Archifiq
Pricing
Legal

Privacy

This policy explains what data Archifiq collects, why, where it is stored, and the rights you have over it.

The effective date and operating legal entity are confirmed when this policy is published.

Who we are

Archifiq is a systemization platform for the construction industry — architecture, engineering, construction, real-estate development, consulting, and project management. We help practitioners diagnose how their practice works and build reusable systems.

We are the data controller for the personal data described in this policy. The operating legal entity and a contact address are confirmed at publication.

What we collect

Account data: when you create an account, we store your email address and authentication identifiers. Authentication is handled by Supabase Auth.

Systemization Score data: the answers you provide to the Systemization Score and the resulting score across the five dimensions (Design, Delivery, Team, Business Development, Management).

Communication data: if you opt in, the email address you give us to receive your report and follow-up messages, along with your recorded consent.

Purchase data: when you buy a paid product, the transaction is processed by Paddle, our Merchant of Record. We receive a record of the purchase and the entitlement it grants; we do not store your full card details.

Usage and product analytics: basic, privacy-respecting usage events that help us understand which parts of the product are useful. We do not sell this data.

Why we use it

To provide the service: compute your score, deliver your report, grant the products you buy, and operate your account.

To communicate with you: send the report and follow-up messages you opted in to receive, and respond to your requests.

To improve the product: understand which features help, and fix what does not — using aggregated, privacy-respecting measurement.

We rely on your consent for opt-in communications, and on the necessity of performing our agreement with you for the core service.

Where your data lives

Your core data is stored in our database and storage, hosted on Supabase in the European Union region. We chose EU residency deliberately to support KVKK and GDPR posture.

Transactional email is sent through Resend. Payment processing is handled by Paddle as Merchant of Record. Each of these processors handles data under its own terms; we work with them as processors for the limited purposes above.

Consent and communications

We send marketing or follow-up email only where you have given recorded consent. Each such message includes a one-click way to unsubscribe, and unsubscribing is honored before any further send.

Authentication and essential service emails (for example, sign-in links) are sent because they are necessary to operate your account.

Cookies and similar technologies

We use only the cookies and local storage necessary to keep you signed in and to run the site. We do not use cookies to build advertising profiles.

Where measurement is used, it is configured to respect your privacy and to avoid unnecessary personal identification.

How long we keep it

We keep your data for as long as your account is active or as needed to provide the service, and then for the period required to meet legal, accounting, or reporting obligations.

You can ask us to delete your data; we will do so unless we are required to retain part of it by law.

Your rights

Under KVKK and GDPR you may request access to your data, correction of inaccurate data, deletion, restriction or objection to certain processing, and portability of data you provided.

To exercise any of these rights, contact us at the address confirmed at publication. We respond within the timeframes the applicable law requires.

AI processing

Some features use AI to produce a reviewed first draft — for example, a narrative explanation of your score. AI output is a draft you stay in control of; it is never presented as final or authoritative, and critical outputs pass a human-approval step before delivery.

We do not allow your data to be used to train third-party AI models without your consent.

Changes to this policy

If we make a material change to this policy we will update the effective date and, where appropriate, notify you. The current version is the one shown on this page.

This policy is provided in good faith and reviewed before publication. We recommend a qualified data-protection professional review it for your jurisdiction.