The short version
- You can draw without an account. Until you sign in, your plan stays in your browser.
- Saved plans are stored in the European Union. We never sell your data.
- When you start an AI action, only what it needs goes to our AI provider in the United States (Anthropic). We do not train AI with your plans unless you switch that on yourself.
- No advertising, no tracking cookies. We count visits without any id.
- Download your plans or delete your account at any time.
1. Who is responsible
Squaremetry is responsible (the "controller") for the personal data described here. Squaremetry is the trade name of a sole proprietorship (eenmanszaak) registered in the Netherlands. You can reach us at the details below. We have no data protection officer, as the law does not require one for us; questions about privacy go to info@squaremetry.com.
- Business name
- Squaremetry
- Legal form
- sole proprietorship (eenmanszaak)
- Address
- Noorderwind 49, 6846 WC Arnhem, the Netherlands
- Chamber of Commerce (KvK)
- 98353810
- VAT number
- NL005326211B22
- info@squaremetry.com
If you use Squaremetry for your business and put data about your clients in it, you are the controller of that data and we process it for you. See the data processing agreement.
2. Using Squaremetry without an account
You can draw, measure and export without signing in. Your plan, its local versions (up to 20), a photo, PDF or DXF drawing you trace over, your favourites and your settings are stored in your own browser, on your device. We do not receive them.
Clearing your browser data removes them. Nothing about your plan goes to our servers until you sign in, or until you send us feedback. AI actions only work with an account.
3. What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address, and your name and picture if you add them | To create your account and sign you in | Contract (Art. 6(1)(b)) |
| Sign-in codes and links (stored scrambled, valid for 10 and 5 minutes) | To check it is really you | Contract |
| Passkeys you add (a public key, never your fingerprint or face) | To sign you in without a code | Contract |
| Sign-in with Google, Apple or Microsoft, once we offer it: your name, email address and picture from that account. We do not keep their access keys | To sign you in with an account you already have | Contract |
| Sessions: IP address, browser and device type | To keep you signed in and to spot misuse of your account | Contract and legitimate interest (security) |
| Your devices: a scrambled id of the cookie on that device, the device name and when you used it | To keep at most 2 devices signed in at once and to email you when you sign in on a new device | Contract and legitimate interest (security) |
| Counters per IP address for sign-in attempts and link codes | To stop people from guessing codes | Legitimate interest (security) |
| Your saved plans, homes, addresses, versions, favourites, default settings and export history | To store, sync and share your work | Contract |
| Teams: members and their roles, invitations (the email address of the person you invite), the team logo and style | To let you work together | Contract; for the person you invite: legitimate interest |
| Share links, edit links and buyer links you create, and which link saved a change | To let people view or edit what you share | Contract |
| Address search (Netherlands, only when signed in) | To find a home address and its building details. We send the search to the public address register (PDOK) from our server, so your IP address is not passed on | Contract |
| Surroundings in 3D and starting from your address (Netherlands, only when you ask): the location of the home as a small area around the building | To show the home, the aerial photo, plot line and neighboring buildings. We ask PDOK and 3D BAG from our server, so your IP address is not passed on; we do not send your name or address | Contract |
| AI actions you start: your description, sketch or photo, question, or the names, types and areas of rooms; and per action one line without content (kind, model, tokens, cost, outcome) | To make the proposal or answer you ask for, and to keep track of the monthly limit and the cost | Contract |
| Samples for detection, only with the box ticked: a copy of the image, the proposal and your corrected walls | To make wall detection better | Consent (Art. 6(1)(a)), which you can withdraw |
| Waitlist: email address, role and language | To tell you when the beta opens and when Squaremetry launches after the beta | Consent (Art. 6(1)(a)), which you can withdraw |
| Emails about the beta: your email address and language, and which emails we sent | To tell you what changes at the end of the beta, and to remind you of the founder price. The reminders have an unsubscribe link in every email | Contract; for the reminders legitimate interest (messages to our own customers, recital 47 GDPR and art. 13(2) ePrivacy Directive) |
| News by email, only if you tick the box: your choice, the text you agreed to and when | To send you news about Squaremetry, with an unsubscribe link in every email | Consent (Art. 6(1)(a)), which you can withdraw |
| Requests to an office through its lead widget or a shared plan: your name, email address, the address of the home if you give it, your calculation or message, and when you gave consent (with the version of the consent text). The office is the controller; we store it for the office | To pass your request to the office you chose | Consent (Art. 6(1)(a)), which you can withdraw by asking the office or us |
| Feedback: your message, an optional email address and an optional drawing of your plan, plus the tool, units, language and app version you used | To answer you and improve the product | Legitimate interest (improving the product) |
| Requests for free use in education: email address, name, school, role and purpose | To review your request | Contract (steps at your request before the contract, art. 6(1)(b)) |
| API keys, connections with an AI assistant and webhooks you create, and the number of calls per month | To make the connection work and keep track of the monthly limit | Contract |
| Misuse alerts: the cause, a short id (the visible part of an API key, or a scrambled value derived from an address or connection) and counts. Never the IP address itself | To spot and stop misuse of the API and the calculator for AI assistants | Legitimate interest (security) |
| Security log: what changed in an account and who changed it, without the content of your plans | To investigate misuse and incidents | Legitimate interest (security) |
| Payment and invoice records: what you bought, amounts, the Paddle references and the invoice. Only Paddle sees your card details | To bill you and to keep records the law requires | Contract and legal obligation (Art. 6(1)(c)) |
| At checkout: your request to start at once (the exact text you ticked, when, and which plan), or for a business purchase the company name and VAT number; and any withdrawal you make | To prove what you chose about the right of withdrawal and to confirm it to you by email | Contract and legal obligation (Art. 6(1)(c)) |
You need an email address to create an account. Everything else is up to you; without it, some features do not work.
We do not collect special categories of data, and we do not use your data for automated decisions about you.
4. AI
AI is only available with an account, and only when you ask for it: a plan from a description or a sketch, a change in words, a listing text or a question about the standard. We then send only what that action needs to our AI provider, Anthropic, in the United States: your description, the sketch or photo you choose (first redrawn in your browser, so photo data such as the place where the photo was taken is not in it), your question with passages from our own guides, or the names, types and areas of the rooms. We do not add your name, email address or address. We do not store the sketch.
Under its commercial terms, Anthropic does not use what we send to train AI. For each AI action we keep only the kind of action, the model, the number of tokens, the cost and whether it worked, without your text, image or the answer.
An AI result is a proposal. You check it before you use it; see the terms of service.
5. Training with your tracing, only if you switch it on
We do not use your plans to train AI. The one exception is your own choice: the box "Help improve detection with my corrected tracing" when you trace. It is off until you switch it on. In a team workspace only the owner or an admin can switch it on, because the office decides about the data of its clients. When it is on and you save to your account, we keep a copy of the image for each detection (redrawn, without photo data such as the location), the proposal and the walls as you corrected them. No address and no name of the home; at most 50 per person and workspace.
We use those samples only to improve detection, on our own servers or with a provider that does not train on customer data. For these copies we are the controller ourselves. You can switch the box off at any time, and "Remove what I shared" erases everything you shared, images included. They are in your download.
6. Visit counts
On the website we count visits and a few actions (starting the tool, exporting, joining the waitlist) without cookies and without any id. Each count adds one to a daily total per action, page type, language and kind of referrer (search, AI assistant, social, direct or other). We do not store your IP address, the page address or your browser. The editor sends no counts.
If your browser sends Do Not Track or Global Privacy Control, we do not count you at all. There are no advertising or third-party tracking scripts on the website or in the editor.
7. Where your data is stored
Your saved plans and account data are stored on servers in the European Union. The website and the editor files are delivered through a content delivery network, which sees your IP address to deliver the pages but receives no account data.
Only these leave the EU: an AI action you start (to Anthropic in the United States), what Cloudflare needs to deliver the page, and email to our address (Google Workspace). This happens with the safeguards the GDPR requires: for Cloudflare and Google the EU-US Data Privacy Framework (a decision of the European Commission), with the EU Standard Contractual Clauses as a fallback; for Anthropic the EU Standard Contractual Clauses (art. 45 and 46 GDPR).
8. Who helps us
We use a small number of service providers. Those who work for us may only use your data to provide their service to us, under a data processing agreement.
| Provider | What for | Where | Status |
|---|---|---|---|
| Scaleway | Servers, database, file storage and backups | Paris, France (EU) | From the start of the beta |
| Scaleway Transactional Email | Sending sign-in codes, account emails and waitlist emails | Paris, France (EU) | From the start of the beta |
| Cloudflare | Delivering the website and the editor files, and our domain name | Worldwide network, company in the United States (EU-US Data Privacy Framework, with the EU Standard Contractual Clauses as a fallback) | From the start of the beta |
| Google Workspace | Our mailbox: emails you send to us and our replies | Company in Ireland, part of a US group; data can be processed in the United States (EU-US Data Privacy Framework, with the EU Standard Contractual Clauses as a fallback) | From the start of the beta |
| Anthropic | AI actions you start: your description, sketch or question, or the names, types and areas of rooms. Not your name, email or address | United States (EU Standard Contractual Clauses in the data processing addendum of Anthropic) | From the start of the beta |
| Paddle | Payments, invoices and sales tax, as the seller (merchant of record) | United Kingdom (EU adequacy decision) | From the start of the beta |
| Sentry | Error reports from the app and the server | EU | Planned, not active yet |
| A second storage provider for backups | A second copy of the backups | EU | Planned, not active yet |
| PDOK (Kadaster) | Address search, building details, aerial photo and plot lines in the Netherlands, through our server | Netherlands | From the start of the beta |
| 3D BAG (TU Delft and 3DGI) | Heights of the home and the buildings next to it, through our server, only a small area around the building | Netherlands | From the start of the beta |
Paddle sells to you and is itself responsible for the payment, under its own privacy policy. Paddle gets what you enter at checkout, and from us only an id of your workspace, your account and your request at checkout. PDOK and 3D BAG are public sources: from our server they get only the search or a small area around the building, never your IP address, name or email address.
If you sign in with Google, Apple or Microsoft, that company handles the sign-in under its own privacy policy. If you connect Squaremetry to your own AI assistant or to a webhook, what you request there goes to that service, under its terms. We update this list before a new provider starts to handle your data.
9. How long we keep it
| Data | Kept for |
|---|---|
| Your account and saved plans | As long as you have an account |
| Plans in the trash | 30 days, then erased |
| A deleted account and its plans | 30 days, then erased for good |
| Versions of a saved plan | The newest 100 always; of the last 90 days the last one of each day and the versions from moments when work could have been lost. Pinned and named versions, and those of a report or export, as long as the plan exists |
| Sign-in codes and sessions (with IP address and device type) | Until 1 day after they expire. A session expires 7 days after you last used it |
| Your devices (a scrambled id, the device name, first and last use) | As long as you have an account |
| Share links | Until 90 days after they expire or you turn them off |
| Edit links and buyer links (they work for at most 30 days) | Until 90 days after they expire or you turn them off |
| Team invitations (they work for 7 days) | Until 90 days after they expire |
| Counters for sign-in attempts | Deleted 1 day after the last attempt |
| Change log of a plan | 90 days, once there is a newer version |
| Security log | 13 months |
| Samples for detection (only with the box ticked) | Until you remove them or delete your account |
| Misuse alerts | 180 days |
| Waitlist, not confirmed | 30 days |
| Waitlist, confirmed | Until you ask us to remove you, and at most 12 months after launch |
| Feedback | 1 year |
| Requests to an office (leads) | 12 months after they came in, or earlier when the office deletes them |
| Invoice and payment records, with your request at checkout, any withdrawal and any refund | 7 full calendar years after the year they belong to, as Dutch tax law requires; then erased |
| AI log (without content) | 25 months |
| Usage counts per workspace (exports, reports, new plans) | 25 months |
| Requests for free use in education | 12 months after the decision, after the education plan ended, or after a request nobody decided on yet |
| Connections with an AI assistant | Access codes until 1 day after they expire; a connection you stopped or did not use for 90 days, 90 days after that |
| Messages from our payment provider Paddle about your payment | 90 days after we processed them; a message we could not process 365 days. What you bought and paid is in the invoice records |
| Your requests to download or delete your data | 3 years after we handled them, as proof that we did |
| Files in storage (photos, documents, exports and logos) | Gone as soon as the home leaves the trash or the workspace is deleted; a replaced logo after 30 days |
| Backups | Daily ones 35 days, monthly ones 400 days. We use them only to restore after a failure. If we restore one, we first delete again what was deleted since that backup |
| Visit counts | Kept, as they contain no personal data |
10. Your rights
Under the GDPR you have the right to access, correct, delete and move your data, to restrict or object to how we use it, and to withdraw consent at any time. Withdrawing consent does not affect what we did before.
- Download: in your account settings you download, as one zip file, everything this statement names that we keep about you and your workspaces: your homes (also in the trash) as open file, PDF and CSV, the content of named and pinned versions and the list of all versions, your photos, documents, exports and logos, links, client profiles, your account details, sessions and devices, consents, waitlist, feedback, requests, the AI log, API keys and connections, the security log about you and your payment records; if you own or manage a workspace, also its leads and invoices. Secrets such as access codes and keys are not in it. Your browser makes the file; we keep no copy.
- Delete: in your account settings you can delete your account. You are signed out everywhere at once, and 30 days later the account and its plans are erased. If you own a team with other members, first make someone else the owner; that team keeps its shared plans. Invoice records stay for the period the law requires.
- Leave the waitlist: use the unsubscribe link at the bottom of every waitlist email. You are off the list at once.
- No more reminders about the end of the beta, and no news: use the unsubscribe link at the bottom of those emails. Emails about your account and payments still come.
- Anything else: email us at info@squaremetry.com. We answer within one month.
You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority where you live.
We do not sell or share your personal information as US state privacy laws define those words, and we do not use it for targeted advertising.
11. How we protect your data
The database checks on every request who may read a plan, and automated tests try to break that rule on every change. We never store passwords: you sign in with a one-time code or a passkey. Staff who can see account data sign in with a passkey, and every time they look at customer data in the admin area is logged: who, when and what. Our server log holds no content of your plans and no email addresses. More on the security page.
12. Children
Squaremetry is not meant for children. You must be at least 16 to create an account.
13. Changes to this policy
If we change how we handle your data, we update this page and its date. For important changes we tell you by email at least 30 days ahead.