Privacy Policy

RetailDesign.ai is an AI design tool for retail and commercial interiors. It is operated by Vishal Pawar, trading as RetailDesign.ai, New Delhi, India (“we”, “us”). We are the data controller for the personal data described in this policy. Questions and requests go to info@retaildesign.ai.

This policy applies to retaildesign.ai, the signed-in product, and the client review pages we host for our users. It was last updated on 16 September 2026.

Account data. Name, email address and password (stored hashed by our authentication provider), or the identity we receive if you sign in with Google. Your plan, credit balance and billing status.

Design data. The photos, floor plans, sketches, brand books and written briefs you upload or type, the images and scenes our tools generate from them, project names, notes and brand guidelines, and the review comments and approvals your clients leave.

Payment data. Payments are collected by Dodo Payments. We receive your name, email, plan, amount, currency, country and a transaction reference. We never see or store full card numbers.

Usage data. Which tools you use, how many credits each action costs, generation successes and failures, and error reports. With your consent (see §7), page views and session replays.

Messages. What you send through the contact form, bug reports and email.

Data about people who are not our users. If you share a project with a client through a review link, we collect the client’s name, email and comments when they choose to leave them. If someone submits the contact form, we collect what they send. This policy applies to them too.

• To provide the service (contract): run your account, generate designs from your inputs, save your projects, host your client review links, process payments and manage credits.
• To keep the service working and secure (legitimate interest): error reporting, abuse and fraud prevention, rate limiting, backups.
• To understand how the product is used (consent): analytics and session replay load only after you accept them. You can withdraw at any time.
• To communicate with you (contract and legitimate interest): service notices, replies to your messages, billing messages from Dodo, and a short series of onboarding emails after you sign up, which you can stop with the unsubscribe link in any of them.
• To meet legal obligations: tax and accounting records, responding to lawful requests.

We do not sell personal data. We do not use your uploads or outputs to train AI models, and we do not permit our AI providers to do so (see §5).

When you run a tool, the image and the text you provide are sent to a third-party AI model to produce the output. Today those providers are Google (Gemini API) and OpenAI (Image API). Both operate under API terms that state inputs are not used to train their models. Inputs are transmitted to their servers, which may be outside your country, for the time needed to generate the result. Outputs are returned to us and saved to your project or gallery.

Brand books you upload to Design Studio are processed the same way to extract fixtures and materials. Upload only documents you have the right to share with us.

Generated images are stored in our file storage and, while you only have free credits, carry a visible watermark. Free-plan generations may appear in our public gallery only if you choose to publish them.

We use these providers. Each is bound by its own contractual data-protection terms with us.

• Supabase · database, authentication and file storage · hosted in Mumbai, India.
• Vercel · website and application hosting, image storage · United States and global edge locations.
• Google · AI generation (Gemini API); Google Analytics with your consent · United States.
• OpenAI · AI generation (Image API) · United States.
• PostHog · product analytics, session replay (with consent) and error reporting · United States.
• Resend · sending account and product emails (welcome, tips, usage notices) · United States.
• Dodo Payments · checkout, subscriptions, invoices, tax collection and refunds, as merchant of record · see Dodo’s own privacy policy for the payment transaction.

We may also share data with professional advisers, with authorities when the law requires it, and with a successor if the business is sold. We will tell you before a sale changes who controls your data.

Your data is stored in India and processed in the United States by the providers above. Where data of people in the EU, UK or other countries with transfer rules moves to these providers, we rely on their standard contractual clauses and equivalent safeguards. Ask us at info@retaildesign.ai if you want a copy of the safeguards that apply to you.

Essential. A sign-in session cookie, a cookie that remembers your cookie choice (named rd_consent, kept for 12 months), and short-lived cookies that protect client review links you have password-protected. These are needed for the site to work and do not require consent.

Analytics, only if you accept. PostHog and Google Analytics load after you click Accept on the banner. PostHog includes session replay, which records how pages are used. Text you type is masked in replays; images and designs shown on screen are not. You can change your mind at any time through Cookie preferences in the footer, which clears the choice and stops the tools loading.

Always on. Server-side error reports are sent to PostHog regardless of your cookie choice. They contain the error, the page and your user ID so we can fix problems in your account. They do not contain your designs.

• Account, projects, uploads and generated designs: for as long as your account exists. Cancelling a subscription does not delete anything; your work stays in your account on the free plan.
• Deleted images and projects: removed from your account immediately and from backups within 30 days.
• Payment and invoice records: as long as tax and accounting law requires, typically 8 years in India.
• Contact messages and bug reports: up to 2 years.
• Analytics and replays: per PostHog and Google Analytics retention settings, currently 12 months or less.
• Server logs: 1 day on Vercel.
• Email delivery logs: per Resend's retention, currently 30 days or less.

To delete your account and everything in it, email info@retaildesign.ai from your account address. We complete deletion within 30 days and confirm by email. There is not yet a self-service delete button.

Depending on where you live, you can ask us to access, correct, delete or export your personal data, to restrict or object to processing, and to withdraw consent. Email info@retaildesign.ai; we respond within 30 days and may ask you to confirm your identity. If you are in the EU or UK you can also complain to your data-protection authority. If you are in India, our grievance officer is Vishal Pawar, reachable at the same address, and we resolve grievances within the time the Digital Personal Data Protection Act requires.

Data is encrypted in transit and at rest by our providers. Access to production systems is limited to the operator. Client review links are unguessable tokens and can be password-protected and revoked. No method is perfect; if we learn of a breach affecting your data we will tell you and the relevant authority as the law requires.

The service is for businesses and professionals. You must be 18 or older to create an account. We do not knowingly collect data from children.

We will post changes on this page and update the date at the top. For material changes we also show a notice in the product. Continuing to use the service after a change means you accept it.

Vishal Pawar, trading as RetailDesign.ai, New Delhi, India · info@retaildesign.ai · or the contact page.