Privacy policy
Sofaplot collects as little as it needs to save your rooms and run the tools you use. It has no ads, sells nothing about you, and doesn't track you across other sites.
Without an account
You can plan rooms without signing in. Your rooms, settings and any room photo you add stay in your browser's own storage on your device. They aren't sent to us, and they're gone if you clear your browser's data.
With an account
When you create an account we keep:
- Your email address and a securely hashed password (or the sign-in from a provider such as Google, if you use one), to sign you in.
- Your rooms and layouts, and pieces you build or add from photos, so they're there on any device.
- Your plan and Sofa Token balance, with a record of tokens added and spent.
- Pictures made with the AI tools, and pictures you choose to save, in your private My pictures.
Your room photo for the photo view stays on your device unless you use an AI tool with it.
AI tools
When you use an AI tool, the picture involved (your 3D view, your room photo, a furniture photo or screenshot, or a floor plan) and a short description of the pieces are sent to OpenAI to produce the result. OpenAI processes it for us under its API terms: it doesn't use it to train its models, and may keep it for up to 30 days to detect abuse. We send a scrambled identifier, never your email. If you give Sofaplot a link to a picture, our server fetches that picture for you.
On a store's website
When you use "Will it fit your room?" on a store's website, your room stays with Sofaplot and never goes to the store. The store gets anonymous counts for its dashboard: which of its products were checked, the result (fits, fits with something to check, or doesn't fit), the kind of problem (for example the doorway or the wall), whether you kept the piece in your room, and, if the store reports it, whether you added it to the cart afterwards. These are tied to a random id that lasts for that browser tab, not to you or your account, and they include no room measurements, address, IP address or other details about you.
Who processes your data
- Supabase: accounts, the database for rooms and tokens, and private storage for pictures.
- OpenAI: the AI tools, only when you use them.
- Cloudflare: hosts the website and keeps standard, short-lived request logs for security.
- Resend: sends account emails (confirmation, sign-in links, password resets).
- Stripe, once paid plans open: handles payments. We never see or store your card details.
These providers may process data in the United States and other countries.
Cookies and storage
Sofaplot doesn't use advertising or analytics cookies. It uses your browser's storage to keep you signed in and to remember your rooms and settings on this device.
Keeping and deleting your data
We keep your data while you have an account. You can delete rooms, pieces and pictures yourself at any time. To delete your whole account and everything in it, email [email protected] from the address you signed up with; we'll do it within 30 days. You can also ask for a copy of your data or for a correction the same way.
Children
Sofaplot isn't meant for children under 13, and we don't knowingly create accounts for them.
Security
The site is only served over HTTPS. Each account can reach only its own rooms, pieces and pictures, enforced by the database itself, and payment and AI keys stay on our servers, never in the app.
Changes
If this policy changes in a way that matters, we'll update the date below and, for significant changes, tell signed-in users in the app.
Contact
Last updated October 21, 2026.