Privacy Policy

The controller is Aviz Studio Ltd. (Авиз Студио ЕООД), UIC/EIK 175231723, VAT ID BG175231723, with registered office and management address at 64 Bigla St., Apt. 20, 1164 Sofia, Bulgaria.

For privacy questions and requests: support@aviz.me; telephone: +359 888 993 790.

Account and sign-in data: email address, account identifier, chosen sign-in method, session data, and language preference. If you sign in through an external provider, we may also receive a name and profile image where authorised on the sign-in screen.

Content and results: uploaded photographs, text instructions, generated variants and final images, selected settings, and technical generation metadata. Uploaded files may contain embedded EXIF or other metadata, including date, device, and location, unless you remove it before upload.

Plans: the house you create in the planner (plot, settings, roof, and layout) is kept only in the current browser tab while you work. When you generate images from a plan, we save the house with the job so you can open it again from My concepts. The image of the plan or 3D view that we send for generation is processed like an uploaded photograph.

Technical data: IP address, date and time, browser and device, requests, security cookies and local storage, error, queue, performance, rate-limit, and security records. On a first visit, we use an approximate country from network headers to select an initial language and store the choice in a necessary cookie. When remotely hosted fonts load, your browser sends a standard network request, including IP address and technical data, to a font-delivery provider.

Purchase data: payment-provider order reference, product, quantity, email, payment status, credit-redemption token or hash, and related records used to prevent duplicate fulfilment and fraud. We do not receive or store the complete payment-card number or CVC.

Communication data: name, email, telephone, message content, and any other information you voluntarily submit through the contact form or by email.

We process data where necessary to enter into and perform our contract with you: creating and securing an account, providing AI visualizations, managing credits, saving results, and providing support.

We process data to comply with legal obligations, including accounting, tax, consumer-protection, and competent-authority requirements.

We process limited technical, payment, and communication data for our legitimate interests in securing the service, preventing fraud and abuse, resolving errors, improving reliability, selecting an appropriate initial language, and establishing or defending legal claims. We balance those interests against your rights and expectations.

Where the law requires consent, such as for future non-essential cookies or direct marketing, we will request it separately. You may withdraw it at any time for future processing.

To generate images, we send the necessary photographs, instructions, and technical parameters to an AI-processing provider. The specific provider may change according to the current configuration. The provider returns the generated result to AVIZ.ME.

The AI-processing provider may temporarily retain inputs and results to provide and secure the service, prevent abuse, and improve reliability under the applicable agreement and settings. Where an appropriate business configuration is available, we select settings intended to limit use of the content for training generative AI models. We do not authorise use of your content for direct marketing.

Retention rules and permitted service improvement may vary with the feature used and current configuration. You can ask support@aviz.me for current information about the processing categories applicable to a feature.

Do not use the service for special-category personal data or images of identifiable people unless you have a valid legal basis and all necessary permissions.

An external payment provider acts as Merchant of Record and independently processes payment details, taxes, invoices, fraud checks, monetary refunds, and chargeback procedures under its own privacy policy and shopper terms.

We receive from the payment provider only the data needed to verify an order, provide credits, prevent duplicate fulfilment, and provide support. For data collected directly on the checkout page, the provider determines its own purposes and retention periods.

We use a limited group of providers for application hosting and execution, authentication and database, private file storage and delivery, AI processing, payments, email, the contact form, and font delivery. The specific providers may change according to the feature used and current configuration.

We disclose only the data needed for the relevant function. Data may also be disclosed to professional advisers, a competent authority, or a party to a legal dispute where necessary and lawful. We do not sell your personal data.

Some providers or their subprocessors may process data outside the European Economic Area. Where required by applicable law, a transfer relies on an adequacy decision, standard contractual clauses, or another recognised mechanism and appropriate supplementary measures.

You can ask support@aviz.me for information about the applicable mechanism and a copy or description of the relevant safeguards, subject to redaction of protected commercial or confidential information.

Temporary generation files are normally deleted automatically after about 2 days, and completed queue-job records after about 14 days. These periods may be extended temporarily following an error, abuse investigation, or technical recovery.

Your account, credit balance, saved final images, saved plans, and associated history are retained until you request deletion or the account is closed under the Terms. You can request deletion of the account and its content at support@aviz.me. Limited records may be kept longer where needed for a legal obligation, security, fraud prevention, or a legal dispute, and backups may remain until overwritten in the normal backup cycle.

Purchase, invoice, and accounting data are retained for applicable statutory periods. Security, fraud, communication, and legal-claim records are retained only while needed for their purpose and are then deleted or anonymised.

We use necessary cookies and similar technologies for sign-in, security, language preference, workflow state, and protected image delivery. They are needed for a function you request or for secure operation of the service.

The application currently does not use non-essential analytics or advertising cookies. If we add them, we will provide information and request prior consent where required.

We use access controls, private file storage, time-limited links, encrypted transmission, payment verification, request limits, and other organisational and technical measures. No system is completely secure, so notify us promptly if you suspect unauthorised access.

Subject to applicable law, you may request access, a copy, correction, erasure, restriction, or portability of your personal data and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing.

Send a request to support@aviz.me. We may request reasonable information to verify your identity. We will respond within the period required by applicable law. Some data cannot be deleted immediately where needed for a legal obligation, security, or a legal claim.

You may lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg) or the supervisory authority in the EU/EEA country where you habitually live or work, or where you believe an infringement occurred.

The service uses automated AI models to create images and automated security and rate-limit checks. They do not make decisions that produce legal effects or similarly significantly affect you.

The service is intended only for people aged 18 or older. We do not knowingly collect children's data. If you believe a child has provided data to us, contact us so it can be deleted.

We may update this policy when the service, providers, or law changes. The new version and its date will be published here. We will provide additional notice of a material change where required.