Security
Client work is confidential before it is anything else. Here is what we actually do with it.
Your drawings
Projects, versions, and renders are scoped to your account. Every query that reads a project checks ownership first — there is no code path that returns another account's work.
Credentials
Passwords are hashed, never stored in plaintext, and the default sign-in path is a one-time magic link that expires in 24 hours. API keys are stored as a SHA-256 hash: the full key is shown once at creation and cannot be retrieved afterwards, so a database leak cannot be replayed against the API.
Sharing
Client links carry a random token, not a guessable id, and are excluded from search indexing by robots.txt and a per-page noindex. Each link has independent toggles for comments, dimensions, and source downloads, and can be revoked at any time.
Payments
Card details never reach our servers. Checkout and the billing portal are hosted by Stripe, and we store only a customer id and subscription status. Stripe webhooks are signature-verified before any account change is applied.
Third-party processors
Google Gemini for plan and image generation, Stripe for payments, and Resend for transactional email. Generation prompts include your brief and room sizes; they are not used to train models.
Deleting your account
Settings → Security deletes your account along with every project, version, render, and share link. It is immediate and cannot be undone.
Reporting a vulnerability
Email hello@archi4d.com with steps to reproduce. We’ll acknowledge within two business days and won’t pursue anyone acting in good faith.