Privacy notice

Who holds it

Oakward Studio is the controller of the personal data described here. Ask anything about it at hello@oakwardstudio.co.uk.

What we collect

• Your email address, when you sign in. Sign-in is a link sent to that address, so the address is the account. If you sign in with Google we receive the email address on that Google account and nothing else from it.
• The designs you save — the building or the furniture, its dimensions, its openings, the materials you picked and what you have ticked off the buy list.
• Which tier your account is on, and whether you answered the question about building for yourself or for a client.
• Anything you send through the feedback button — what you wrote, the page you were on, and the address you gave us to reply to. If you are signed in we see the account address as well, so we can answer you.
• Details you type about somebody else. A project stores the client's name, email address and site address. Sending them a design stores the name and email address you give it, anything they write back against the drawing, when they last opened it and when they approved it. You choose to enter those, so make sure you have a reason to.

We do not ask for your own postal address, a phone number or a card. There is no payment processor, because nothing is for sale yet.

Why we are allowed to hold it

Your email address and your designs are held to run the account you asked for — that is a contract. Analytics, error reports and the check on the sign-in form are held under legitimate interests: knowing whether anyone is using the software, fixing it when it breaks, and stopping a script emptying the sign-in mailbox.

Who else sees it

• Supabase — the database and the sign-in records. The project sits in Central EU (Frankfurt).
• Vercel — hosts the site, so it handles every request and keeps request logs.
• Resend — sends the sign-in emails and carries anything you send through the feedback button, so it sees the address each one goes to.
• Google — only if you choose to sign in with Google.
• Umami — counts page views, on the EU region. It stores nothing on your device, keeps no IP address, and cannot follow you to another site.
• Cloudflare — the Turnstile check on the sign-in form, which is what keeps a script from sending sign-in emails from our domain.
• Sentry — error reports. It is configured to send no personal data with them: no IP address, no request headers, no email address.

Supabase, Sentry and Umami keep the data in the EU, and the site’s server code runs in Frankfurt. Some still leaves the UK and the EU: Vercel, Google and Resend are US companies, and Cloudflare runs its check on a worldwide network. Each transfer is made under the safeguards UK law requires, set out in that company’s data processing terms.

Nobody buys this data, and there is nothing to sell them.

Cookies

One cookie, and it is the one that keeps you signed in. Nothing on this site advertises, profiles or follows you elsewhere, which is why there is no banner asking you to accept anything. If that ever changes, this page changes with it and you will be asked.

How long we keep it

Your designs stay until you delete them or ask for the account to go. Sign-in records last as long as the account. Error reports and page-view counts are kept by Sentry and Umami on their own retention, and neither carries your identity.

What you can ask for

A copy of what we hold, a correction, or deletion. You can also object to how we use it, and you have the right to raise it with the Information Commissioner’s Office.

There is no delete-my-account button yet. Email hello@oakwardstudio.co.uk and we delete the account and every design on it. We would rather say that than put a button on the page before it does anything.

Changes

This page is dated at the top. When the software starts doing something new with your data, this page says so before it does. The terms cover what the software itself promises.