Privacy Policy

Protecting user data is our first priority. When you visit our Website, we collect a limited set of technical information automatically — including IP address, browser type, pages visited and session duration. This data is used solely to keep the Services running smoothly, detect potential abuse and understand aggregate usage patterns. It is never used to identify individual users.

You can browse our Website without sharing any personal information. If you choose to create an account, request a demo or use Layora, we will ask for certain details. Depending on how you use the Services, this may include:

• Name and country of residence
• Email address and other contact details
• Account credentials such as username and password
• Architectural project inputs — briefs, spatial requirements, design preferences and any other content you submit to Layora for processing

We use the information we hold about you to deliver and improve our Services. Specific purposes include:

• Setting up and managing your account
• Running AI-powered floor plan generation on your project inputs
• Sending account-related and administrative communications
• Gathering feedback to improve product quality
• Enforcing our terms, preventing misuse and responding to legal obligations

We rely on one or more of the following legal bases: your consent, the performance of a contract with you, compliance with a legal obligation, or our legitimate interest in operating and improving the Services. We will clarify the applicable basis on request.

You may request the deletion of personal information we hold about you at any time. To delete specific data or close your account entirely, please reach out to us directly. Where we are required to retain certain records for legal or compliance reasons, we will keep only what is strictly necessary and for no longer than required.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes. We may share information with:

• Service providers — companies that support our infrastructure, analytics or operations, bound by confidentiality obligations and permitted to use data only on our behalf
• AI infrastructure partners — for the purpose of running model inference; data is transmitted securely and not retained beyond the request
• Legal authorities — where required by law, court order or to protect the rights and safety of RemmeyAI or others
• Acquirers — in connection with a merger, acquisition or sale of assets, subject to equivalent privacy commitments

We retain your personal data for as long as your account is active or as otherwise needed to fulfil the purposes described in this Policy, including legal and contractual obligations. Aggregated or anonymised data may be kept indefinitely. Once a retention period expires, data is deleted from active systems within 30 days and from backups within 90 days.

Our infrastructure may be located in multiple regions. If you are in the European Economic Area, the United Kingdom or Turkiye, your data may be transferred to and processed in countries with different data protection frameworks. When this occurs, we put in place appropriate safeguards — such as Standard Contractual Clauses — to ensure your information remains protected to the same standard required in your home jurisdiction.

Depending on your location, you may have the right to access, correct, delete or restrict processing of your personal data, to receive it in a portable format, to object to processing carried out on the basis of legitimate interests, and to withdraw consent at any time. To make a request, contact us at the address in Section 13. We will respond within 30 days. EEA and UK residents may also lodge a complaint with their national data protection authority.

Where we process your personal data on the basis of legitimate interests or a task carried out in the public interest, you may object at any time by explaining how the specific processing affects you. We will review the objection and either cease processing or provide compelling grounds for continuing.

If you are based in the European Economic Area, you have the following rights in relation to your personal data:

• Access — obtain a copy of the personal data we hold about you
• Rectification — ask us to correct or complete inaccurate information
• Erasure — request deletion under the conditions set out in this Policy
• Objection — object to processing based on legitimate interests
• Restriction — ask us to pause processing while a dispute is resolved
• Portability — receive your data in a structured, machine-readable format
• Withdrawal of consent — withdraw previously given consent at any time
• Complaint — contact your local supervisory authority if you believe your rights have been infringed

Send any privacy-related request to the contact details in Section 13. We may ask you to verify your identity before acting on the request. Please include enough detail for us to locate your information and understand what you are asking for. We will not be able to respond if we cannot confirm that the request relates to your data.

Our Services are intended for professional and business use and are not directed at anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

We use cookies and similar technologies to keep you logged in, remember your preferences and understand how the Services are used. Essential cookies are required for the platform to function. Analytics cookies help us improve the product. You can adjust cookie settings in your browser at any time, though disabling certain cookies may limit your access to some features.

Our Website does not track users across third-party sites over time. Some third-party services embedded in our pages may operate independently and maintain their own tracking practices — their policies govern that activity.

We use industry-standard technical and organisational measures to protect your information — including encryption in transit and at rest, access controls and regular security reviews. No system connected to the internet is entirely immune to risk. In the event of a breach that poses a meaningful risk of harm, we will notify affected users and relevant authorities as required by law.

If we become aware that your personal information has been accessed or disclosed without authorisation, we will investigate promptly, take steps to contain the incident and notify affected individuals by email where there is a reasonable risk of harm or where notification is legally required.

We may update this Policy from time to time. If we make changes that affect how we handle your personal data in a meaningful way, we will let you know by email before those changes take effect. The updated Policy will apply from the date shown at the top of this page. Continued use of the Services after that date constitutes acceptance of the revised terms.

By using our Website and Services, you confirm that you have read and understood this Policy and agree to its terms. If you do not agree, please discontinue use of the Services.

For any questions about this Policy, requests to exercise your rights, or concerns about how we handle your data, please contact us at huseyin@remmeyai.com.