Privacy Policy

We collect information you provide directly when you: • Place an order for a plan review service • Begin an order: we save your name, email, and progress so you can resume an incomplete order, and may send up to three reminder emails over the following nine days, each with an unsubscribe link • Take our readiness quiz, request the Kitchen Pre-Order Checklist, or download a sample review: we save your email and, for the quiz, your answers and score, so we can send what you asked for and the offer described on that page • Upload kitchen plan files for review • Contact us via email, form, or phone • Subscribe to our newsletter Personal information we may collect includes: • Full name, email address, and phone number • Project zip code and role (homeowner, contractor, designer) • Billing information (processed securely by Stripe, we never store full card details) • Uploaded plan files, photos, notes, and project details • Readiness quiz answers and score, if you take the quiz • Communication history with our team We also automatically collect: • Log data (IP address, browser type, pages visited) • Device information (operating system, screen size) • Cookies and similar tracking technologies (see Section 6)

We use collected information to: • Process, deliver, and follow up on your plan review orders • Send order confirmations, review delivery notifications, and transactional emails • Respond to your questions and provide customer support • Send design tips and promotional content (only with consent, unsubscribe anytime) • Improve our services, website experience, and internal operations • Detect and prevent fraud, abuse, and security incidents • Comply with legal obligations We never sell, rent, or share your personal information with third parties for their marketing purposes. Your plan files are used exclusively to perform the review you ordered.

We take the confidentiality of your plan files seriously: • Files are used solely to perform the review service you purchased • Files are stored on encrypted servers with access limited to your assigned reviewer • Files are retained after delivery so we can answer follow-up questions, and we do not delete them on a schedule • Your delivery link expires 90 days after your review is delivered; after that the review is no longer reachable from that link, though your files remain on our storage • You can ask us to delete your files at any time and we will • Files are never shared with Home Depot, Lowe's, cabinet suppliers, or any third party You retain full ownership of all intellectual property in your design plans. By uploading, you grant Design Glance a limited license only to perform the review service.

We may share your information only with: • Service providers who help us operate: Stripe (payments), Vercel (website hosting), Neon (our database), Cloudflare (encrypted storage for your plan files), Resend (sending our emails), Sentry (error monitoring, which receives technical details of a failure such as the page address and request data, never your plan files), and Clerk (sign-in for our own staff, not for customers). These providers are contractually required to protect your data and may only use it to serve us. • Google Analytics 4, which we use to understand how visitors find and move through this website. It sets cookies and collects your IP address (truncated by Google before storage), device and browser type, approximate location derived from that address, the pages you view and the links you follow. It does not receive your name, email address, or any plan file you upload. Google acts as our processor for this data. Analytics are OFF until you turn them on: we ask on your first visit and default to denied, so nothing is collected unless you accept. If your browser sends a Global Privacy Control signal we treat that as a refusal, honour it without asking, and do not override it even if you accepted previously. You can change your mind at any time using the “Cookie choices” link in the footer of any page. You can also opt out with Google's browser add-on at tools.google.com/dlpage/gaoptout, or by blocking cookies in your browser. • PostHog, which we use for the same purpose alongside Google Analytics: understanding how visitors find and move through this website. It sets cookies and collects your IP address, device and browser type, the pages you view and the links you click. It does not receive your name, email address, or any plan file you upload. Accepting also allows PostHog to record how you move through our marketing pages and order form (scrolling, clicks and page layout) so we can see where the form is confusing, since one acceptance covers analytics and recording together with no separate step. In those recordings every piece of on-page text and everything you type is masked before it leaves your browser, and no page that shows your plan, your review or your order status is ever recorded. Recording is off unless you accept, and can be switched off at any time using the same footer link. Analytics requests are routed through our own domain rather than sent directly to PostHog. PostHog acts as our processor for this data. It is covered by the same choice as Google Analytics: OFF until you accept, refused automatically if your browser sends a Global Privacy Control signal, and changeable at any time using the “Cookie choices” link in the footer of any page. • Anthropic, only if you use the chat assistant on our website: the messages you type to the assistant are sent to Anthropic to generate its replies, and we keep a transcript of the conversation to improve the service. The assistant tells you it is automated. Please do not share plan files or personal details with it that you would not put in an email to us. • Law enforcement or government agencies when required by law or to protect safety, rights, or property. • A successor entity in the event of a merger, acquisition, or asset sale; you would be notified in advance. We do not sell personal information to data brokers, advertisers, or third-party marketing platforms.

We implement appropriate technical and organizational measures to protect your data: • Encryption of plan files and personal data at rest and in transit (TLS/SSL) • Role-based access controls limiting file access to assigned reviewers • PCI-DSS compliant payment processing through Stripe • Regular security reviews and team training No method of electronic transmission or storage is 100% secure. While we use commercially reasonable safeguards, we cannot guarantee absolute security. In the event of a data breach, we will notify affected users as required by applicable law.

We use cookies and similar technologies to: • Maintain your session and remember preferences • Analyze website traffic and usage patterns • Improve site performance and user experience You can control cookies via your browser settings. Disabling certain cookies may affect site functionality. We do not use tracking cookies for behavioral advertising or cross-site retargeting.

Depending on your location, you may have rights to: • Access: Request a copy of the personal information we hold • Correction: Request correction of inaccurate data • Deletion: Request deletion of your personal information (subject to legal retention) • Portability: Request your data in a machine-readable format • Opt-out: Unsubscribe from marketing emails via the link in any email • Do Not Sell: We do not sell personal information, no opt-out needed To exercise any right, contact hello@designglance.com. We respond within 30 days or as required by law.

We retain information as long as necessary to: • Fulfill the purpose for which it was collected • Comply with legal obligations (e.g., tax records for 7 years) • Resolve disputes and enforce agreements Plan files are retained indefinitely on encrypted storage; we do not run an automatic deletion schedule. The delivery link for a completed review expires 90 days after delivery. Plan files and account data are deleted on request, subject to legal requirements. Anonymized aggregate data may be retained for business analytics.

Our services are not directed to individuals under 18. We do not knowingly collect information from children. If you believe we have inadvertently collected such information, contact us immediately and we will delete it.

We may update this Privacy Policy periodically. Material changes will be communicated via: • Email to the address associated with your account • A notice on our website before changes take effect Continued use of our services after changes constitutes acceptance of the updated policy.

For questions about this Privacy Policy or our data practices: Email: hello@designglance.com Mailing address: Design Glance, Inc., 747 NY-28, Kingston, NY 12401 We are committed to resolving privacy concerns promptly and transparently.