Sarqir Privacy Policy

1. Data Controller

For purposes of applicable privacy and data-protection laws, the controller responsible for the processing of personal data described in this Privacy Policy is:

Data Controller: Andranik Hambardzumyan
Service: Sarqir
Contact: support@sarqir.com

If you have questions about how we process your personal data or wish to exercise your privacy rights, you may contact us using the email address above.

2. Data We Collect

We collect and process personal data as necessary to provide, operate, secure, maintain, and improve the Service, as described below.

Account data — your email address, account ID, account creation and activity timestamps, and session and authentication information. If you register using an email address and password, we store a securely hashed version of your password. We do not store your password in plain text.

Google Sign-In data — if you choose to sign in with Google, we may receive your Google account identifier, email address, name, and profile image, depending on the information made available through your Google account. We use this information to create or connect your Sarqir account, authenticate you, and provide access to the Service.

Designs and project content — information you create or save as part of your projects, including project or design names, dimensions, panels, shelves, dividers, doors, drawers, selected materials, thicknesses, colors, textures, grain direction, configuration data, and export settings.

Password-reset data — when you request a password reset, we process a secure reset token, its expiration information, and related security metadata. Reset tokens expire after a limited period and are invalidated after use or expiration.

Email and communications data — when we send you transactional communications, such as password-reset emails, security notifications, and account or Service-related notices, we process your email address and relevant communication and delivery information. Our email service provider may also process delivery status, timestamps, and related technical metadata on our behalf.

Feedback and support data — when you submit feedback, contact us for support, or otherwise communicate with us, we may collect the information you provide, including your name and email address, feedback category, message, correspondence, screenshots or other attachments, account information, timestamps, page context, and relevant browser or device information. Screenshots and attachments may contain personal or confidential information, so please review them carefully before submitting.

Analytics data — we use Google Analytics to understand how visitors find and use the Service. Depending on your location, consent choices, and our Analytics configuration, Google Analytics may use cookies or similar identifiers to collect information such as page views and interactions, session statistics, approximate geographic location, and browser and device information.

We configure our analytics services so that we do not intentionally send Google Analytics directly identifying information such as your name, email address, phone number, feedback content, or the contents of your designs.

3. How We Use Data

We use personal data to:

• create and manage accounts and authenticate users;
• provide, save, load, process, and manage your designs and project data;
• generate previews, panel data, material data, calculations, and exports;
• send password-reset, security, account, and other Service-related communications;
• respond to your questions, support requests, and feedback, and communicate with you about the Service;
• operate and keep the Service secure;
• detect, prevent, and investigate abuse, fraud, errors, security incidents, and unauthorized access;
• troubleshoot, maintain, test, and improve the functionality, reliability, and performance of the Service;
• measure and analyze how the Service is used, including through analytics technologies where required consent has been obtained; and
• comply with applicable legal obligations.

We do not sell your personal data.

We do not use your private saved designs in public marketing or advertising without your permission.

We use information received from Google only for the purposes described in this Privacy Policy and do not use or transfer Google user data for advertising, personalized or interest-based advertising, sale to data brokers, or other unrelated purposes.

4. Legal Bases for Processing

Where applicable data protection law requires us to identify a legal basis for processing personal data, we rely on one or more of the following:

Performance of a contract — where processing is necessary to provide the Service you request, including creating and managing your account, authenticating you, saving and processing your projects, and providing Service features and exports.

Legitimate interests — where processing is necessary for our legitimate interests in operating, securing, maintaining, troubleshooting, preventing fraud and abuse, and improving the reliability and functionality of the Service, provided that those interests are not overridden by your rights and interests.

Consent — where we ask for your consent for a specific processing activity, such as the use of non-essential analytics cookies or similar technologies where consent is required by law. You may withdraw your consent at any time, subject to applicable law.

Legal obligations — where processing is necessary for us to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

5. How We Share Data

We may disclose or make personal data available to the following categories of recipients, as necessary for the purposes described in this Privacy Policy:

Service providers — companies that process personal data in connection with operating and supporting the Service. These currently include Railway for application hosting, database infrastructure, logging, and private object storage; Google for Google Sign-In authentication and Google Analytics; Resend for transactional email delivery; and Zoho Mail for receiving and responding to support, feedback, and other email communications.

Professional advisers — such as lawyers, accountants, auditors, insurers, or other professional advisers where reasonably necessary for legal, financial, compliance, or business purposes.

Legal and safety disclosures — authorities, courts, regulators, law-enforcement bodies, or other parties where we reasonably believe disclosure is required by applicable law, legal process, or enforceable governmental request, or is necessary to protect the rights, safety, security, or integrity of Sarqir, our users, or others.

Business transfers — if Sarqir or substantially all of its relevant assets are involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, personal data may be disclosed or transferred as part of that transaction, subject to applicable law.

Where a service provider processes personal data on our behalf, we require it to process that data in accordance with applicable data-protection requirements and appropriate contractual obligations.

6. Google User Data

If you choose to use Google Sign-In, Sarqir receives certain information from your Google account, which may include your Google account identifier, email address, name, and profile image, depending on the information made available through your Google account.

We use this information to create or connect your Sarqir account, authenticate and sign you in, display relevant account information, and help protect your account from unauthorized access.

We store the Google account information needed to maintain and authenticate your Sarqir account in accordance with this Privacy Policy. We do not use Google Sign-In to access your Gmail, Google Drive, Google Calendar, contacts, photos, files, or other Google services unless we clearly request additional permission from you for a specific feature in the future.

We do not sell Google user data or transfer it to advertising platforms, data brokers, or information resellers, and we do not use it for targeted, personalized, or interest-based advertising or unrelated purposes.

Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including applicable Limited Use requirements.

If we materially change how we access or use Google user data, we will update this Privacy Policy and provide any additional notice or obtain any consent required before using the data for a new purpose.

7. Cookies, Analytics, and Similar Technologies

Sarqir uses cookies and similar technologies that are necessary for authentication, security, session management, and core functionality. These essential technologies are required for the Service to operate and are not used for advertising.

We may also use analytics technologies and third-party analytics service providers to understand how visitors find and use the Service, measure its performance, identify problems, and improve the user experience. Depending on the analytics services we use, these technologies may collect information such as:

• page views and interactions;
• session and usage statistics;
• approximate geographic location derived from IP address, rather than precise GPS location;
• browser and device information; and
• cookies or similar pseudonymous identifiers.

We do not intentionally provide our analytics providers with directly identifying information such as your name, email address, phone number, feedback content, or the contents of your private designs. We do not use analytics technologies for targeted advertising or ad personalization.

Analytics technologies are non-essential and are used based on your consent where required by applicable law. Where consent is required, analytics technologies will not be activated until you accept analytics through our cookie banner. If you decline, non-essential analytics cookies will not be set.

You can change or withdraw your analytics preferences at any time through the “Cookie Settings” link in the footer. Withdrawing consent does not affect the lawfulness of processing that occurred before your withdrawal.

We may change the analytics providers or technologies we use from time to time. Where required, we will update this Privacy Policy or our cookie information to reflect material changes.

You may also control or delete cookies through your browser settings. Disabling essential cookies or similar technologies may affect the functionality of the Service.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain security, comply with legal obligations, resolve disputes, and prevent abuse.

Account data and saved designs are generally retained while your account remains active or until you delete the relevant data, delete your account, or request deletion, unless we need to retain certain information for a longer period for legal, security, fraud-prevention, dispute-resolution, or similar legitimate purposes.

Password-reset tokens and related security information are retained only for a short period necessary to complete or secure the password-reset process and are invalidated after use or expiration.

Email records, security logs, technical logs, and error logs are retained for limited periods as reasonably necessary for delivery, security, troubleshooting, maintenance, and legal purposes.

Feedback, support messages, and attachments are retained for as long as reasonably necessary to review, respond to, resolve, and learn from the communication, after which they may be deleted or anonymized.

Deleted information may remain temporarily in backups, logs, or technical archives until those systems are routinely overwritten or the information is otherwise securely removed.

Where we no longer need personal data for the purposes for which it was collected, we will delete or anonymize it unless applicable law permits or requires longer retention.

9. Your Rights and Choices

Depending on your location and applicable law, you may have the right to:

• access your personal data and receive information about how it is processed;
• correct inaccurate or incomplete personal data;
• request deletion of your personal data;
• receive certain personal data in a portable format and, where applicable, request its transfer to another service provider;
• object to certain processing of your personal data;
• request restriction of certain processing;
• withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal; and
• contact your local data-protection authority if you have concerns about how your personal data is handled.

These rights may be subject to conditions, limitations, and exceptions under applicable law.

You may also request deletion of your Sarqir account or use any account-deletion feature available in the Service.

To exercise your privacy rights, contact us at support@sarqir.com. We may request information reasonably necessary to verify your identity and process your request.

10. Security

We use reasonable and appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, destruction, and disclosure.

However, no online service or method of storing or transmitting data can guarantee absolute security. We encourage you to keep your account credentials secure and to contact us promptly if you suspect unauthorized access to your account.

11. International Data Transfers

Sarqir and our service providers may process or store personal data in countries other than the country where you live. These countries may have data-protection laws that differ from those in your jurisdiction.

Where applicable law requires safeguards for international transfers of personal data, we use appropriate legal mechanisms designed to protect your information, which may include recognized adequacy mechanisms or contractual safeguards.

We take reasonable steps to ensure that personal data transferred internationally receives an appropriate level of protection in accordance with applicable data-protection laws.

12. Children

Sarqir is a general-audience Service and is not directed to children.

We do not knowingly collect personal data from children below the minimum age at which they may lawfully use the Service without parental or guardian consent under applicable law.

If we learn that we have collected personal data from a child in circumstances where parental or guardian consent was required and was not obtained, we will take reasonable steps to delete the information.

If you believe that a child has provided personal data to Sarqir in violation of applicable law, please contact us at support@sarqir.com

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Service, our data practices, or applicable legal requirements.

Changes become effective when the updated Privacy Policy is published on this page.

14. Contact

If you have questions about this Privacy Policy, how we handle your personal data, or would like to exercise your privacy rights, please contact us at:

Email: support@sarqir.com

We will make reasonable efforts to respond to privacy-related requests within the time required by applicable law.