Privacy Policy

• Performance of a contract (GDPR Art. 6(1)(b)): sign-in, report generation, payment processing.
• Legal obligation (GDPR Art. 6(1)(c)): retention of accounting records.
• Legitimate interest (GDPR Art. 6(1)(f)): abuse prevention, security and availability of the service; improving the accuracy of drawing recognition with training examples (see section 7); cookieless, aggregate measurement of website visits; cookieless measurement of advertising campaign results with Google’s Consent Mode (see section 5).
• Consent (GDPR Art. 6(1)(a)): advertising cookies and the advertising click identifier (Google Ads). You can withdraw your consent at any time in the cookie policy.

If the drawing is not uploaded by the client (for example by the designer or the contractor), the personal data of third parties shown on it is provided by the uploader. We use this data only for the purposes described here; the data subjects can exercise the rights listed in section 8 in the same way.

Project in an account: we keep the uploaded drawings, the data extracted from them and the generated reports for as long as the project exists. When the project is deleted (Dashboard → delete project), the drawings, the extracted data, the reports and any training example made from the project are deleted as well.

Project without sign-in (guest project): deleted automatically – together with the drawings, the extracted data, the report, the buyer’s e-mail address and any training example made from the project –

• without payment, 30 days after it was created,
• after payment or unlocking with a promo code, 1 year after the payment.

You can request deletion of your account or earlier deletion of your data at any time at info@muleir.com. Data connected to accounting records must be kept until the statutory retention period expires; those can only be deleted afterwards.

Data is stored primarily within the European Union (Supabase — Frankfurt region). Transfers to a third country (USA) take place under the EU–US Data Privacy Framework (DPF) or the standard data protection clauses adopted by the European Commission (GDPR Art. 46(2)(c)).

When you sign in with a Google account, Google acts as an independent controller for the sign-in. The Google Ads tag loads before consent as well: in that case it sets no cookies, and under Google’s Consent Mode v2 Google only receives cookieless signals needed for modelled measurement: the page URL (without the project identifier and the download key), browser details, and on purchase the purchase identifier (the Stripe transaction ID), its value and currency.

Data is extracted from the uploaded drawings by automated (AI-based) processing. This processing does not produce an automated decision with legal effect concerning you: you review and edit the result before finalising the report.

If you paid for a project, unlocked it with a promo code, or generated a free report or a report with a subscription from it, the project’s corrected (reviewed) data and the storage reference of the drawings may be stored as a training example candidate. A member of our team reviews the candidate; once approved, the example may appear as an example in the instructions of the processing model when other drawings are processed (the drawing and the correct data). We do not retrain the model: the example is part of the instructions of individual processing runs.

In examples used as text only, we replace personal data (client, designer name, address, licence number, building site) with fictitious values. In an example passed as a drawing, the drawing’s text – including the title block – remains visible. The example is deleted together with the project (see section 4).

Legal basis and balancing. Our legal basis is legitimate interest (GDPR Art. 6(1)(f)): accurate recognition means fewer manual corrections for every user, and that requires real drawings – a fictitious example does not show where recognition goes wrong. We protect the data subjects’ interests in that examples are made only from paid or unlocked projects, every example is approved by a person, personal data in text examples is replaced, the example is deleted with the project, and you can object to the use at any time.

Objection: if you do not want your drawing to be used as a training example, write to info@muleir.com. We then delete the data of the example made from the project, and no further example is made from it. Third parties shown on the drawing (for example the client or the designer) can object at the same address.

• Access: information about the data we process
• Rectification: correction of inaccurate data
• Erasure: deletion of your data (“right to be forgotten”)
• Restriction: requesting restriction of processing
• Portability: your data in a machine-readable format
• Objection: against processing based on legitimate interest (including use as a training example, see section 7)

Send your request to info@muleir.com. Response time: no more than 30 days.

If you believe your data is being processed unlawfully, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), or take the matter to court.

• Website: naih.hu
• Phone: +36 1 391 1400
• Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary