Privacy Notice
This notice explains how personal data is handled when you visit Architect Assets, create an account, buy Pro, use projects or contact support.
Controller and contact
The data controller is the sole trader operating App Bucket, trading as App Bucket and Architect Assets.
Data we collect
- Account and profile information, including name, email, profession, organization, region and unit preferences.
- Subscription, billing-status, seat and referral metadata. Stripe holds full payment-card details; we do not.
- Saved tool records, project and board content, uploaded files, reviewer names, roles, comments, decisions and sign-off records.
- Security and operational data such as IP address, user agent, session records, timestamps, request logs and error information.
- Support and feedback messages and any screenshots or files you choose to attach.
- Analytics events only after you consent to analytics cookies.
Why we use it
- To create accounts, provide tools, store records and operate project/team workflows under our contract with you.
- To take payment, administer subscriptions and deliver referral rewards under that contract.
- To secure, troubleshoot and prevent abuse of the service in our legitimate interests and where required by law.
- To retain financial and contractual records needed for legal obligations.
- To send product updates only where you have opted in; you can withdraw that choice from Account.
- To understand aggregate product use where you have consented to analytics.
Who receives data
We use service providers where necessary to operate Architect Assets, including Stripe for billing, Amazon SES for transactional email, Cloudflare/R2 or configured storage providers for uploaded assets, hosting and database providers, and the App Bucket support service for support and feedback.
Invited team members can see shared team projects and their connected tool records. Anyone holding an active project review link can see the board made available through that link. We do not sell personal data.
International processing
Some providers may process data outside the UK. Where required, we rely on an adequacy regulation, contractual safeguards or another lawful transfer mechanism. Provider locations and safeguards are reviewed as services change.
Retention
Account and saved project data is normally retained while the account remains open. Deleted records may remain in restricted backups for a limited recovery and security period. Billing, referral and transaction records may be retained for tax, accounting, fraud-prevention and legal requirements.
Review/sign-off records are retained with their project until the project or account is deleted, subject to legal obligations. Support data is retained only as long as needed to resolve, evidence and improve the service.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, objection or portability, and may withdraw consent at any time. Contact [email protected]. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.
Cookies and changes
See our Cookie Notice for session, preference and analytics details. We will update this notice when processing materially changes and will bring significant changes to account holders’ attention.