Privacy
Your data and your choices.
Effective 1 October 2026 · Version 2026-10-01 · early access
- Who is responsible
- ArchiStudio is operated by iSkale Group FZ LLC, United Arab Emirates. Contact hello@iskalegroup.com for privacy questions, business identity details or a rights request. This notice applies to ArchiStudio accounts and services; other iSkale brands have their own notices.
- Information we process
- Account and contact details, workspace membership, projects, messages to the Agent, prompts, uploaded references, generated outputs, material specifications, support correspondence, subscription status and credit transactions. Stripe collects payment-card details directly; we receive billing identifiers, subscription and payment status, and relevant invoice information, not your full card number.
- Why we use it
- We process information to create and secure your account, deliver requested generation and storage, manage your subscription, prevent abuse, respond to support requests and meet applicable recordkeeping obligations. Where applicable, these purposes rely on performing our agreement, legal obligations or legitimate interests in a secure, functioning service. Optional tips and promotions are based on your separate choices and can be withdrawn without losing account access.
- Your workspace and sharing
- Workspace members can access the records and files their permissions allow. Files are private by default and use expiring signed links. Anyone holding a signed link can access it during its validity; caches and downloaded copies can outlast it. Public examples are stored separately. Only publish or share material you have permission to disclose.
- AI processing
- A generation request sends your prompt and selected references to the selected engine providers; Agent requests include the conversation and relevant workspace context. Kie.ai and its upstream model services process images and video, Tripo processes generated 3D models, and Anthropic processes Agent requests. ArchiStudio does not train its own models on your project content. Provider retention and training terms vary: we do not promise that every engine has identical confidentiality or no-training terms. Assess the selected service before uploading confidential client information.
- Other services and international processing
- Supabase provides authentication, database, storage and server functions; our current database and storage project is in Frankfurt. Vercel delivers the app, Resend delivers account and optional emails, and Stripe handles billing. Their processing and AI-provider processing can occur in other countries. Google Drive is used when you connect it and select files. Address searches can be sent to OpenStreetMap Nominatim or Photon; Google Fonts receives browser network requests. The Security page lists these services. Contact us for the relevant processing arrangements before requiring specific residency or contractual safeguards.
- Product activity and local storage
- We record product actions, credit usage and campaign attribution to understand activation, improve the service and investigate faults. Attribution respects browser Do Not Track and Global Privacy Control signals. Essential session and security processing still occurs. Browser diagnostics record a category, route and code location, not project contents, prompts, file URLs or access tokens, and are retained for up to 30 days. Browser storage holds your session, preferences and local recovery drafts; clearing it can remove unsaved work. No advertising-pixel consent is implied by creating an account.
- Email choices
- Confirmation, password recovery, billing and other necessary account messages are distinct from optional product guidance and promotions. Optional emails require the corresponding preference, include an unsubscribe link and can be disabled in Settings. We record choice changes, delivery status, bounces and complaints; a minimal suppression record prevents further unwanted or undeliverable email. We do not automatically subscribe an Archispace or another brand’s audience to ArchiStudio marketing.
- Retention and deletion
- We keep account, workspace and project information while needed to provide the service, resolve support matters and meet applicable obligations. Deleting an asset removes its workspace file and record through the app’s deletion flow; archiving a project does not delete its files. Account or workspace deletion requires a request and an ownership check. Billing, agreement and security records may need separate retention for legal obligations or disputes; we will explain relevant exceptions. Backups, provider copies, browser drafts and exported files have separate lifecycles, so deletion does not imply instantaneous erasure of every copy.
- Your requests
- Email hello@iskalegroup.com with the subject Privacy request to request access, correction, export or deletion, or to raise an objection, restriction or consent-withdrawal request where applicable. We verify identity and workspace authority before disclosing or deleting data, explain any retained records and provide progress information. You may also contact the competent data-protection authority where applicable. Never send passwords or full card details.
- Changes
- The version and effective date appear below. We will make material changes visible in the product or by an appropriate account notice. Acceptance of terms is recorded separately from acknowledging this notice and from optional email permissions.