Privacy Policy

Decato is interior-design software with an AI agent, available as a web application and a macOS desktop application (together, the “Service”). The Service is provided by Retreat Zone, Inc., a Delaware corporation (“we”, “us”); “Decato” is our product and brand.

This policy explains what we collect, why, who we share it with, and what you can do about it. It covers decato.ai, the Decato desktop app, and our account and billing systems. For the terms that govern use of the Service, see our Terms of Use.

Decato is built for and offered to customers in the United States. If you use it from elsewhere, your data will be processed in the United States under this policy.

Your project documents — floor plans, briefs, layouts, and the agent session history that produced them — are stored locally on your machine, in a folder under your home directory. They are not uploaded to us as a matter of course, and we do not browse them.

This means two practical things. Your client’s floor plan does not leave your Mac unless a feature you invoke needs it to (see §5). And we cannot recover your work — if you lose the folder or the machine, there is no copy on our side. Back up accordingly.

Account information. When you create an account we collect your email address, name, and profile image, handled for us by Clerk, our authentication provider. We also store which plan you are on and whether your access is active.

Payment information. Payments are processed by Stripe. Card details go to Stripe directly — we never see or store your full card number. We receive the transaction record: amount, plan, status, and the last digits of the card.

Messages you send us. If you join a waitlist or contact us about the product, we collect the email address and anything you write, plus the IP address the request came from, so we can reply and guard against abuse.

Usage and device information. Our servers log the usual technical details of a request — IP address, browser or app version, timestamps — and the website collects analytics as described in §4.

On decato.ai we use Google Analytics, loaded through Google Tag Manager, to understand which pages help and which don’t. It sets cookies and processes your IP address and browsing behaviour on the site.

Analytics cookies load only after you accept them. If you decline, or ignore the banner, only cookies strictly necessary to serve the site are set. You can change your choice at any time from the “Cookie settings” link in the footer.

Do Not Track. Some browsers can send a “Do Not Track” signal. There is no common industry standard for how to interpret one, so we do not respond to Do Not Track signals. Our cookie banner is the control that actually works here — declining there stops analytics regardless of what your browser sends. We do not allow third parties to collect personal information about your activity across other websites through our Service.

The desktop app does not carry a third-party analytics SDK — no Sentry, no PostHog, no Amplitude, Mixpanel or Segment. It contacts GitHub to check for updates, which necessarily reveals your IP address to GitHub, and it contacts our API to confirm your plan.

Decato works differently depending on your plan, and the difference matters for your data.

On the Free plan, planning runs on your own AI subscription. You connect your ChatGPT, Claude, or Gemini account, and the agent runs against it. Your prompts and project content go to that provider under your agreement with them — we are not in the middle of it, and their privacy policy governs what they do with it. Your login for that provider is stored on your machine, not on our servers.

Paid features — furniture sourcing and photoreal renders — run on our infrastructure. To produce them we send the relevant scene data to the AI providers we use for generation, and product queries to the retailer catalogues we search. We send what the job needs and no more.

Renders produced by Decato are AI-generated.

We use content generated through the Service — layouts, briefs, product matches, and renders — to improve Decato’s models and output quality. You can turn this off at any time by emailing [email protected] — one line is enough, no reason needed, and it costs you nothing else. We will confirm within 5 working days. Turning it off applies going forward. A switch in the app’s settings is coming; until it ships, the email address above is the way, and it works.

Some limits apply regardless of the setting. We do not use your content to build a profile of you, we do not sell it, and we do not share it with other customers. Content processed on the Free plan is handled by your own AI provider under their terms (see §5), not by us.

If you run a studio and need a written data-processing agreement covering your clients’ information, write to us — we will put one in place, and content covered by it is excluded from the improvement use described above.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share it with service providers who help us run Decato, each only to the extent their job requires — the current list is in §8.

We may also disclose data where legally required, to protect our rights or someone’s safety, or to a successor entity in a merger or acquisition — in which case this policy continues to apply to data transferred until it is replaced with notice to you.

• Clerk — authentication and account records: email, name, profile image, plan state.
• Stripe — payments, subscriptions, invoices.
• Google — website analytics via Google Tag Manager and Google Analytics, after consent.
• GitHub — distribution of desktop app updates; receives your IP address when the app checks for one.
• Telegram — internal notification of new product enquiries, so we see and answer them promptly.
• AI providers — generation of renders and sourcing results on paid plans.
• Our hosting provider — operation of decato.ai and api.decato.ai, including server logs.

• Account data — while your account exists, then deleted or anonymised within 90 days of closure.
• Billing records — 7 years, because tax and accounting law requires it.
• Enquiry and waitlist data — up to 24 months from your last contact with us.
• Website analytics — up to 14 months.
• Server logs — up to 90 days.
• Project documents — on your machine, for as long as you keep them. Deleting them there deletes them.

You can, at any time:

• Access or correct your account details — in the app, or by writing to us.
• Delete your account and the personal information tied to it, except records we must keep for tax and accounting.
• Get a copy of the personal information we hold about you.
• Opt out of using your content to improve Decato (§6).
• Change your cookie choice from the footer, or unsubscribe from any marketing email using the link in it.

Write to [email protected] and we will respond within 30 days. We will never charge you or give you a worse service for asking. Residents of some states have additional statutory rights; where they apply to us, we will honour them on the same terms.

We protect data in transit with TLS, restrict access to production systems to the people who need it, and rely on Clerk and Stripe for credential and payment handling rather than building our own. Your project documents stay on your machine, which removes an entire class of risk (see §2).

No system is perfectly secure, and we will not claim otherwise. If a breach affects your personal information, we will notify you as the law requires.

Decato is a professional tool and is not directed at children. You must be at least 18 to use it. We do not knowingly collect data from children; if you believe a child has given us data, write to [email protected] and we will delete it.

We may update this policy as the product changes. When we make material changes we will update the “Last updated” date at the top of this page and, where appropriate, tell you in the Service or by email before they take effect. Continued use after that means you accept the updated policy.

Questions about this policy, or want to exercise a choice under it? Contact Retreat Zone, Inc. at [email protected], or by mail at 651 N Broad St, Suite 206, Middletown, DE 19709, United States.