Privacy Policy

This Policy explains how Plan Craft Daily Ltd (trading as "ArchplanAI") ("we", "us") handles personal data in connection with the ArchplanAI platform ("the Service"). It covers the data of the firms who subscribe and their staff, and of people who contact us or ask us for something (for all of whom we are the controller). Personal data about a customer firm's own clients, which we process on that firm's behalf, is governed by our Data Processing Agreement — there the firm is the controller and we are the processor.

1. Who we are

Plan Craft Daily Ltd, a company registered in England & Wales, trading as "ArchplanAI" (company no. 16240187), registered office Silverstream House, 4th Floor, 45 Fitzroy Street, London W1T 6EB. Data questions: support@archplanai.com.

2. What we collect (as controller)

• Account & user data: name, work email, role, and login credentials of your staff who use the Service (authentication is handled by our provider Clerk).
• Billing data: subscription tier, and payment details handled by our payment processor Stripe (we do not store full card numbers).
• Usage & technical data: log data, device/browser information, and actions taken in the Service, used to run, secure and improve it.
• Support & correspondence: messages you send us.
• People who ask us for something: if you ask us for something, for example by commenting on one of our LinkedIn posts, messaging us or booking a call, we keep your name, your firm, your job title, how you contacted us and what you asked for, in our sales records (CRM), so we can reply and follow up.

We do not use the personal data of your clients (which sits inside your projects) for our own purposes — we only process it to provide the Service to you, under the DPA.

3. Why we use it, and our lawful bases

• To provide and operate the Service and your account — performance of a contract.
• To secure the Service, prevent misuse, and keep records — legitimate interests.
• To bill you and take payment — contract / legitimate interests.
• To send service messages (e.g. security, billing, important changes) — contract / legitimate interests. We do not send marketing without a lawful basis.
• To reply to people who ask us for something, and to follow up once: legitimate interests. You can ask us to delete your record at any time: support@archplanai.com.
• To comply with law — legal obligation.

4. Who we share it with (our sub-processors)

We use trusted providers who process data on our behalf under contract:

We do not sell personal data. We may disclose data where required by law or to protect our rights, and to a successor in a business transfer (with continued protection).

5. International transfers

We are a UK company, but some of our providers are outside the UK (mainly the US). Where UK personal data is transferred to them we rely on an appropriate safeguard — the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses — together with additional protections as needed.

6. Retention

We keep personal data only as long as needed for the purposes above and to meet legal/ accounting obligations, then delete or anonymise it. Customer Data is retained per your subscription and the DPA, and is deletable/exportable on termination. If you asked us for something but did not become a customer, we keep that record for 12 months from our last contact with you, then delete it.

7. Security

We use appropriate technical and organisational measures — tenant isolation, encryption in transit, access controls and least-privilege, and signed webhooks — to protect personal data. No system is perfectly secure, but we take our obligations seriously and will notify you of a personal-data breach as required by law.

8. Your rights

Under UK data-protection law you may ask to access, correct, delete, restrict, or port your personal data, or object to certain processing. Contact us at support@archplanai.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to help first.

9. Cookies

The Service uses cookies/similar technologies that are necessary to sign you in and keep the Service secure and working. For the archplanai.com website itself (analytics, bot protection, the AI assistant), see section 11.

10. Changes and contact

We may update this Policy and will post the new version with its date. Questions: support@archplanai.com.

11. This website (archplanai.com)

This section covers the public marketing website, as distinct from the Service.

• Strictly necessary: our enquiry forms and email captures are protected by Cloudflare Turnstile, a bot check that may set a cookie or use similar technology only to tell people from automated traffic. No consent is required for this.
• Analytics — not switched on at present: no analytics is running on this website. Our analytics provider, PostHog (hosted in the EU), is not configured, so nothing is collected and no analytics cookie is set whatever you choose on the consent notice. The notice and the consent mechanism stay in place so that analytics can be switched on later, and before it ever is, we will update this Policy — with its date, as section 10 says — to state what is collected and how long it is kept.
• "Ask ArchplanAI" assistant: questions you type are sent to our AI provider, Anthropic, to generate an answer from our product documentation. We do not log the content of the conversation; please do not include passwords or your clients' personal details. If you give the assistant your email so a person can reply, it is passed to our CRM as an enquiry. Anthropic keeps the data sent to its API for a limited period under its own policy and does not use it to train its models. The answers are generated by Anthropic in the US, under the safeguard described in section 5.
• Enquiries and captures: what you submit (name, work email, firm name, message, and any quiz or calculator inputs you ask us to email you) goes to our CRM so we can reply. We do not sell or share it for third-party marketing.

Providers involved in running the website: Hostinger (hosting), Vercel (standby hosting), Cloudflare (bot check), PostHog (analytics, only with consent) and Anthropic (assistant answers).