DOMUS
|
Planner
Privacy Policy
1. Who is the data controller
XOSystem, Via E. Cialdini 28, 61121 Pesaro (PU), Italy — VAT IT02345150417. To exercise your rights or ask anything: info@xosystem.com.
We have not appointed a Data Protection Officer: we are not required to.
2. What data we process
| Account data | your name, email address, profile picture and Google account identifier, all provided by Google when you sign in. We do not process passwords: authentication is Google's. |
|---|---|
| Session data | an access token, your IP address, your browser and operating system (user agent) and the session expiry date. |
| Subscription data | plan status, renewal date, credit balance, and the technical identifiers Stripe assigns to your customer profile and subscription. |
| Credit ledger | a record of every credit added or spent, with date, reason and payment reference. |
| Payment events | a full copy of the notifications Stripe sends us, which may contain your email address and billing address. |
| Content you generate | the prompts you write, the scene images you submit for generation and the generated images, stored on our servers together with your conversation history. |
| In your browser | your session token is kept in your browser's localStorage, so you do not have to sign in on every visit. |
⭐ We never receive the projects you save. Saving writes a file to your own computer and does not pass through our servers: we hold no copy and do not know their contents.
3. Why we process it, and on what legal basis
| Providing the service | creating your account, keeping you signed in, counting and spending credits, generating images. Basis: performance of the contract (Art. 6(1)(b) GDPR). |
|---|---|
| Payments and subscription | charging, renewing, refunding, handling cancellations. Basis: performance of the contract. |
| Security and abuse prevention | IP address and user agent let us recognise sessions and limit automated sign-ups and abnormal use. Basis: legitimate interest (Art. 6(1)(f)) in protecting the service and avoiding fraudulent costs. |
| Tax and accounting obligations | retaining transaction records. Basis: legal obligation (Art. 6(1)(c)). |
| Website visit statistics | understanding how many people visit the pages of www.domusplanner.com, where they come from and which pages they read, so we can improve the site. Basis: consent (Art. 6.1.a GDPR), which you can refuse or withdraw at any time. |
We do not use your data for profiling or advertising, and we do not make automated decisions producing legal effects concerning you.
4. Who else processes it
| Google Ireland / Google LLC | authentication ( Google sign-in ), the product catalogue hosted on Google Sheets and, only if you accept, website visit statistics with Google Analytics. ⚠️ See sections 5 and 10. |
|---|---|
| Stripe Payments Europe | collecting payments and managing subscriptions. Your card details are handled by Stripe and never reach our systems. |
| The AI rendering provider | AI image generation. ⚠️ See section 6. |
| Cloudflare | content delivery and protection for the application: routes traffic and sees your IP address. The www.domusplanner.com website does not go through Cloudflare. |
| IONOS | server and database hosting. |
We do not sell your data and do not share it with third parties for marketing.
5. What reaches Google when you open the application
⚠️ When the page opens, your browser contacts Google for two reasons, and in both cases your IP address reaches Google — even before you sign in:
- the Google sign-in script is loaded, which is what makes the sign-in button work;
- the product catalogue is read, and it is hosted on Google Sheets.
⭐ The fonts, which until 21 August 2026 also came from Google, have been served from our own servers since 22 August: for those, no request leaves for Google any more.
6. AI image generation
To generate images we send your prompt and your scene image to the AI rendering provider. We do not send your name, your email or any other account data.
⭐ The supplier confirmed to us in writing on 22 August 2026 that prompts, uploaded images and designs remain private and are never used to train AI models.
⚠️ Two things remain outside our control, and we would rather tell you:
- in its own privacy notice the provider describes itself as an independent controller of the data it receives, not as our processor: it decides for itself what to do with that data;
- we have not been told how long it keeps the images and prompts it receives.
So, to be safe: do not put personal or confidential data into prompts or scenes if you would not want it to leave your control.
7. Transfers outside the European Union
Some of the providers listed above may process data outside the European Economic Area, in particular in the United States. Where they do, transfers rely on the safeguards provided for by the GDPR — adequacy decisions or the European Commission's standard contractual clauses. Write to us if you would like more detail.
8. How long we keep it
| Account and subscription | for the duration of the relationship and up to 12 months after the account is closed, unless the law requires longer. |
|---|---|
| Sessions | until they expire, and in any case no more than 30 days after last use. |
| Prompts and generated images | until you delete them in the application or your account is closed. Deleting an image from a conversation deletes the file from the server. |
| Credit ledger and payment events | 10 years, as required by accounting and tax law. |
| Visit statistics | 14 months, after which Google deletes them automatically. Analytics cookies stay in your browser for 2 years, unless you delete them earlier or withdraw your consent. |
9. Your rights
At any time you may ask us for access to your data, its rectification, erasure, restriction of processing, portability in a machine-readable format, and you may object to processing based on legitimate interest.
Write to info@xosystem.com: we reply within 30 days.
⚠️ Closing your account does not delete the accounting records of transactions already made, which we are required by law to keep.
If you believe the processing infringes the GDPR you have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the supervisory authority of the country where you live.
10. Cookies and browser storage
On the pages of www.domusplanner.com we use Google Analytics 4 to count visits, but only if you accept it in the banner shown on your first visit. Until you choose, or if you refuse, Analytics is not loaded: your browser does not contact Google for this purpose and receives no analytics cookies.
If you accept, Google Analytics sets the cookies _ga and _ga_<ID>, which anonymously tell one visitor from another and last 2 years. Google Analytics 4 does not log or store your IP address. We do not enable Google Signals or data sharing with Google's advertising products.
We remember your choice in a cookie of our own, cookie_consent, for 6 months: it only says “accepted” or “refused”. You can change it at any time from the “Cookie preferences” link at the bottom of every page. If you withdraw consent, the Analytics cookies are deleted.
The Domus Planner application does not use Analytics: only the technical items below apply there.
We use your browser's localStorage to keep your session token: it is strictly necessary to keep you signed in, it does not track you across other sites, and it does not require consent. You can remove it at any time by signing out or clearing site data in your browser.
We keep the language you chose in a cookie of our own, so the interface comes back in the language you left it in. It holds nothing but a language code ( it, de, … ), it does not track you, it expires after a year and it does not require consent: it is a preference you expressed yourself. Clearing site data in your browser removes it.
Google sign-in and Cloudflare's protection of the application may set their own technical cookies, governed by their respective notices.
11. Changes to this notice
If we change how we process data we will update this page and, where the change is significant, tell you by email. The effective date is always shown at the top.