Privacy policy
Updated September 14, 2026
Controller and contact details
The controller of personal data in Layometry is Sole proprietor Havrulash Vladyslav, trading as Layometry. For privacy questions or requests to access, export, correct, or delete data, contact support@layometry.com, —.
Data we process
We may process account data (Clerk ID, name, email, profile image); workspaces, organizations, memberships and invitations; project names and content; report client and brand data; version history; assistant messages; notifications; share links and view counters; Paddle customer, subscription and status identifiers; support communications; IP address, browser/device details, technical logs, cookie choice, and aggregate usage data. Layometry does not receive card details.
Sources of data
Data comes from you when you register and use the product, from members of your organization, automatically from browsers and servers, and from Clerk, Paddle, Google (if you choose Google sign-in), and other providers needed to deliver the service. A guest project and interface language stay in your browser.
Purposes and lawful bases
Account, project, team, support, and subscription data is needed to perform our contract and provide Layometry. Security, abuse prevention, diagnostics, and cookieless Vercel Analytics rely on our legitimate interest in operating a reliable service, balanced against your rights. Tax and accounting records meet legal obligations. In the EEA, UK, and Switzerland, Google Analytics runs only with consent; elsewhere it relies on legitimate interest with a persistent opt-out. Marketing emails or use of buyer data for marketing require separate consent, which you can withdraw.
Recipients and processors
Data is disclosed only where needed to Clerk (authentication and organizations), Paddle (merchant of record, payments, tax, buyer support, refunds, and fraud prevention), Vercel (web hosting and cookieless analytics), Google (sign-in and regionally controlled Google Analytics), OpenAI (assistant requests when you use that feature), and our API hosting, PostgreSQL, email, and backup providers. They act under their own terms or as contracted processors. Ask support for the current subprocessor list and relevant DPA details.
Payments and Paddle
The merchant of record is the relevant Paddle entity determined by the location of your purchase in the Paddle Buyer Terms: https://www.paddle.com/legal/buyer-terms. Paddle receives data needed for checkout, invoices, tax, support, refunds, and fraud prevention. Paddle may share buyer data with Layometry where needed to deliver the product and support you; we do not use it for marketing without separate consent. See https://www.paddle.com/legal/gdpr.
International transfers
Some providers or servers are outside your country, the EEA, or the UK. Where required, transfers rely on an adequacy decision, EU Standard Contractual Clauses, the UK Addendum, or another lawful mechanism, together with supplementary technical measures. You can ask support for details of the mechanism used for a particular provider.
Retention
Guest projects, language, and cookie choice remain in the browser until site data is cleared. Active accounts, projects, organizations, and assistant conversations are retained while needed for the service. Deleted projects on plans with trash can be restored for up to 14 or 30 days; project versions are kept for up to 30 or 180 days depending on plan. Following a verified deletion request, application data is deleted or anonymized without undue delay, normally within 30 days; backups may persist for up to 90 days. Payment, tax, security, and dispute records remain longer only where law or the defence of claims requires it.
Your rights
Depending on applicable law, you may request access and a copy, correction, erasure, restriction, and portability; object to legitimate-interest processing; and withdraw consent without affecting earlier lawful processing. Email support@layometry.com; we may verify your identity and will respond within the legal deadline. You may also complain to the data protection authority where you live or work, including the ICO in the UK or your EEA supervisory authority.
Security, sharing, and changes
We use access controls, encryption in transit, and separation between personal and organization spaces. Anyone holding an active client link can view that project without signing in, so share it only with intended recipients and revoke it after use. We may update this policy; material changes receive a new date and, where required, a separate notice.