Privacy Policy

SRL PROJECTS LTD (“Scaffold”, “we”, “us”) is the data controller for personal data processed through srlprojeccts.shop. We are a company registered in the United Kingdom, with its registered office at 8 Highbury Avenue, Gateshead, Tyne and Wear, NE9 7PX, United Kingdom.

For any privacy question or request, contact support@srlprojeccts.shop or write to the registered office above.

• Account data — name and email address you provide when you create an account or subscribe.
• Blueprint inputs — the plain-language descriptions of your ideas and any adjustments you enter into the tool.
• Generated outputs — the blueprints, wireframes, diagrams and prototype walkthroughs the service produces from your inputs.
• Uploaded or example files — any content you choose to attach or examples you paste in to refine a plan.
• Support & contact data — messages, email address, name and topic submitted through our contact and lead forms.
• Payment data — subscription status and billing metadata received from our payment processor. We never receive or store your full card number.
• Technical & usage data — IP address, device/browser type, and basic analytics about how pages and tools are used, collected via cookies and server logs.

We collect the personal data above from the following collection sources:

• Directly from you — the account details, blueprint inputs, adjustments, uploaded or example files, and contact/lead form submissions you enter or send us.
• Automatically from your device — technical and usage data gathered through cookies, local storage and server logs when you use the site.
• From third parties acting for us (processors) — subscription and billing metadata from our payment processor (Stripe), and aggregate measurement from our analytics provider.

We do not buy personal data and we do not obtain it from data brokers or public data sets.

• To provide the service (generate blueprints, save and export your plans) — legal basis: performance of a contract.
• To take payment and manage subscriptions — performance of a contract and compliance with legal (tax/accounting) obligations.
• To provide support and respond to enquiries — legitimate interests and, where applicable, performance of a contract.
• To secure, maintain and improve the service and prevent abuse — legitimate interests.
• For non-essential analytics — consent, where required.

User input: the idea descriptions, adjustments, and any files or example content you enter are your input. They are processed solely to generate and deliver your blueprint, wireframes, diagrams and prototype for that session, and to save them to your account so you can revisit and export them.

AI provider processing: to produce your results, the relevant input is sent to an AI generation provider acting as our processor under a data-processing agreement. Only the content needed to generate your output is shared, it is used only to return your result, and it is not used by that provider to train its models.

• We do not sell your inputs or generated outputs.
• We do not use your inputs, outputs or uploaded files to train AI or machine-learning models.
• Where an external AI processor is used to generate results, only the content needed to produce your output is sent, under a data-processing arrangement, and is not used by that processor to train its models on your behalf.
• You can delete a saved blueprint from your account, and you can ask us to delete your inputs, outputs and files — see “Your rights” and “How long we keep it”.

We share personal data only with service providers that help us run Scaffold, under contract and only as needed:

• Hosting & infrastructure — to run the website and application.
• Payment processing — Stripe, to take subscription payments and manage billing. Stripe acts as an independent controller for payment/card data under its own privacy policy.
• Database, authentication & storage — to store accounts, saved blueprints and generated assets.
• Email delivery — to send transactional and support emails.
• AI generation provider — where used, to produce results from your inputs.
• Analytics — to understand aggregate usage.

We may also disclose data where required by law, to enforce our terms, or to protect our rights, users or the public.

Some processors may store or process data outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as UK/EU adequacy decisions or Standard Contractual Clauses (with the UK Addendum where relevant) to protect your data.

• Account data — kept while your account is active and for a reasonable period afterwards.
• Blueprint inputs, outputs and files — kept while saved to your account; deleted on your request or shortly after account closure.
• Billing records — retained as required by tax and accounting law.
• Support messages — kept only as long as needed to handle your enquiry and for a reasonable follow-up period.
• Server logs & analytics — kept for a limited period for security and improvement.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data or complete incomplete data.
• Delete your data (right to erasure).
• Restrict or object to certain processing.
• Data portability — receive your data in a usable format.
• Withdraw consent at any time, where processing is based on consent.
• For California residents: know, delete, correct, and opt out of “sale” or “sharing” of personal information, and not be discriminated against for exercising these rights.

To exercise any right, email support@srlprojeccts.shop. We respond within the timeframes required by applicable law.

We do not sell your personal information for money, and we do not share it for cross-context behavioural advertising. California residents can still submit a request to confirm this at support@srlprojeccts.shop.

We use strictly necessary cookies to run the site and, where you consent, limited analytics cookies to understand usage. See our Cookie Policy for details and how to control them.

• Automated processing: the tool generates planning suggestions automatically, but these are non-binding references — there is no legal or similarly significant automated decision made about you.
• Security: we use encryption in transit, access controls and reputable processors; no method is 100% secure, but we work to protect your data.
• Children: the service is not for anyone under 13. Users aged 13–17 must have consent from a parent or guardian. We do not knowingly collect data from children under 13.

If you have a concern, contact us first at support@srlprojeccts.shop. UK/EU users also have the right to complain to a supervisory authority (in the UK, the Information Commissioner's Office).

We may update this policy; the “last updated” date above shows the latest version.