services you request, including saving designs, signing in, verifying your email and recovering your account. The legal basis for this processing is providing the requested service under our agreement with you.

We also process security information for our legitimate interests in preventing abuse, protecting accounts and keeping the service reliable. When you choose Google sign-in, you authorise Google to release the basic identity information described above. We do not use that information for advertising or access to your mailbox.

Service providers

Information is processed by the services needed to operate Domus Wizard:

• Cloudflare hosts the application and account/design database, and provides network security, Turnstile checks and operational logging. Read Cloudflare’s privacy policy.
• Google handles authentication when you choose Google sign-in. The interface also uses Google Fonts; loading those fonts sends connection information, such as your IP address and browser details, to Google. Read Google’s privacy policy.
• Resend delivers account-verification and password-recovery emails. Your email address and the message contents are sent to Resend for delivery. Read Resend’s privacy policy.

These providers operate internationally, so information may be processed outside Belgium and the European Economic Area. Their privacy information describes their processing locations and transfer safeguards. Contact us for information about the arrangements applicable to your data.

Retention & deletion

Account information and cloud-saved designs remain stored until removed. The current beta does not automatically delete inactive accounts. You can delete cloud-saved designs through the studio; contact us to request removal of your account and associated personal data.

Browser drafts remain on your device until cleared or replaced. Verification codes and reset links have the short validity periods described above. Security records and provider-managed logs or backups may persist separately from active account data. The application does not currently apply a single automated deletion schedule to all of these records. Contact us about retention or deletion of a particular record.

You can review or revoke Google access in your Google account connections. Revoking access does not itself delete your Domus Wizard account or saved designs.

Your choices & rights

Subject to the conditions in applicable data-protection law, you can request access, correction, deletion, restriction of processing or a portable copy of your personal data. You may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting earlier lawful processing.

Send requests to support@domus-wizard.com. We may need to verify your identity before handling a request. You can also lodge a complaint with the Belgian Data Protection Authority or another competent supervisory authority.

Policy updates

We will update this page when our handling of information changes and bring material changes to users’ attention. Additional Google permissions will be explained and requested before use.