Privacy Policy

JRLayout ("we," "us," or "our") operates JRLayout.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the security practices we use to protect it.

1) Information We Collect

A. Information you provide

• Account information: email address and password (handled through Firebase Authentication).
• Optional profile information: such as display name and company name (if you provide it).
• Content you create in the app: room names, inventory items, saved layouts, and related event/layout data you enter into JRLayout.

B. Billing information (payments and subscriptions)

JRLayout uses Stripe to process payments and manage subscriptions. We do not store full payment card numbers. Stripe may collect and process payment details (e.g., card information, billing address) directly.

C. Automatically collected information

When you use the Service, we and/or our service providers may automatically receive basic device and usage data (e.g., browser type, pages viewed, timestamps, IP address) as part of normal web and hosting logs.

2) How We Use Information

We use information to:

• Provide and operate the Service (create accounts, save and load your layouts and inventory).
• Maintain and improve the Service (debugging, preventing abuse, ensuring reliability).
• Manage subscriptions and billing (through Stripe).
• Provide support and communicate with you about your account or issues you report.

3) How We Share Information

We do not sell your personal information. We share information only as needed to provide the Service, including:

A. Service providers

• Firebase (Google): authentication and database hosting (Firebase Authentication and Firebase Realtime Database).
• Stripe: payment processing and subscription management.

These providers process information under their own privacy terms and security practices.

B. Legal requirements

We may disclose information if required to comply with law, regulation, legal process, or enforce our rights and protect users.

4) Data Storage and Retention

• Your app data (rooms, inventory, layouts) is stored in our Firebase database associated with your account.
• We retain data as long as your account is active or as needed to provide the Service, unless you request deletion.

5) Security Practices

We use reasonable administrative, technical, and organizational measures to protect your information, including HTTPS for data in transit, access controls via Firebase Authentication, and database rules designed to restrict access to authorized users.

No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard practices.

6) Your Choices and Rights

• You may access or update your account information through the Service.
• You may request deletion of your account and associated data through your account settings.

A. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have the following rights under GDPR:

• Right to Access: Request a copy of your personal data we hold.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.
• Right to Restrict Processing: Limit how we use your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing of your data for certain purposes.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us through your account settings. We will respond within 30 days.

B. CCPA Rights (California Users)

If you are a California resident, you have the following rights under CCPA:

• Right to Know: Request information about the personal data we collect, use, and share.
• Right to Delete: Request deletion of your personal data (subject to certain exceptions).
• Right to Opt-Out: We do not sell personal information. If this changes, you will have the right to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us through your account settings. We will verify your identity and respond within 45 days.

7) Children’s Privacy

JRLayout is not intended for children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

8) International Users

If you access JRLayout from outside the United States, your information may be processed in countries where our service providers operate.

9) Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on JRLayout.com with a revised effective date.

10) Contact Us

For questions or requests, contact us through your account settings or the login page.