Security
Client work is confidential before it is anything else. Here is what we actually do with it.
Your drawings
Projects, versions, and renders are scoped to your account. Every query that reads a project checks ownership first — there is no code path that returns another account's work.
Credentials
You sign in with Google, so there is no password of ours to leak or reuse. API keys are stored as a SHA-256 hash: the full key is shown once at creation and cannot be retrieved afterwards, so a database leak cannot be replayed against the API.
Sharing
Client links carry a random token, not a guessable id, and are excluded from search indexing by robots.txt and a per-page noindex. Each link has independent toggles for comments, dimensions, and source downloads, and can be revoked at any time.
Payments
Card details never reach our servers. Checkout and the billing portal are hosted by Stripe, and we store only a customer id and subscription status. Stripe webhooks are signature-verified before any account change is applied.
Third-party processors
nanobananaapi.ai renders the images you upload to the Studio, Google Gemini generates floor plans, Stripe handles payments, Resend sends transactional email, and Simple Analytics counts page views without cookies. Uploads reach nanobananaapi.ai only when you run a render, through a private link to that one file.
Deleting your account
Settings → Account deletes your account along with every project, version, upload, render, and share link, and cancels any subscription first. It is immediate and cannot be undone.
Reporting a vulnerability
Email [email protected] with steps to reproduce. We’ll acknowledge within two business days and won’t pursue anyone acting in good faith.