Privacy Policy

1. Scope of this Policy

This policy applies to visitors and users of FloorSQ.com.au and the FloorSQ floor-plan analysis tools. It does not govern third-party websites or services that you may visit through an external link.

2. Information We Collect

Each browser may upload and process up to two floor plans without an account. Registration or sign-in is required for additional uploads and the furniture preset library in Space Planner; basic shapes remain available without an account. We collect or process only the information reasonably needed to provide, secure and improve the service, including:

• when you choose to register or sign in, the stable account identifier, display name, email address, identity provider and role claims supplied through Microsoft Entra External ID;
• for anonymous access, a random identifier stored in the essential HttpOnly floorsq_visitor cookie and a one-way derived job-owner value used to apply the per-browser allowance of up to two uploads and return only that browser’s temporary jobs;
• floor-plan images you choose to upload and technical metadata such as file name, format, size and pixel dimensions;
• job settings, status, processing stages, timing, errors and generated results, including clean images, overlays and result data;
• when an eligible signed-in user explicitly saves a project to Planner History, the workspace (including room and outline adjustments, before-and-after reference-room data, reference and measurement lines, furniture overlays and notes) and associated floor-plan images;
• standard request, device, diagnostic and security information used to operate and protect the service;
• when you allow analytics, Google Analytics data such as page views, session activity, approximate location, browser and device information, and a client identifier stored in first-party _ga cookies;
• when you submit the contact form, your name, email address, selected subject, message and page language; and
• separate security and rate-limit identifiers generated from the request IP address and submitted email address when you use the contact form.

3. Use and Processing of Uploaded Images

FloorSQ uses uploaded images to identify floor-plan structures, read visible dimensions, estimate area and produce the results shown to you. Processing may create adjusted versions or selected crops of the image where needed to complete these functions.

Uploaded content may be processed by service providers acting on our behalf to operate the analysis. Those providers are required to handle the content under their applicable service terms and safeguards. Do not upload a plan unless you are authorised to process it.

4. Data Security and Retention

FloorSQ applies reasonable technical and organisational safeguards intended to protect submitted content against unauthorised access, loss, misuse, alteration or disclosure. Access is limited to what is reasonably required to provide and support the service.

Temporary job images, generated results and operational records are retained only for as long as reasonably necessary to provide the service, maintain security, resolve problems and meet legal obligations. A project explicitly saved to Planner History remains persistently stored so it can be reopened until you delete it or it is removed under applicable retention, security or legal requirements. Anonymous upload-quota counters are selected for lifecycle deletion 370 days after their last modification, slightly after the one-year visitor-cookie maximum age. Deletion may not be immediate because lifecycle processing, active jobs, backups and provider retention practices can require additional time. No internet service can guarantee absolute security.

Contact form details are kept only for as long as reasonably needed to read and respond to the message, maintain appropriate support records, protect the service and meet legal obligations. For service security and rate limiting, FloorSQ separately keeps security identifiers generated from the request IP address and submitted email address for a short period, normally a few days, before scheduled deletion. These rate-limit records do not contain the full IP address.

5. Security Checks, Cookies, Analytics and Advertising

For anonymous floor-area use, the API sets the essential floorsq_visitor cookie for up to one year. It contains an opaque, signed random identifier rather than your name, email address or floor-plan content. The cookie is HttpOnly and, on the hosted service, Secure; it is used to apply the per-browser allowance of up to two uploads and keep later status, result and deletion requests bound to the same browser. The associated pseudonymous quota counter is selected for lifecycle deletion 370 days after its last modification. The cookie is required for this limited anonymous service and is not used for advertising or optional analytics. Clearing or blocking it can prevent access to an earlier anonymous job and cause the service to issue a new visitor session.

FloorSQ loads Cloudflare Turnstile on the floor-area upload and Contact pages to verify that submissions come from a genuine browser session. Turnstile is an essential security service rather than optional analytics. Cloudflare may process network, browser, device and interaction information, including the IP address, and may use cookies or similar storage where needed to provide the check. The resulting verification token is sent with the relevant request for server-side validation. Turnstile runs even if you decline analytics because it is required to protect floor-plan uploads and the contact form.

FloorSQ uses Google Analytics 4 to understand aggregate page use, diagnose user journeys and improve the website. Google Analytics is non-essential. Consent Mode v2 defaults analytics_storage, ad_storage, ad_user_data and ad_personalization to denied, and the Google Analytics tag is not loaded unless you select “Allow analytics”. If allowed, Google may set first-party cookies whose names begin with _ga to distinguish users and sessions, and may receive page, device, browser, approximate-location and interaction information. Google states that IP addresses are used to derive location information before being discarded and are not logged or stored in Analytics.

Your choice is stored locally in your browser under floorsq-consent-v1. You can reject non-essential analytics or reopen Cookie preferences from the footer at any time. With analytics denied, FloorSQ keeps analytics_storage, ad_storage, ad_user_data and ad_personalization denied. If you withdraw an earlier analytics choice, FloorSQ removes accessible Google Analytics cookies whose names begin with _ga and reloads the page without the Analytics tag. Essential hosting, content delivery, security and operational services may still receive standard connection and diagnostic information required to deliver and protect the service.

FloorSQ does not currently load third-party advertising scripts, and visible promotional spaces contain only first-party FloorSQ promotions. If Google AdSense or another advertising service is introduced, this policy and the consent controls will be updated before advertising storage or personalization is enabled. Where required, FloorSQ will use a Google-certified consent management platform for advertising.

6. Your Rights and Choices

You decide whether to upload an image. Do not upload classified, security-sensitive or personally identifying plans. By default, workspace edits—including room and outline adjustments, before-and-after reference-room data, reference and measurement lines, furniture overlays and notes—remain local to the current browser page. If you explicitly choose Save to this browser, one complete draft and its original and processed images are stored in this browser profile using IndexedDB; that action does not upload the draft. An anonymous draft can be opened by anyone using that browser profile, while signed-in drafts use separate device-bound pseudonymous account scopes without storing an email, token or raw account identifier in the draft. You can clear or replace the browser draft, and clearing browser site data may also remove it. Separately, only an eligible signed-in user who explicitly chooses Save to Planner History sends the workspace and associated floor-plan images to persistent Planner History storage. A saved project can be reopened or deleted from History.

You can request deletion of an active job from the results page, delete a saved project from History, and change your analytics choice through Cookie preferences in the footer. You may also contact us to ask about access, correction, deletion or a privacy concern. We may need enough information to locate the relevant data and verify the request, and legal or technical exceptions may apply. Short retention periods may mean that the data has already expired before we receive your request.

7. Third-Party Processing and Disclosure

FloorSQ uses contracted service providers, including Microsoft Azure for hosting and service processing, Microsoft Entra External ID for account authentication, Azure Communication Services to send contact form messages, Zoho Mail to host the info@floorsq.com.au mailbox that receives those messages, Cloudflare Turnstile for security checks on floor-plan uploads and the contact form, and Google Analytics when analytics consent is granted. If you choose Google, Microsoft or Apple sign-in, that provider also processes the authentication request under its own terms and privacy policy. These providers may process submitted content or technical information only for the relevant service purposes and under their applicable contractual, privacy and security obligations. Processing may occur in locations where those providers operate. Contact messages may remain in the support mailbox until they are deleted under our support, security and legal retention practices. FloorSQ does not send an automatic reply to the email address entered in the form.

FloorSQ does not sell or rent uploaded floor plans or personal information. We may disclose limited information when required by law, to respond to valid legal process, or when reasonably necessary to protect users, the service or our legal rights.

8. Data Incidents and Privacy Complaints

If we become aware of a suspected data incident, we will investigate and respond in accordance with applicable law. To make a privacy complaint, email us with enough detail to understand the issue. We will review the complaint and respond within a reasonable period. If you are not satisfied, you may be entitled to contact the Office of the Australian Information Commissioner.

9. Changes to this Privacy Policy

We may update this policy when the service, providers or legal requirements change. The current version will be published on this page with a revised effective date, and material changes will be highlighted where reasonably practicable.

10. Contact Us

For privacy questions, requests or complaints, contact FloorSQ by email at info@floorsq.com.au.