The short version
- You can draw without an account. Until you sign in, your plan stays in your browser.
- Saved plans are stored in the European Union. We never sell your data.
- When you start an AI action, only what it needs goes to our AI provider in the United States (Anthropic). We do not train AI with your plans unless you switch that on yourself.
- No advertising, no tracking cookies. We count visits without any id.
- Download your plans or delete your account at any time.
1. Who is responsible
Squaremetry is responsible (the "controller") for the personal data described here. Squaremetry is the trade name of a sole proprietorship (eenmanszaak) registered in the Netherlands. You can reach us at the details below. We have no data protection officer, as the law does not require one for us; questions about privacy go to info@squaremetry.com.
- Business name
- Squaremetry
- Legal form
- sole proprietorship (eenmanszaak)
- Address
- Noorderwind 49, 6846 WC Arnhem, the Netherlands
- Chamber of Commerce (KvK)
- 98353810
- VAT number
- NL005326211B22
- info@squaremetry.com
If you use Squaremetry for your business and put data about your clients in it, you are the controller of that data and we process it for you. See the data processing agreement.
2. Using Squaremetry without an account
You can draw, measure and export without signing in. Your plan, its local versions (up to 20), a photo, PDF or DXF drawing you trace over, your favourites and your settings are stored in your own browser, on your device. We do not receive them.
Clearing your browser data removes them. Nothing about your plan goes to our servers until you sign in, or until you send us feedback. AI actions only work with an account.
3. What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address, and your name and picture if you add them | To create your account and sign you in | Contract (Art. 6(1)(b)) |
| Sign-in codes and links (stored scrambled, valid for 10 and 5 minutes) | To check it is really you | Contract |
| Passkeys you add (a public key, never your fingerprint or face) | To sign you in without a code | Contract |
| Sign-in with Google, Apple or Microsoft, once we offer it: your name, email address and picture from that account. We do not keep their access keys | To sign you in with an account you already have | Contract |
| Sessions: IP address, browser and device type | To keep you signed in and to spot misuse of your account | Contract and legitimate interest (security) |
| Your devices: a scrambled id of the cookie on that device, the device name and when you used it | To keep at most 2 devices signed in at once and to email you when you sign in on a new device | Contract and legitimate interest (security) |
| Counters per IP address for sign-in attempts and link codes | To stop people from guessing codes | Legitimate interest (security) |
| Free home and free AI help questions: which account took them, a hash of the cookie on your device and a keyed hash of your network (the first part of your IP address), never the address itself; and a count of new accounts per IP address per hour | To stop abuse of the free home and the free questions with ever new accounts; an email address from a disposable service gets neither. Kept 30 days | Legitimate interest (fair use of the free offer) |
| Your saved plans, homes, addresses, versions, favourites, default settings and export history | To store, sync and share your work | Contract |
| Teams: members and their roles, invitations (the email address of the person you invite), the team logo and style | To let you work together | Contract; for the person you invite: legitimate interest |
| Share links, edit links and buyer links you create, and which link saved a change | To let people view or edit what you share | Contract |
| Professional measurement reports: a check code per report with the time, the rule set, the totals, the office name, the place and the digits of the postcode as on the report, and a fingerprint (SHA-256) of the PDF. Never the street, house number, client or who measured. Anyone with the code can see these details on squaremetry.com/controle; to compare a PDF, only its fingerprint is sent, never the file | To let whoever receives a report check that we made it and that it was not changed | Contract; for the person who checks: legitimate interest (trust in the report) |
| Address search (Netherlands, only when signed in) | To find a home address and its building details. We send the search to the public address register (PDOK) from our server, so your IP address is not passed on | Contract |
| Surroundings in 3D and starting from your address (Netherlands, only when you ask): the location of the home as a small area around the building | To show the home, the aerial photo, plot line and neighboring buildings. We ask PDOK and 3D BAG from our server, so your IP address is not passed on; we do not send your name or address | Contract |
| AI actions you start: your description, sketch or photo, question, or the names, types and areas of rooms; and per action one line without content (kind, model, tokens, cost, outcome) | To make the proposal or answer you ask for, and to keep track of the monthly limit and the cost | Contract |
| Questions to the AI help (Pro and Team): your question, the answer, and whether you asked for help; with the question a short summary of the open plan goes to the AI service, which we do not keep | To answer your question and help you when something went wrong | Contract |
| Samples for detection, only with the box ticked: a copy of the image, the proposal and your corrected walls | To make wall detection better | Consent (Art. 6(1)(a)), which you can withdraw |
| Waitlist: email address, role and language | To tell you when your spot at Squaremetry is ready | Consent (Art. 6(1)(a)), which you can withdraw |
| News by email, only if you tick the box: your choice, the text you agreed to and when | To send you news about Squaremetry, with an unsubscribe link in every email | Consent (Art. 6(1)(a)), which you can withdraw |
| Requests to an office through its lead widget or a shared plan: your name, email address, the address of the home if you give it, your calculation or message, and when you gave consent (with the version of the consent text). The office is the controller; we store it for the office | To pass your request to the office you chose | Consent (Art. 6(1)(a)), which you can withdraw by asking the office or us |
| Help by looking along, only when our team asks and you click Allow in the editor: while it runs, your plan as it is open in the editor, your view, the pointer of our team member and the chat pass through our server and are not stored. Afterwards one line remains: who looked along with whom, when, how long, whether you allowed changes, and how it ended. Never the content of your plan or the chat | To help you in your plan when you ask us for help | Consent (Art. 6(1)(a)): you click Allow, and you can stop at any time |
| Feedback: your message, an optional email address and an optional drawing of your plan, plus the tool, units, language and app version you used | To answer you and improve the product | Legitimate interest (improving the product) |
| Requests for free use in education: email address, name, school, role and purpose | To review your request | Contract (steps at your request before the contract, art. 6(1)(b)) |
| API keys, connections with an AI assistant and webhooks you create, and the number of calls per month | To make the connection work and keep track of the monthly limit | Contract |
| Misuse alerts: the cause, a short id (the visible part of an API key, or a scrambled value derived from an address or connection) and counts. Never the IP address itself | To spot and stop misuse of the API and the calculator for AI assistants | Legitimate interest (security) |
| Security log: what changed in an account and who changed it, without the content of your plans | To investigate misuse and incidents | Legitimate interest (security) |
| Payment and invoice records: what you bought, amounts, the Paddle references and the invoice. Only Paddle sees your card details | To bill you and to keep records the law requires | Contract and legal obligation (Art. 6(1)(c)) |
| At checkout: your request to start at once (the exact text you ticked, when, and which plan), or for a business purchase the company name and VAT number; and any withdrawal you make | To prove what you chose about the right of withdrawal and to confirm it to you by email | Contract and legal obligation (Art. 6(1)(c)) |
| Invitations: your random invitation code, who came through your link and when, whether and when that person paid, the month you both got, and to stop self-invitations a comparison of e-mail addresses, scrambled device ids and the customer and card type, last four digits and expiry at Paddle (never the full card number) | To give you both the month of Pro and to stop misuse of the programme | Contract; for the checks against misuse legitimate interest (Art. 6(1)(f)) |
You need an email address to create an account. Everything else is up to you; without it, some features do not work.
We do not collect special categories of data, and we do not use your data for automated decisions about you.
4. AI
AI is only available with an account, and only when you ask for it: a plan from a description or a sketch, a change in words, a listing text or a question about the standard. We then send only what that action needs to our AI provider, Anthropic, in the United States: your description, the sketch or photo you choose (first redrawn in your browser, so photo data such as the place where the photo was taken is not in it), your question with passages from our own guides, or the names, types and areas of the rooms. We do not add your name, email address or address. We do not store the sketch.
Under its commercial terms, Anthropic does not use what we send to train AI. For each AI action we keep only the kind of action, the model, the number of tokens, the cost and whether it worked, without your text, image or the answer.
AI help (Pro and Team): when you ask a question, your question, a few earlier questions of the same conversation and a short summary of the plan you work in (the rooms with name, type and area, the roof, what you selected and which screen is open) go to Anthropic. Without a question nothing goes. We keep your question and the answer for 30 days in the European Union, only to help you when something went wrong; never the summary of your plan. Delete my AI conversations in the window removes them at once. If you ask our team to look along, we see your question and your email address. The AI changes your plan only after you click Apply, and always so that Undo puts it back.
An AI result is a proposal. You check it before you use it; see the terms of service.
5. Training with your tracing, only if you switch it on
We do not use your plans to train AI. The one exception is your own choice: the box "Help improve detection with my corrected tracing" when you trace. It is off until you switch it on. In a team workspace only the owner or an admin can switch it on, because the office decides about the data of its clients. When it is on and you save to your account, we keep a copy of the image for each detection (redrawn, without photo data such as the location), the proposal and the walls as you corrected them. No address and no name of the home; at most 50 per person and workspace.
We use those samples only to improve detection, on our own servers or with a provider that does not train on customer data. For these copies we are the controller ourselves. You can switch the box off at any time, and "Remove what I shared" erases everything you shared, images included. They are in your download.
6. Visit counts
On the website we count visits and a few actions (starting the tool, exporting, joining the waitlist) without cookies and without any id. Each count adds one to a daily total per action, page type, language and kind of referrer (search, AI assistant, social, direct or other). We do not store your IP address, the page address or your browser.
The editor and the viewer send a heartbeat for "online now" about once a minute while the page is visible and you are using it; a calculator on the website does the same after you used it. Our server turns your network, the place and the day into a keyed hash and keeps only that, with whether someone was signed in (never who), for at most 15 minutes. We also count how often each calculator is used: once per calculator per page visit, per day and language only a number. Below 1,000 uses we show nothing on the website, above it only a number rounded down. Errors count only as a number per kind, never the text or the address of the page. Your IP address is never stored.
If your browser sends Do Not Track or Global Privacy Control, we do not count you at all. There are no advertising or third-party tracking scripts on the website or in the editor.
With an account, our server records what happens in your account: a new account, signing in, a day on which you use Squaremetry (at most one line per day), a new home, an export (only its kind), unlocking a home, a plan that our team grants by hand (and its end), paying, starting or cancelling a subscription, a refund, an AI action, a shared link and a message through Feedback. For each event we keep the id of your account, the kind, the time and a few details, such as the kind of export, the currency or the country of a payment (we get that country from Paddle). Never your email address, your IP address or the content of your plans, without cookies and without services of others. We use it to improve Squaremetry and to help you when you ask us something. Only our team sees it, and every look at a single account is logged. Legal basis: legitimate interest (art. 6(1)(f) GDPR). It is in your download, and it is gone at once when you delete your account; otherwise after the term in the retention table.
7. Where your data is stored
Your saved plans and account data are stored on servers in the European Union. The website and the editor files are delivered through a content delivery network, which sees your IP address to deliver the pages but receives no account data.
Only these leave the EU: an AI action you start (to Anthropic in the United States), what Cloudflare needs to deliver the page, and email to our address (Google Workspace). This happens with the safeguards the GDPR requires: for Cloudflare and Google the EU-US Data Privacy Framework (a decision of the European Commission), with the EU Standard Contractual Clauses as a fallback; for Anthropic the EU Standard Contractual Clauses (art. 45 and 46 GDPR).
8. Who helps us
We use a small number of service providers. Those who work for us may only use your data to provide their service to us, under a data processing agreement.
| Provider | What for | Where | Status |
|---|---|---|---|
| Scaleway | Servers, database, file storage and backups | Paris, France (EU) | From the launch |
| Scaleway Transactional Email | Sending sign-in codes, account emails and waitlist emails | Paris, France (EU) | From the launch |
| Cloudflare | Delivering the website and the editor files, and our domain name | Worldwide network, company in the United States (EU-US Data Privacy Framework, with the EU Standard Contractual Clauses as a fallback) | From the launch |
| Google Workspace | Our mailbox: emails you send to us and our replies | Company in Ireland, part of a US group; data can be processed in the United States (EU-US Data Privacy Framework, with the EU Standard Contractual Clauses as a fallback) | From the launch |
| Anthropic | AI actions you start: your description, sketch or question, or the names, types and areas of rooms. Not your name, email or address | United States (EU Standard Contractual Clauses in the data processing addendum of Anthropic) | From the launch |
| Paddle | Payments, invoices and sales tax, as the seller (merchant of record) | United Kingdom (EU adequacy decision) | From the launch |
| Sentry | Error reports from the app and the server | EU | Planned, not active yet |
| A second storage provider for backups | A second copy of the backups | EU | Planned, not active yet |
| PDOK (Kadaster) | Address search, building details, aerial photo and plot lines in the Netherlands, through our server | Netherlands | From the launch |
| 3D BAG (TU Delft and 3DGI) | Heights of the home and the buildings next to it, through our server, only a small area around the building | Netherlands | From the launch |
Paddle sells to you and is itself responsible for the payment, under its own privacy policy. Paddle gets what you enter at checkout, and from us only an id of your workspace, your account and your request at checkout. To show prices in the currency of your country, our server asks Paddle (or Cloudflare) which country your IP address is in; we keep the answer for at most six hours, only in memory and never with your account. PDOK and 3D BAG are public sources: from our server they get only the search or a small area around the building, never your IP address, name or email address.
If you sign in with Google, Apple or Microsoft, that company handles the sign-in under its own privacy policy. If you connect Squaremetry to your own AI assistant or to a webhook, what you request there goes to that service, under its terms. We update this list before a new provider starts to handle your data.
9. How long we keep it
| Data | Kept for |
|---|---|
| Your account and saved plans | As long as you have an account |
| Plans in the trash | 30 days, then erased |
| A deleted account and its plans | 30 days, then erased for good |
| Versions of a saved plan | The newest 100 always; of the last 90 days the last one of each day and the versions from moments when work could have been lost. Pinned and named versions, and those of a report or export, as long as the plan exists |
| Sign-in codes and sessions (with IP address and device type) | Until 1 day after they expire. A session expires 7 days after you last used it |
| Your devices (a scrambled id, the device name, first and last use) | As long as you have an account |
| Share links | Until 90 days after they expire or you turn them off |
| Edit links and buyer links (they work for at most 30 days) | Until 90 days after they expire or you turn them off |
| Team invitations (they work for 7 days) | Until 90 days after they expire |
| Counters for sign-in attempts | Deleted 1 day after the last attempt |
| Change log of a plan | 90 days, once there is a newer version |
| Security log | 13 months |
| Help by looking along | The session itself: not at all, it ends after 60 minutes at most. The line about it (who, when, how long): 13 months, with the security log |
| Samples for detection (only with the box ticked) | Until you remove them or delete your account |
| Misuse alerts | 180 days |
| Waitlist, not confirmed | 30 days |
| Waitlist, confirmed | Until you ask us to remove you, and at most 12 months after launch |
| Feedback | 1 year |
| Requests to an office (leads) | 12 months after they came in, or earlier when the office deletes them |
| Invoice and payment records, with your request at checkout, any withdrawal and any refund | 7 full calendar years after the year they belong to, as Dutch tax law requires; then erased |
| AI log (without content) | 25 months |
| Free home and free AI help questions: which account took them, with a hash of your device and your network (never the address itself), against abuse with ever new accounts | 30 days |
| Conversations with the AI help (your question and the answer, without the content of your plan) | 30 days; you can delete them yourself at any time |
| Usage counts per workspace (exports, reports, new plans) | 25 months |
| Events in your account, without email address and without IP address: a new account, signing in, a day on which you use Squaremetry (at most one line per day), a new home, an export (only its kind), unlocking a home, a plan that our team grants by hand (and its end), paying, starting or cancelling a subscription, a refund, an AI action, a shared link and a message through Feedback | 25 months, and gone at once when you delete your account |
| Requests for free use in education | 12 months after the decision, after the education plan ended, or after a request nobody decided on yet |
| Connections with an AI assistant | Access codes until 1 day after they expire; a connection you stopped or did not use for 90 days, 90 days after that |
| Messages from our payment provider Paddle about your payment | 90 days after we processed them; a message we could not process 365 days. What you bought and paid is in the invoice records |
| Your requests to download or delete your data | 3 years after we handled them, as proof that we did |
| Your cancellation through the page "Cancel your subscription here" (name, email address, what you filled in) | 3 years after we received it, as proof that we did |
| Files in storage (photos, documents, exports and logos) | Gone as soon as the home leaves the trash or the workspace is deleted; a replaced logo after 30 days |
| Heartbeats for "online now" from an open editor, viewer or calculator: a keyed hash of your network, the place and the day, without a cookie and without your account; a new key every day | 15 minutes; the number online per minute (only a count) 90 days |
| How often a calculator on the site is used: per day, calculator and language only a number, nothing about you | 25 months per day, after that per month only |
| Errors of the server and the browser: per hour, place and kind only a number, never the text or the address of the page | 13 months |
| Backups | Daily ones 35 days, monthly ones 400 days. We use them only to restore after a failure. If we restore one, we first delete again what was deleted since that backup |
| Visit counts | Kept, as they contain no personal data |
10. Your rights
Under the GDPR you have the right to access, correct, delete and move your data, to restrict or object to how we use it, and to withdraw consent at any time. Withdrawing consent does not affect what we did before.
- Download: in your account settings you download, as one zip file, everything this statement names that we keep about you and your workspaces: your homes (also in the trash) as open file, PDF and CSV, the content of named and pinned versions and the list of all versions, your photos, documents, exports and logos, links, client profiles, your account details, sessions and devices, consents, waitlist, feedback, requests, the AI log, API keys and connections, the security log about you and your payment records; if you own or manage a workspace, also its leads and invoices. Secrets such as access codes and keys are not in it. Your browser makes the file; we keep no copy.
- Delete: in your account settings you can delete your account. You are signed out everywhere at once, and 30 days later the account and its plans are erased. If you own a team with other members, first make someone else the owner; that team keeps its shared plans. Invoice records stay for the period the law requires.
- Leave the waitlist: use the unsubscribe link at the bottom of every waitlist email. You are off the list at once.
- No more news: use the unsubscribe link at the bottom of those emails. Emails about your account and payments still come.
- Anything else: email us at info@squaremetry.com. We answer within one month.
You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority where you live.
We do not sell or share your personal information as US state privacy laws define those words, and we do not use it for targeted advertising.
11. How we protect your data
The database checks on every request who may read a plan, and automated tests try to break that rule on every change. We never store passwords: you sign in with a one-time code or a passkey. Staff who can see account data sign in with a passkey, and every time they look at customer data in the admin area is logged: who, when and what. Our server log holds no content of your plans and no email addresses. More on the security page.
12. Children
Squaremetry is not meant for children. You must be at least 16 to create an account.
13. Changes to this policy
If we change how we handle your data, we update this page and its date. For important changes we tell you by email at least 30 days ahead.