PlotForge AI Privacy Policy

PlotForge AI is a product of Veltrix Global, covering both the PlotForge AI web service and the PlotForge AI Android application. For any privacy question, correction or request, contact hello@veltrixglobal.tech. We are based in Lahore, Pakistan and respond to privacy requests by email.

Accounts are created with an email address and password, or through Google sign-in on the web. When you use Google sign-in, we receive your email address, name and profile picture from Google — we never receive your Google password.

Creating an account in the Android application or on the web uses your email address and a password. Email verification is completed with a six-digit code we send to that address. Once you are signed in, an authentication session token is held on your device so you stay signed in; it identifies your session only.

• Account email address
• Password, held only as a salted hash by our authentication provider
• Six-digit email verification codes, valid for a short period
• Session and authentication tokens stored on your device

We store your profile information, your account status and your remaining credits so the application knows what you are entitled to use.

Content you create inside PlotForge AI is stored so the application can show it back to you. It belongs to you. We access it only to operate the service, or where you explicitly ask us to help with a support issue.

• Projects you create and their specifications
• Building descriptions and other text you enter
• Generated blueprints
• Generated reports
• Generated renders and images

When you activate a licence, the application contacts the central Veltrix licence service. That request carries your licence key and an installation/device identifier so the licence can be bound to your account and limited to a small number of devices.

• Licence records, plan and expiry
• Installation and device activation records
• Validation requests sent to the Veltrix licence service

Licence keys are stored only as a one-way hash — we cannot read your key back.

To generate blueprints, reports and renders, the building descriptions, project text and other content you provide for that request are sent to an AI provider through the Lovable AI Gateway, which routes requests to the underlying model. Only the text and context needed to fulfil your request is sent, and it is sent for one reason: to return the generated result to you. We do not use it to build a profile of you.

We do not control how the upstream model provider handles data on its own systems, so we make no claim about their retention beyond what their own terms state.

Your email address is passed to our managed transactional email service so we can send verification codes, password resets and service notices from our notify.veltrixglobal.tech sender domain. It is not used for advertising.

If you contact us, we keep your message and the contact details you give us for as long as we need them to handle your enquiry.

The PlotForge AI application includes PostHog product analytics as a conditional component: it only sends data when analytics is enabled in the build configuration. We cannot confirm from this policy alone whether it is active in the copy you installed. On this website we use Google Analytics 4 and Microsoft Clarity for aggregate usage statistics.

No advertising SDK was found in the current audit of the PlotForge AI application. We do not sell your data and we do not run advertising inside the app.

The PlotForge AI Android application requests the INTERNET permission only. It does not request camera, microphone, contacts, location or device-file permissions.

Veltrix Global operates the licence authority for PlotForge AI. When you activate a paid licence we store the licence record, its plan and expiry, the account it is bound to, and a record of each device activation (so a licence can be limited to a small number of devices). Licence keys themselves are stored only as a one-way hash — we cannot read your key back.

Where you pay through a manual bank or wallet transfer, we store the payment reference, the method, the amount and any proof of payment you upload, so that the payment can be verified by our team.

Authentication, the managed cloud database and the file storage that holds generated images and reports all run on Lovable Cloud (built on Supabase). Data is stored in managed, access-controlled databases protected by row-level security policies, so one account cannot read another account's rows.

• Veltrix Global backend infrastructure (Lovable Cloud / Supabase) — account, profile, credits, projects, generated output, licence records and file storage
• AI provider via the Lovable AI Gateway — the building descriptions, project specifications and text needed to generate your requested blueprint, report or render
• Managed transactional email service — your email address, to deliver verification codes and service notices
• Veltrix licence service — licence key hash, account identity and device activation information
• PostHog — product analytics, only where analytics is enabled in the installed build
• Google Sign-In — optional login method on the web; supplies email, name and avatar
• Google Analytics 4 and Microsoft Clarity — aggregate usage statistics on this website only
• Cloudflare and our hosting provider — serve this website and our APIs

We do not sell your personal data to anyone.

Data is encrypted in transit using HTTPS/TLS and encrypted at rest by our cloud provider. Access to production data is restricted to authorised Veltrix Global staff. Server-to-server APIs, including the licence API, require a secret key and log denied attempts. Sensitive values such as licence keys are hashed, never stored in plain text.

We do not run an automatic time-based deletion schedule, so we do not quote a fixed retention period we cannot honour. Account, profile, credit, project, generated output and licence records are kept for as long as your account exists, and are removed when we process a deletion request. Email verification codes are short-lived and expire automatically. Licence and audit records may be kept after an account closes where we need them to prevent licence reuse and fraud, and to meet financial record-keeping obligations. Support, contact and application messages are kept for as long as needed to handle the enquiry.

Inside the application you can choose "Request account deletion", which opens our hosted account deletion request page. You can also open that page directly.

Deletion is not automatic or instant. After you submit the form, the request reaches our team, we confirm it from the email address on the account, and we then delete the account together with its profile, credits, projects, project specifications, generated blueprints, reports and renders, stored files, and device activation records. We confirm by email when this is done.

We may keep a minimal licence, payment or audit record where it is needed to prevent licence reuse or to meet financial record-keeping obligations. If that applies to you, we will tell you which record is kept and why.

• Access a copy of the personal data we hold about you
• Correct data that is inaccurate or out of date
• Request deletion of your account and associated data
• Withdraw consent for optional processing, such as marketing email
• Object to a specific use of your data and ask us to explain it

Send any of these requests to hello@veltrixglobal.tech.

PlotForge AI is not directed at children. If you believe a child has created an account, contact us and we will review and remove it.

We may update this policy as the product changes. The revision date at the top of this page always reflects the current version, and material changes will be announced in the application or by email.

Veltrix Global — Lahore, Pakistan. hello@veltrixglobal.tech