Privacy Notice

Who we are

Tilecast provides a room visualization service for tile and flooring retailers. Tilecast is the data controller for the personal data described in this notice.

What we collect and why

• Account data (name, email address, login credentials, shop name): to create and secure your account and provide the service. Legal basis: performance of our contract with you.
• Shop content (product names, notes, tile images, logo): to run your visualizer page. Legal basis: contract.
• Customer room photos uploaded on a shop's visualizer page: used only to generate the requested room view, then discarded. Legal basis: legitimate interests in providing the requested feature.
• Usage and technical data (render counts, timestamps, device and browser information, IP address, error logs): to enforce plan limits, prevent abuse, and improve reliability. Legal basis: legitimate interests.
• Support messages: to answer your questions. Legal basis: legitimate interests.

Who we share data with

• Merchant of Record — Paddle, for the sale of subscriptions, subscription management, payments, invoicing and tax compliance.
• Service providers — hosting, database and storage providers, and the image generation provider that produces room views.
• Professional advisers — legal and accounting, where needed.
• Authorities — where we are required to by law.

We do not sell personal data and we do not use customer room photos to train our own models.

International transfers

Some of our providers process data outside the UK/EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses to protect the data.

Retention

Account and shop content are kept while your account is active and for up to 30 days after it closes, then deleted. Room photos are deleted once the room view has been produced. Usage logs are kept for up to 12 months. Billing records are retained by Paddle for as long as tax law requires.

Your rights

Under the GDPR you may request access to your data, correction, erasure, restriction, portability, or object to processing based on legitimate interests, and withdraw consent where processing relies on it. We respond within one month. You may also complain to your local supervisory authority (in Ireland, the Data Protection Commission).

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, private storage buckets with time-limited signed links, and row-level database permissions so shops can only reach their own data.

Cookies

We use essential cookies and local storage to keep you signed in and to run the checkout. We do not use advertising cookies. You can clear or block cookies in your browser, but the service will not work without the essential ones.

Contact

For any privacy request, contact Tilecast through the support address shown in your dashboard.