Privacy Policy
Effective date: 07.06.2026
Controller: Flameplace LTD, VAT BG200803111, Atanas Ishirkov str., 11 office 6, Sofia 1000, Bulgaria
Contact for privacy requests: info@flameplace.com
Production domain: https://flameplace.com
Flameplace is a digital platform for the interior design and furnishing industry. It provides market network, catalog, workspace, messaging, commercial workflow and AI asset-generation tools.
This Privacy Policy explains how Flameplace collects, uses, stores and shares personal data when you visit the website, create an account, use the platform, publish content, communicate with other users, use AI tools, subscribe to paid services or contact us.
Flameplace has not appointed a Data Protection Officer. Privacy requests should be sent to info@flameplace.com.
1. Who this policy applies to
This policy applies to visitors, registered users, company representatives, employees invited to company workspaces, business partners, private clients, suppliers, designers, agencies, manufacturers and other people whose data is processed through Flameplace.
Registration and AI tools are intended for users aged 18 or older. Flameplace does not knowingly provide registered accounts or AI tools to children.
2. Roles under data protection law
For most platform operations, Flameplace acts as an independent controller of personal data.
When a business customer uploads or manages personal data of its own clients, employees, collaborators, suppliers or end customers inside a private workspace, that business customer is responsible for having a valid legal basis and providing any required notices to those people. In that context, Flameplace may act as a processor or service provider for the business customer, while also remaining an independent controller for account security, billing, abuse prevention, service analytics and compliance.
3. Personal data we collect
We collect the following categories of personal data depending on how you use Flameplace.
| Category | Examples |
|---|---|
| Account data | Name, email address, password hash, email verification status, language, account settings and authentication/session data. |
| Profile data | Profile name, avatar, role, professional information, country, region, city, company membership and profile settings. |
| Company and business profile data | Company name, role/type, logo, images, descriptions, websites, phones, emails, social links, addresses, country, city, employees, partnership status and verification information. |
| Public content | Catalog data, product data, stock showcases, portfolio projects, rooms, posts, articles, events, images, tags, comments and other content you choose to publish or make visible. |
| Private workspace data | Projects, rooms, product selections, specifications, proformas, packing lists, client/project details, presentation links, shared links, embed links, commercial terms and workflow data. |
| Messaging and collaboration data | Dialogs, messages, message metadata, attachments, translations, read/deleted states and participants. |
| AI tool data | Uploaded images and files, prompts, reference images, product metadata, settings, generated images, videos, 3D-ready assets, AI sessions, cases, results, usage data, task IDs, run IDs, costs and Flames/credit transactions. |
| Billing and payment data | Billing profile, subscription plan, trial status, payment provider customer identifiers, payment method type, last four card digits where available, invoices, credits, balances and transaction records. Full payment card data is processed by payment providers and is not stored by Flameplace. |
| Notifications data | Browser push tokens, device tokens, notification preferences and delivery metadata. |
| Technical and usage data | IP address, user agent, browser/device information, session ID, request logs, error logs, page views, product usage events, search/filter interactions, security events and cookie consent choices. |
| Support and communications | Emails, support requests, feedback, complaints, attachments and related correspondence. |
We do not intentionally collect special categories of personal data, such as health, biometric, political, religious or trade-union data. You should not upload such data unless it is strictly necessary and you have a lawful basis to do so.
4. How we collect data
We collect data directly from you when you register, edit your profile, create or join a company, upload content, use AI tools, send messages, manage projects, subscribe, pay, contact us or change your settings.
We also collect data automatically through server logs, security tools, cookies, local storage, session storage, analytics tools, browser/device information and service telemetry.
We may receive data from other users when they invite you, add you to a company or workspace, message you, mention you, share project data with you or upload documents that contain your details.
We may receive limited data from payment providers, email providers, analytics providers, AI infrastructure providers, storage/CDN providers, search providers and other technical service providers.
5. Why we use personal data and legal bases
| Purpose | Legal basis under GDPR |
|---|---|
| Provide accounts, authentication, profiles, company pages, workspace features, messaging and AI tools | Performance of a contract or steps before entering into a contract. |
| Operate subscriptions, billing, invoicing, trials, Flames/credits and payment records | Performance of a contract; legal obligations; legitimate interests in accurate billing and fraud prevention. |
| Publish user-selected public content and make company pages, catalogs, stock, portfolios, posts and events discoverable | Performance of a contract; legitimate interests in operating a professional network; consent where required. |
| Process private workspace data and commercial documents | Performance of a contract; legitimate interests; processor obligations where Flameplace acts for a business customer. |
| Provide AI generation, safety checks, quality control, repair, import and asset storage | Performance of a contract; legitimate interests in service operation, safety and quality. |
| Improve Flameplace, including AI features, internal models, pipelines, prompts, quality controls and product performance | Legitimate interests in improving the service; consent where required by law or settings; contractual necessity where improvement is part of maintaining secure and reliable tools. |
| Analytics and product measurement | Consent where required for optional analytics/cookies; legitimate interests for strictly necessary service telemetry and security. |
| Security, abuse prevention, fraud prevention, moderation and legal enforcement | Legitimate interests; legal obligations. |
| Customer support and communications | Performance of a contract; legitimate interests; consent for optional marketing where required. |
| Comply with law and respond to authorities | Legal obligations; legitimate interests. |
6. Public content and visibility
Some Flameplace areas are public or visible to other users, including company pages, catalogs, stock showcases, portfolio pages, posts, articles, events, comments and activity feeds. If you publish or make content visible, that content may be indexed, viewed, copied, shared or stored by third parties outside Flameplace.
Private workspace data, private messages and private AI assets are not intentionally made public by Flameplace unless you or your company publish them, share them, create public or private links, embed them externally, invite other users or otherwise configure visibility.
7. AI inputs, outputs and service improvement
When you use Flameplace AI tools, we process the inputs and outputs needed to provide the requested feature. This may include product photos, reference images, prompts, product metadata, material and dimension details, generated images, generated videos, 3D-ready assets, generation settings, safety checks, usage metadata, task IDs, run IDs and error logs.
Flameplace may use uploaded images, prompts, AI outputs, generation settings, usage metadata and evaluation results to improve the service, including AI workflows, quality controls, safety checks, internal models, prompts, preprocessing, postprocessing and asset-generation pipelines. This may involve processing by Flameplace and by categories of AI infrastructure providers, model providers, storage providers and technical processors.
Flameplace does not use private workspace or AI content for public marketing without permission. Business customers that require stricter data-use limits should contact Flameplace to discuss enterprise or data processing terms.
8. Cookies, analytics and similar technologies
Flameplace uses cookies and similar technologies as described in the Cookie Policy. Strictly necessary technologies are used to operate the service. Optional analytics, media and notifications are controlled through the cookie consent system.
Analytics may include Yandex Metrika/Webvisor and Google Analytics if enabled in production.
9. Payments and billing providers
Flameplace may use Stripe and other payment providers where available. Payment providers may process payment details, billing identifiers, anti-fraud data, transaction data and legally required payment records. Flameplace stores only the billing and payment metadata needed to manage subscriptions, invoices, credits, balances, access rights, refunds, accounting and support.
10. Recipients and processors
We may share personal data with the following categories of recipients where necessary:
- hosting, database, infrastructure, CDN, storage and backup providers;
- payment processors and billing providers;
- email, notification and communications providers;
- analytics and measurement providers, subject to consent where required;
- AI infrastructure, model, validation and asset-generation providers;
- translation, search, indexing and workflow automation providers;
- real-time communication and WebSocket infrastructure providers;
- professional advisers, auditors, accountants and legal representatives;
- public authorities, courts, regulators or law enforcement where required by law;
- other users or companies when you choose to publish, share, invite, message, collaborate or create links/embeds.
We require processors to process personal data only under appropriate instructions and safeguards, except where they act as independent controllers under their own legal obligations.
11. International transfers
Flameplace is established in the European Union and may process data in the EU and other countries. When personal data is transferred outside the European Economic Area, Flameplace uses appropriate safeguards where required, such as adequacy decisions, standard contractual clauses, data processing terms, transfer impact assessments and technical/security measures.
12. Retention
We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including service operation, account management, billing, legal compliance, security, dispute resolution, backups, audit and legitimate business needs.
In general:
- account and profile data is kept while the account is active and for a reasonable period after deletion where needed for legal, security or backup reasons;
- public content may remain visible until deleted, unpublished or removed according to platform rules;
- private workspace, AI and messaging data is kept while needed to provide the service or until deleted according to available product controls, subject to legal, security and backup limits;
- billing, payment and tax records are kept for periods required by accounting, tax and commercial laws;
- technical logs and security records are kept for a limited period appropriate to security, troubleshooting and legal needs;
- backups may retain deleted data for a limited technical period before automatic rotation.
13. Security
Flameplace uses administrative, technical and organizational measures designed to protect personal data, including access controls, authentication, encrypted connections, logging, backup procedures, role-based permissions and internal restrictions. No online service can guarantee absolute security, but we work to reduce risk and respond to security issues.
14. Your GDPR rights
If GDPR applies, you may have the right to request access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You may also object to processing based on legitimate interests and to direct marketing.
To exercise rights, contact info@flameplace.com. We may need to verify your identity and account relationship before responding.
You also have the right to lodge a complaint with a supervisory authority. Flameplace is established in Bulgaria, where the relevant authority is the Commission for Personal Data Protection (CPDP): https://cpdp.bg/en/.
15. California notice
This section applies to California residents where CCPA/CPRA applies.
Categories of personal information collected may include identifiers, account information, commercial information, internet or electronic network activity, geolocation at country/region/city level where provided or inferred, professional or employment-related information, user-generated content, audio/visual content where uploaded, and inferences related to service use.
Flameplace uses these categories for the business and commercial purposes described in this policy. Flameplace does not sell personal information and does not share personal information for cross-context behavioral advertising. Flameplace honors Global Privacy Control as a safeguard for optional analytics/media choices where technically applicable.
California residents may have rights to know/access, delete, correct, opt out of sale/share, limit certain uses of sensitive personal information where applicable, and not be discriminated against for exercising privacy rights. Flameplace does not intentionally use sensitive personal information to infer characteristics.
Requests may be sent to info@flameplace.com.
16. Marketing communications
We may send service messages, security notices, billing notices and transactional emails where necessary. Marketing communications are sent where permitted by law and may be unsubscribed from using available instructions or by contacting us.
17. Changes to this policy
We may update this Privacy Policy when our service, vendors, legal obligations or processing practices change. The updated version will be published on this page with a new effective date where appropriate.
18. Contact
For privacy requests, questions or complaints, contact:
Flameplace LTD
Atanas Ishirkov str., 11 office 6, Sofia 1000, Bulgaria
Email: info@flameplace.com