Privacy Policy

Hanoos sp. z o.o., with registered office at Złota 2/19, 15-016 Białystok, Poland, operates this website and its credit-based interior design services. It is registered under KRS0000783002, EUID PLKRS.0000783002, REGON383153787, and acts as the data controller. Contact us at [email protected] or +48 85 746 10 72.

This is a working prototype. Design concepts, analyses and budgets shown on the site are illustrative demonstrations rather than the output of a live vision model.

Account data — first name, last name, email address and the password you set during checkout registration.

Order data — the number of credits ordered, currency, promotional code, selected payment method, order reference and payment status.

Room content — photographs you upload, the room type, your written brief, priorities, style selections, budget range and refinement requests.

Technical data — IP address, browser and device type, pages viewed and approximate region, collected through essential and optional cookies.

To create and maintain your account, to process credit purchases and reconcile bank transfers, to produce the design outputs you spend credits on, to provide customer support, to detect fraud and abuse, and to meet accounting and tax obligations.

Our legal bases are performance of a contract (delivering the services you ordered), legitimate interests (site security, service improvement), consent (optional analytics cookies and marketing email) and legal obligation (financial records).

Photographs of your home are treated as sensitive by us even where the law does not require it. They are used only to generate the outputs you requested, are never sold, and are never published as inspiration or marketing material without your separate written permission.

You can delete an uploaded photo from a project at any time. Deleted photos are removed from active storage immediately and purged from backups within 30 days.

Bank transfer is currently the only active payment method. We receive your name, order reference and the transferred amount from our bank; we never see or store full card numbers. When card, PayPal and Stripe payments become available, those transactions will be handled by the respective payment provider under its own privacy notice.

We share data only with processors that help us run the service — hosting, email delivery, payment processing and error monitoring — each bound by a written data processing agreement. Where a processor is located outside the European Economic Area, transfers rely on the European Commission's standard contractual clauses.

Account and project data is kept while your account is open and for 12 months after your last activity. Invoices and payment records are kept for 10 years where tax law requires it. Cookie-derived analytics data is kept for 14 months.

You can request access to your data, correction of inaccuracies, deletion, restriction of processing, portability of the data you provided, and you can object to processing based on legitimate interests. Where processing rests on consent you may withdraw it at any time. Write to[email protected] and we will answer within one month. You also have the right to complain to your national data protection authority.

Data is encrypted in transit, passwords are stored only as salted hashes, access to production systems is limited to staff who need it, and we log administrative access. No system is perfectly secure, so we also maintain an incident response process and will notify you and the relevant authority of a qualifying breach without undue delay.

We update this policy when our processing changes. Material changes are announced on this page and, for registered users, by email at least 14 days before they take effect.