1. Who we are
Qualitas365 (“we”, “us”, “the studio”) operates the AI Kitchen Studio available at qualitas365.app. When you use the planner, purchase credits, or contact us, we act as the data controller for the information you provide.
2. Information we collect
- Account details — first and last name, email address and password (stored hashed) provided at checkout.
- Order details — number of credits purchased, chosen currency, promo code, selected payment method and timestamps.
- Planner selections — layout, style, materials, appliances, lighting and any photograph you upload of your room.
- Technical data — IP address, browser, device type and pages viewed, collected through server logs and analytics cookies (see our Cookie Policy).
- Communications — messages you send us by email or through the contact form.
3. How we use your information
- To create and maintain your studio account and credit balance.
- To process orders, issue invoices and confirm bank transfers.
- To generate the AI visualisations you request from your plan.
- To improve the planner, respond to support requests and prevent abuse.
- To send transactional messages (order confirmations, bank details, password resets). We do not send marketing without a separate opt-in.
4. Legal basis (GDPR / UK GDPR)
We process personal data under the following bases: performance of a contract (delivering the service you purchased), legitimate interest (securing the platform, preventing fraud), legal obligation (tax and accounting records) and consent (non-essential cookies and any future marketing).
5. Who we share it with
We share the minimum data necessary with the processors that keep the studio running: hosting, database, email delivery, payment processing and analytics providers. Each acts on our written instructions and does not use your data for their own purposes. A current list of subprocessors is available on request.
6. How long we keep it
- Account and planner data — while your account is active, then archived for up to 12 months.
- Order and invoicing records — retained for the period required by tax law in the seller's country (typically 7 years).
- Uploaded room photographs — removed automatically 90 days after upload unless you save them to your workspace.
- Support conversations — 24 months.
7. Your rights
You may request access to your data, correction, deletion, portability or restriction of processing. You can also object to processing based on legitimate interest and lodge a complaint with your local data protection authority. Write to us at [email protected] and we will respond within 30 days.
8. Security
Passwords are stored hashed. Traffic is served over HTTPS. Access to production data is limited to studio staff who need it. No system is perfectly secure — if you suspect an issue please write to [email protected].
9. Changes
We will post any material change to this policy on this page and update the “Last updated” date at the top.