Privacy Policy

1. About this policy

This policy describes how CCTVPlan handles information when you use the CCTV and security layout planner. Data handling depends on which features you use: the core planner works without an account, while sign-in, Mapbox search, and Pro AI use additional services.

2. Information processed

• Planner projects: Projects and recovery copies are saved in IndexedDB in your browser on this device. A small emergency recovery copy may also be stored in local browser storage. Signed-in users can optionally choose Back up now to upload a snapshot of the design, notes and uploaded floor plan to their account in Neon Postgres. Cloud backup is manual; projects are not automatically synced. You can also export JSON and PDF files.
• Sign-in and Pro access: Neon managed Better Auth processes sign-in information. Neon Postgres stores account Pro status, expiry, and monthly usage counters and service cost estimates. Our server checks your entitlement and remaining allowance before paid service requests.
• Shared projects: You can explicitly publish a view-only link to a saved snapshot. Anyone with the link can view its design, notes and uploaded floor plan unless you add a password. Link hashes, expiry/revocation state and optional salted password hashes are stored in Neon. We do not store plaintext sharing passwords. Protected viewers receive a temporary HttpOnly access cookie; shared-page URLs are excluded from our application analytics.
• Mapbox: Opening the map picker loads Mapbox map data in your browser as you pan and zoom. If you use site search, your query is sent to Mapbox for address results. Capturing an area requests an attributed static map image. We track map openings, searches and captures against your account allowance.
• AI requests: Messages include recent chat and the current plan settings, device configuration, walls and annotations. When you enable Include visible canvas image, a compressed image is also sent; it can include Mapbox imagery and an uploaded floor plan. Our server sends this information through Vercel AI Gateway to Alibaba Qwen. Proposed edits are applied only after you review and accept them.
• Analytics: We use Vercel Analytics to understand usage of the site.

AI image analysis is optional. Do not send messages or site plans containing information you do not want processed by the AI services described below.

3. How information is used

We use the information above to save projects in your browser, provide sign-in and Pro access checks, return map search results, process AI requests, and maintain and improve the planner.

4. Storage and control

Your planner autosave stays in this browser’s local IndexedDB. Clearing this site’s browser data can remove local saves but does not delete cloud snapshots. Cloud snapshots remain in your account until you delete them using the cloud backup controls. Restoring creates a new local project. Temporary Mapbox coordinates and map image bytes are not included, so site maps must be reselected after restore. AI chat messages stay in the current page session and are not included in project backups.

You can revoke a shared link or change its expiry in the snapshot’s Share dialog. Deleting the snapshot disables all its links. Revocation blocks future requests, and open viewers recheck access periodically and when returning to the page; it cannot recall copies a recipient has already saved.

Our AI route processes each request to produce a response. Application error logs contain technical request identifiers and error metadata rather than the submitted prompt or canvas image. Vercel states that its AI Gateway does not store or train on prompts at the gateway layer; the upstream model provider has separate data handling terms. Alibaba’s published standard policy says prompts and responses may be retained for up to 30 days, subject to its stated exceptions and any applicable account-level arrangements.

5. Third-party services

• Neon provides managed Better Auth authentication and Postgres account and usage storage.
• Mapbox provides address search and map imagery when you use those features.
• Vercel provides site hosting, analytics, and AI Gateway request routing.
• Alibaba Cloud provides the Qwen model used for Pro AI requests through Vercel AI Gateway.

Review the providers’ current terms and privacy information for their handling of data: Vercel AI Product Terms and Alibaba Cloud Model Studio Data Retention Policy.

6. Contact

If you have questions about this policy or the data handled by a feature, contact us through the contact page.