Privacy Policy

1. Introduction

MeltFlex s.r.o. (“MeltFlex”, “We”, “Us”, “Our”) is committed to protecting Your privacy. This Privacy Policy explains how We collect, use, store, and protect Your personal information when You use our AI interior design platform at www.meltflexai.com (the “Platform”).

By using our Platform, You agree to the collection and use of information in accordance with this Privacy Policy. If You do not agree, please do not use the Platform.

2. Data Controller

The data controller responsible for Your personal data is:

MeltFlex s.r.o.

Bratislava, Slovak Republic

Email: info@meltflexai.com

MeltFlex s.r.o. is subject to the General Data Protection Regulation (GDPR) as a company established in the European Union.

3. Information We Collect

3.1 Information You Provide Directly:

• Email address (when creating an account or signing in with Google)
• Name (if provided via Google sign-in or account settings)
• Payment information (processed securely by Stripe; We do not store Your card details)
• Room photos and floor plans You upload for AI design generation
• Design projects and workspace data You create on the Platform
• Communications You send to us (support requests, feedback)

3.2 Information Collected Automatically:

• Device information (browser type, operating system, screen resolution)
• IP address and approximate geographic location
• Pages visited, features used, and actions taken on the Platform
• Session recordings (with sensitive inputs like passwords masked)
• Referral source (how You found our Platform)
• Cookies and similar technologies (see our Cookie Policy for details)

4. How We Use Your Information

We use Your personal data for the following purposes:

• Providing the Service: To create and manage Your account, process Your room photos and floor plans through our AI, generate design visualizations, and save Your projects
• Subscription Management: To process subscription payments, manage billing cycles, and provide access to paid features
• Platform Improvement: To understand how users interact with our Platform, identify bugs, and improve features through analytics
• Communication: To respond to Your support requests and send essential service notifications (e.g., subscription confirmations, password resets)
• Legal Compliance: To comply with applicable laws, regulations, and legal obligations

We do not use Your personal data for automated decision-making or profiling that produces legal effects.

5. Legal Basis for Processing (GDPR)

We process Your personal data on the following legal bases:

• Contract Performance: Processing necessary to provide You with the Platform and fulfill our subscription agreement with You
• Legitimate Interest: Analytics and Platform improvement, fraud prevention, and security
• Consent: Marketing communications (where applicable, and only with Your explicit consent)
• Legal Obligation: Retaining financial records as required by Slovak and EU law

6. AI-Generated Content and Your Uploads

When You upload room photos or floor plans, our AI processes these images to generate design visualizations. Your uploaded images and generated designs are stored securely to allow You to access Your projects. We do not use Your personal photos or designs to train AI models without Your explicit consent.

AI-generated visualizations are provided for informational and planning purposes. They are not architectural drawings and should not be used as construction documents.

7. Connected Apps and the MeltFlex API

You can connect a third-party AI assistant, such as ChatGPT or Claude, to Your MeltFlex account. Connecting one is always Your explicit choice: the assistant sends You to a MeltFlex consent screen, and nothing is shared until You approve it there.

A connected app can generate designs on Your account and spend its credits. To do that it receives, and only receives:

• Your account identifier and email address, so generations are billed to You
• The credit balance and prices it asks for
• The images and prompts You send it in that conversation, and the results We return

It cannot read Your saved projects, Your other designs, Your payment details, or the other apps connected to Your account. Images You send through a connected app are processed exactly as any other upload, described in section 6, and the results are stored so the app can hand You a working link.

We store an access credential for each connected app as a one-way hash, never in a readable form. You can see every connected app and disconnect any of them at any time under Settings, Connected Apps. Disconnecting takes effect immediately and the app cannot generate anything on Your account again unless You reconnect it.

What the assistant itself does with Your conversation is governed by that assistant provider's own privacy policy, not this one.

8. The MeltFlex Chrome Extension

The MeltFlex extension for Google Chrome (“MeltFlex AI Interior Design: Try Furniture in Your Room”) places a product You are viewing on a store's website into a photo of Your own room.

• Web pages You visit: to notice that a page sells a piece of furniture, the extension reads the page inside Your browser: the product's name, photos, size and the page address. This stays on Your device. We do not collect Your browsing history, and nothing about a page reaches MeltFlex unless You start a render of its product.
• Room photos: the room photos You add are kept in Your browser's extension storage (up to six) and are not uploaded when You add them.
• When You start a render: the extension sends MeltFlex the room photo You chose, the product's photo, name and size, and the address of the product page. We process them exactly as any other upload (section 6), charge the render's credits to Your account, and store the result so the extension can show it to You and You can download it. We record that a render happened, and whether it succeeded, to run and improve the service.
• iPhone photos: HEIC photos are converted in Your browser. If that fails, the photo is sent to MeltFlex to be converted and is not stored.
• Sign-in: You sign in with Your MeltFlex account. The extension keeps an access credential in Your browser and We keep it only as a one-way hash. It is used for Your renders and credit balance, and for nothing else.

The extension does not show ads, does not sell or share Your data with anyone for advertising, and does not use it for anything other than placing products into Your rooms. Signing out of the extension revokes its credential. Removing the extension from Chrome deletes the room photos and everything else it kept in Your browser. Renders already made stay in Your account until You delete them or Your account.

9. Data Sharing and Third-Party Processors

We do not sell Your personal data. We share Your data only with the following third-party service providers who process data on our behalf:

• Supabase (database and authentication hosting)
• Stripe (subscription payment processing)
• Google Cloud Platform (AI image and video processing, cloud storage)
• Meshy (3D model reconstruction from photos)
• Vercel (website hosting)
• PostHog (product analytics and session recording)
• Google Analytics (website traffic analytics)
• Google Ads (advertising conversion tracking)

Each processor is bound by data processing agreements and processes data only as instructed by Us. We ensure all processors provide adequate data protection.

10. International Data Transfers

Some of our third-party processors operate outside the European Economic Area (EEA). Where data is transferred outside the EEA, We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or adequacy decisions.

11. Data Security

We implement appropriate technical and organizational security measures to protect Your personal data, including:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure authentication with session management
• Access controls limiting data access to authorized personnel
• Regular security reviews and monitoring

While We strive to protect Your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

12. Data Retention

• Account data: Retained while Your account is active. Deleted within 30 days of account deletion request.
• Design projects and uploads: Retained while Your account is active. Deleted when You delete a project or Your account.
• Payment records: Retained for up to 10 years as required by Slovak tax and accounting law.
• Analytics data: Retained for up to 24 months, then anonymized or deleted.
• Support communications: Retained for up to 24 months after resolution.

13. Your Rights Under GDPR

As a data subject, You have the following rights:

• Right of Access: Request a copy of the personal data We hold about You
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of Your personal data (“right to be forgotten”)
• Right to Restrict Processing: Request that We limit how We use Your data
• Right to Data Portability: Receive Your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interest
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at info@meltflexai.com. We will respond within 30 days. You also have the right to lodge a complaint with Your local data protection authority. In Slovakia, this is the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).

14. Children's Privacy

Our Platform is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If We become aware that We have collected data from a child under 16, We will delete it promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. Continued use of the Platform after changes constitutes acceptance of the revised policy.

16. Contact Us

If You have any questions about this Privacy Policy or how We handle Your data, please contact us:

Email: info@meltflexai.com

MeltFlex s.r.o.

Bratislava, Slovak Republic