What happens to what you upload.

For your account, billing, support and security, Pecalium Pty Ltd decides what is collected and why, and is responsible for it. The privacy policy covers that.

For the drawings, photos and project details you upload, including photos of your customers’ homes, you decide what goes in. We process it on your behalf, under the data processing addendum. If one of your customers asks us about a photo of their home, we will usually refer them to you and help you answer.

To read a drawing and make a render, some of what you upload has to leave our own systems. For each render that can be the drawing or photo, any reference or material pictures, the colours and finishes you chose, and the instructions built from them.

It goes to OpenRouter in the United States, which passes it to Google’s Gemini models. Every request is set to use zero data retention routing and to refuse any provider that collects data, so it only goes to endpoints that don’t keep it once they have answered and don’t train on it. Your name, email address and billing details are not sent.

We do not use your drawings, photos, renders or other content to train or fine-tune any AI model, ours or anyone else’s. If that ever changed, it would only be with your separate, clear agreement.

We do use stored renders and the drawings they came from to test our own quality checks, so we can show a change to the service makes renders better before we switch it on. That is testing our software, under the same no-retention settings, not training a model.

The app, its database, and the pictures and renders you upload are hosted in Sydney on DigitalOcean. Uploads and renders are stored encrypted at rest, and connections use HTTPS. They leave Australia only when they are sent for AI processing.

A few other providers handle other parts of the service:

• Stripe (United States) for payments. Your full card number never reaches us.
• SMTP2GO (New Zealand) for email.
• Better Stack (United States and European Union) for logs and error monitoring.
• Cloudflare (United States) for this website and DNS.

The full list, with what each one does, is on the subprocessors and security page. We update it before we add or replace a provider that handles your content, and tell account owners by email.

Members of your team see projects according to their roles. We do not sell personal information.

When you ask for help, or when we are tracking down a fault, abuse or a security issue, a small number of our staff can open your projects and view the app as you. Every time they do, it is logged, and that access is used to run and fix the service and for nothing else.

The app uses only essential cookies. This public website uses analytics and advertising cookies from Google, Meta and LinkedIn. They never receive anything from inside the app. Section 9 of the privacy policy explains how to opt out.

• While you have a plan, projects, uploads and renders stay until you delete them.
• When a subscription ends, the team’s projects, uploads and renders are kept for 90 days, then deleted.
• A free account that has never paid is deleted with everything in it once nobody has signed in for 90 days. Sign in at least once every 90 days to keep it.
• Render attempts that fail are deleted after 14 days.
• Deleting a project, an upload or your account removes it straight away. It can’t be undone.
• Billing and tax records are kept as long as Australian tax law requires.

Deleted content can stay in backups and logs for a limited time until they are overwritten. Backups are for disaster recovery, not for getting back something you deleted, so download the renders you need to keep.