Upgrade PlanSTART 2 FREE DESIGNS

Privacy Policy

Last Updated: March 2026

1. Introduction

MeltFlex s.r.o. (“MeltFlex”, “We”, “Us”, “Our”) is committed to protecting Your privacy. This Privacy Policy explains how We collect, use, store, and protect Your personal information when You use our AI interior design platform at www.meltflexai.com (the “Platform”).

By using our Platform, You agree to the collection and use of information in accordance with this Privacy Policy. If You do not agree, please do not use the Platform.

2. Data Controller

The data controller responsible for Your personal data is:

MeltFlex s.r.o.

Bratislava, Slovak Republic

Email: info@meltflexai.com

MeltFlex s.r.o. is subject to the General Data Protection Regulation (GDPR) as a company established in the European Union.

3. Information We Collect

3.1 Information You Provide Directly:

  • Email address (when creating an account or signing in with Google)
  • Name (if provided via Google sign-in or account settings)
  • Payment information (processed securely by Stripe; We do not store Your card details)
  • Room photos and floor plans You upload for AI design generation
  • Design projects and workspace data You create on the Platform
  • Communications You send to us (support requests, feedback)

3.2 Information Collected Automatically:

  • Device information (browser type, operating system, screen resolution)
  • IP address and approximate geographic location
  • Pages visited, features used, and actions taken on the Platform
  • Session recordings (with sensitive inputs like passwords masked)
  • Referral source (how You found our Platform)
  • Cookies and similar technologies (see our Cookie Policy for details)

4. How We Use Your Information

We use Your personal data for the following purposes:

  • Providing the Service: To create and manage Your account, process Your room photos and floor plans through our AI, generate design visualizations, and save Your projects
  • Subscription Management: To process subscription payments, manage billing cycles, and provide access to paid features
  • Platform Improvement: To understand how users interact with our Platform, identify bugs, and improve features through analytics
  • Communication: To respond to Your support requests and send essential service notifications (e.g., subscription confirmations, password resets)
  • Legal Compliance: To comply with applicable laws, regulations, and legal obligations

We do not use Your personal data for automated decision-making or profiling that produces legal effects.

5. Legal Basis for Processing (GDPR)

We process Your personal data on the following legal bases:

  • Contract Performance: Processing necessary to provide You with the Platform and fulfill our subscription agreement with You
  • Legitimate Interest: Analytics and Platform improvement, fraud prevention, and security
  • Consent: Marketing communications (where applicable, and only with Your explicit consent)
  • Legal Obligation: Retaining financial records as required by Slovak and EU law

6. AI-Generated Content and Your Uploads

When You upload room photos or floor plans, our AI processes these images to generate design visualizations. Your uploaded images and generated designs are stored securely to allow You to access Your projects. We do not use Your personal photos or designs to train AI models without Your explicit consent.

AI-generated visualizations are provided for informational and planning purposes. They are not architectural drawings and should not be used as construction documents.

7. Data Sharing and Third-Party Processors

We do not sell Your personal data. We share Your data only with the following third-party service providers who process data on our behalf:

  • Supabase (database and authentication hosting)
  • Stripe (subscription payment processing)
  • Google Cloud Platform (AI image processing and cloud storage)
  • Vercel (website hosting)
  • PostHog (product analytics and session recording)
  • Google Analytics (website traffic analytics)
  • Google Ads (advertising conversion tracking)

Each processor is bound by data processing agreements and processes data only as instructed by Us. We ensure all processors provide adequate data protection.

8. International Data Transfers

Some of our third-party processors operate outside the European Economic Area (EEA). Where data is transferred outside the EEA, We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or adequacy decisions.

9. Data Security

We implement appropriate technical and organizational security measures to protect Your personal data, including:

  • Encryption in transit (HTTPS/TLS) and at rest
  • Secure authentication with session management
  • Access controls limiting data access to authorized personnel
  • Regular security reviews and monitoring

While We strive to protect Your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

10. Data Retention

  • Account data: Retained while Your account is active. Deleted within 30 days of account deletion request.
  • Design projects and uploads: Retained while Your account is active. Deleted when You delete a project or Your account.
  • Payment records: Retained for up to 10 years as required by Slovak tax and accounting law.
  • Analytics data: Retained for up to 24 months, then anonymized or deleted.
  • Support communications: Retained for up to 24 months after resolution.

11. Your Rights Under GDPR

As a data subject, You have the following rights:

  • Right of Access: Request a copy of the personal data We hold about You
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of Your personal data (“right to be forgotten”)
  • Right to Restrict Processing: Request that We limit how We use Your data
  • Right to Data Portability: Receive Your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interest
  • Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at info@meltflexai.com. We will respond within 30 days. You also have the right to lodge a complaint with Your local data protection authority. In Slovakia, this is the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).

12. Children's Privacy

Our Platform is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If We become aware that We have collected data from a child under 16, We will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. Continued use of the Platform after changes constitutes acceptance of the revised policy.

14. Contact Us

If You have any questions about this Privacy Policy or how We handle Your data, please contact us:

Email: info@meltflexai.com

MeltFlex s.r.o.

Bratislava, Slovak Republic