Privacy Policy
House A-Z — https://a-z.house
Effective Date: 12 February 2026
Last Updated: 6 October 2026
1. Introduction
This Privacy Policy explains how Azai-25 EOOD ("Company," "we," "us," or "our"), a company registered under the laws of the Republic of Bulgaria, collects, uses, shares, and protects your personal data when you use the House A-Z platform, website at https://a-z.house, mobile applications, and related services (collectively, the "Service").
We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Bulgarian Personal Data Protection Act, and other applicable data protection laws worldwide.
Please read this Privacy Policy carefully. By using the Service, you acknowledge that you have read and understood this policy. If you do not agree with our practices, please do not use the Service.
2. Data Controller
The data controller responsible for your personal data is:
Azai-25 EOOD
Ovcha Kupel 1
Sofia, Sofia City Province 1632
Bulgaria
Data Protection Officer: Yuriy Boev
Email: [email protected]
Phone: +359 87 888 0176
If you have questions about how we process your personal data, or wish to exercise your data protection rights, please contact us using the details above.
3. Personal Data We Collect
We collect different categories of personal data depending on how you interact with the Service.
3.1 Information You Provide Directly
Account Information. When you create an account, we collect your name and email address. Authentication is handled by our identity provider, Clerk — your password is set and stored with Clerk, and we never receive or store it. If you sign up using a third-party authentication provider (such as Google or Apple), we receive your name, email address, and profile picture from that provider via Clerk.
Profile Information. You may choose to provide additional information such as a profile picture, location, or biographical details.
Project Data. When you use the Service, you create and store project-related data including property details, floor plans, room configurations, budget figures, product selections, task lists, notes, and design preferences.
Property and Location Data. When you add a property, we collect the address, city, postal code, country, and — where you provide or confirm it — the precise geographic coordinates (latitude and longitude) of that property. This is typically the address of your home.
Images and Files You Upload. You may upload photographs of the interior and exterior of your property, architectural and floor plans, permits, contracts, invoices, receipts, and other project documents. These images are also sent to the AI providers listed in Section 5 when you use AI Features. Please read Section 9.2 carefully — it explains an important limitation in how uploaded files are stored and accessed.
Contacts You Add. If you record details of contractors, suppliers, or other third parties in the Service, we store the information you enter about them, including their name, phone number, email address, company, and any notes you write. You are responsible for ensuring you have a lawful basis to share other people's details with us.
Community Content. If you participate in the Community Creations gallery or other public features, we collect the content you choose to share publicly, along with any associated captions or descriptions.
Payment Information. When you subscribe to a paid plan, payment processing is handled by Stripe. We do not directly collect or store your full credit card number. We receive from Stripe a limited set of information such as the last four digits of your card, card type, expiration date, billing address, and transaction history for our records. Stripe processes payment data as a data controller in its own right. For details on how Stripe handles your data, see their privacy policy at https://stripe.com/privacy.
Communications. When you contact us for support, send us feedback, or communicate with us by email, we collect the content of those communications along with your contact details.
Collaboration Data. When you invite collaborators to your projects, we collect the email addresses of those invitees and manage access permissions you set.
3.2 Information Collected Automatically
Usage Data. We automatically collect information about how you use the Service, including pages visited, features used, actions taken, time spent on pages, and the date and time of your visits.
Device and Technical Data. We collect information about the device and browser you use to access the Service, including IP address, device type, operating system, browser type and version, screen resolution, language preferences, and unique device identifiers.
Log Data. Our servers automatically record information when you access the Service, including your IP address, the date and time of your request, the referring URL, and pages viewed.
Cookies and Similar Technologies. We use cookies, local storage, and similar tracking technologies to collect information about your browsing activity. See Section 10 (Cookies and Tracking Technologies) for details.
3.3 Information from Third Parties
Authentication Providers. If you log in through a third-party service (Google, Apple, etc.), we receive your name and email from that provider according to the permissions you grant.
Payment Processor. Stripe provides us with transaction confirmations, payment status, and limited card details as described above.
Analytics Providers. We may receive aggregated or pseudonymized analytics data from third-party analytics services we use to understand how the Service is used.
4. How We Use Your Personal Data
We process your personal data for the following purposes, each with a corresponding legal basis under GDPR Article 6:
| Purpose | Data Used | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Providing and maintaining the Service (account creation, project management, budget tracking) | Account info, project data, device data | Performance of contract (Art. 6(1)(b)) |
| Processing payments and managing subscriptions | Payment info, account info | Performance of contract (Art. 6(1)(b)) |
| Operating AI Features (design suggestions, budget optimization, product recommendations, DIY guidance) | Project data, usage data, preferences | Performance of contract (Art. 6(1)(b)) |
| Enabling collaboration features (project sharing with partners or contractors) | Account info, collaboration data, project data | Performance of contract (Art. 6(1)(b)) |
| Displaying Community Content in public galleries | Community content, profile info | Consent (Art. 6(1)(a)) |
| Sending transactional communications (account confirmations, subscription receipts, security alerts) | Account info | Performance of contract (Art. 6(1)(b)) |
| Sending marketing communications (product updates, tips, newsletters) | Account info, usage data | Consent (Art. 6(1)(a)) |
| Measuring our advertising on Facebook and Instagram and showing our ads to people who visited our website (only if you accept advertising cookies) | Cookie identifiers, IP address, browser and device data, pages visited, sign-up event | Consent (Art. 6(1)(a)) |
| Improving and developing the Service (analytics, feature development, performance monitoring) | Usage data, device data, aggregated project data | Legitimate interest (Art. 6(1)(f)) |
| Ensuring security and preventing fraud (detecting unauthorized access, abuse prevention) | Account info, device data, log data | Legitimate interest (Art. 6(1)(f)) |
| Complying with legal obligations (tax reporting, responding to lawful requests) | Account info, payment info, usage data | Legal obligation (Art. 6(1)(c)) |
| Defending and establishing legal claims | Relevant data as necessary | Legitimate interest (Art. 6(1)(f)) |
Where we rely on legitimate interest as a legal basis, we have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms. You may request details of these assessments by contacting us.
5. AI Features and Your Data
5.1 How AI Features Use Your Data
Our AI-powered tools (Home Design Planner, Budget Optimizer, Product Picker, DIY Knowledge Agent, Couples Agent, and Smart Suggestions) process your project data to generate personalized recommendations. This includes analyzing your room configurations, budget allocations, product preferences, and design choices to provide relevant suggestions.
We provide these AI Features through the third-party AI service providers listed in Section 6.1 — currently Google, OpenAI, and Freepik. Depending on which feature you use, the data shared with these providers includes the text prompt you write, the photographs of your property you upload, inspiration images you supply, floor plans, and relevant project context such as room dimensions and budget line items.
Some AI processing is routed through our own self-hosted automation infrastructure (n8n) before reaching a provider. Some image processing — background removal, segmentation, depth estimation, and image compression — runs either on our own servers or via the image-processing providers listed in Section 6.1.
These providers are bound by data processing agreements and may only process your data according to our instructions and for the purposes described in this Privacy Policy. You must not use the AI Features in any way that violates the terms or policies of these AI service providers.
5.2 AI Training
We may use aggregated and anonymized data derived from user interactions with the Service to improve the performance and accuracy of our AI models. This aggregated data cannot be used to identify individual users. We do not use your identifiable personal data or specific project details to train AI models without your explicit consent.
5.3 Automated Decision-Making
The AI Features provide suggestions and recommendations to assist your planning process. They do not make binding decisions on your behalf. You are always free to accept, modify, or disregard any AI-generated suggestion. In accordance with GDPR Article 22, no decisions with legal or similarly significant effects are made solely by automated means without human involvement.
5.4 Opting Out
AI Features are optional parts of the Service. You control whether your data is sent to an AI provider by choosing whether to use them — we do not send your project data, photographs, or documents to an AI provider unless you actively invoke a feature that requires it. The rest of the Service (project management, budget tracking, floor plans, collaboration) works without AI Features.
We do not currently offer an account-level switch that disables AI Features permanently. If you would like AI processing disabled on your account, email us at [email protected] and we will arrange it.
6. How We Share Your Personal Data
We do not sell your personal data. We share personal data only in the following circumstances:
6.1 Service Providers (Sub-processors)
We share personal data with trusted third-party service providers who process data on our behalf to help us operate the Service. These providers are bound by data processing agreements and may only process your data according to our instructions.
| Category | Provider | Data shared | Purpose |
|---|---|---|---|
| Authentication and identity | Clerk, Inc. (USA) | Name, email address, profile picture, password credentials, session data | Account creation, sign-in, session management |
| Database hosting | Neon, Inc. (data stored in the EU — AWS eu-central-1, Frankfurt) |
All Service data described in Section 3 | Storing your account, projects, budgets, and property data |
| Application hosting and compute | Vercel, Inc. (USA) | All request and response traffic, server logs, IP addresses | Running and serving the Service |
| File storage | Vercel Blob (Vercel, Inc.) | All images and documents you upload — property photographs, floor plans, permits, contracts, receipts — and all AI-generated images | Storing and serving your uploaded and generated files. See Section 9.2 |
| Payment processing | Stripe, Inc. (USA/Ireland) | Name, email address, billing address, company name, tax identification number, transaction and subscription history | Processing subscription payments and managing billing |
| Product analytics, error monitoring, and AI tracing | PostHog, Inc. (data stored in the EU region) | Name, email address, usage and device data, IP address, error reports, and AI prompts and outputs | Understanding Service usage, detecting faults, and monitoring AI quality |
| AI image generation and vision analysis | Google LLC (USA) | Text prompts, uploaded property photographs, inspiration images, floor plans | Generating and analysing designs |
| AI image editing, chat assistance, and embeddings | OpenAI, L.L.C. (USA) | Text prompts, uploaded and annotated photographs, conversation content, budget and product text | Precision image editing, the budget assistant, and search relevance |
| AI background removal | Freepik Company S.L. (Spain) | Uploaded floor plan and architectural plan images | Removing backgrounds from uploaded plans |
| Image compression | Tinify B.V. / TinyPNG (Netherlands) | Uploaded image files | Reducing image file sizes |
| AI workflow orchestration | n8n — self-hosted by Azai-25 EOOD | User identifier, text prompts, uploaded source and inspiration images | Routing certain AI generation jobs |
| Rate limiting and abuse prevention | Upstash, Inc. | IP addresses | Preventing abuse and denial-of-service |
| Email delivery | Namecheap, Inc. (PrivateEmail SMTP) | Recipient email address, name, and the content of transactional and invitation emails | Sending account, support, and collaboration invitation emails |
| Bot protection | Google LLC (reCAPTCHA) | IP address, browser and interaction signals | Protecting public forms from automated abuse |
| Cookie consent management | Termly, Inc. (USA) | Consent preferences, IP address | Presenting and recording your cookie choices |
| Maps display | Google LLC (Google Maps) | Property coordinates, rendered in your browser | Showing your property on a map |
| Video transcript retrieval | Google LLC (YouTube) | Video URLs you supply | Extracting transcripts from videos you link to a project |
The table above is our complete sub-processor list as at the "Last Updated" date at the top of this policy. You may also request it by emailing [email protected]. We will notify you at least 30 days in advance of adding new sub-processors, giving you the opportunity to object.
We do not use a customer support ticketing platform — support is handled by email. We do not use a separate error-monitoring provider; error reports are captured by PostHog as described above. We do not sell your personal data. If you accept advertising cookies, we use the Meta pixel as described in section 6.7 and section 10.
6.2 Collaborators
When you invite collaborators to your projects, we share your project data with those collaborators according to the access permissions you set. Your name and profile information are visible to your collaborators.
6.3 Community Features
If you choose to share Content through the Community Creations gallery or other public features, that Content and your associated display name become publicly visible to all users of the Service.
6.4 Legal Requirements
We may disclose your personal data if required to do so by law, in response to a valid legal process (such as a court order or subpoena), or to protect our rights, property, safety, or the rights, property, or safety of others.
6.5 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you of any such transfer and any choices you may have regarding your data.
6.6 With Your Consent
We may share your personal data with third parties when you have given us your explicit consent to do so.
6.7 Advertising Partners
If you accept advertising cookies, our website loads the Meta pixel provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland) on our public pages and when you create an account. It sends Meta information about your visit (cookie identifiers, IP address, browser and device information, the public pages you view, and whether you created an account) so we can measure our Facebook and Instagram ads and show them to people who visited our website. It does not run inside your projects, shared links or account pages. For collecting and transmitting this data, Meta and Azai-25 EOOD are joint controllers under Meta's Controller Addendum; Meta is responsible for its own further processing, described in Meta's Privacy Policy (https://www.facebook.com/privacy/policy). Meta may transfer data to the United States under the EU-U.S. Data Privacy Framework. You can withdraw consent at any time through "Cookie preferences" in the footer. We do not send Meta your name, email address or project data.
7. International Data Transfers
7.1 Transfer Mechanisms
Azai-25 EOOD is based in Bulgaria, a member state of the European Union. Your personal data is primarily stored and processed within the EU/EEA.
Where we transfer personal data outside the EU/EEA (for example, when using service providers based in the United States or other countries), we ensure that appropriate safeguards are in place, including:
- Adequacy Decisions: Transferring data to countries that the European Commission has determined provide an adequate level of data protection (such as transfers to the United States under the EU-U.S. Data Privacy Framework, where the recipient is certified).
- Standard Contractual Clauses (SCCs): Using the European Commission's Standard Contractual Clauses (approved June 2021) to contractually require recipients to protect your data to EU standards.
- Supplementary Measures: Implementing additional technical and organizational safeguards where necessary, based on a transfer impact assessment.
7.2 UK Transfers
For personal data of users in the United Kingdom, we rely on the UK International Data Transfer Addendum to the EU SCCs or the UK adequacy regulations, as applicable.
7.3 Your Right to Information
You may request a copy of the safeguards we use for international data transfers by contacting us at [email protected].
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account information | Duration of your account + 30 days after deletion | Service provision; data export window |
| Project data | Duration of your account + 30 days after deletion | Service provision; data export window |
| Community Content | Until you remove it, or duration of your account + 30 days | Community feature operation |
| Payment and billing records | 7 years from the transaction date | Tax and accounting obligations under Bulgarian law |
| Communication records (support) | 3 years from the last communication | Service improvement; dispute resolution |
| Usage and analytics data | 26 months from collection (aggregated thereafter) | Service improvement and analytics |
| Log data | 12 months from collection | Security, fraud prevention, debugging |
| Marketing consent records | Duration of account + 3 years | Demonstrating consent compliance |
After the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with you.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS/SSL) and at rest.
- Access controls and authentication mechanisms to restrict access to personal data to authorized personnel only.
- Regular security assessments and vulnerability testing.
- Incident detection and response procedures.
- Employee training on data protection and security best practices.
While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
9.1 Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with GDPR Article 33. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay, in accordance with GDPR Article 34, providing details of the breach and the steps we are taking to address it.
9.2 How Uploaded Files Are Stored — Important
We want to be direct with you about a limitation in how uploaded files are currently stored.
Files you upload to the Service — property photographs, floor plans, permits, contracts, invoices, receipts — and the images generated by our AI Features are stored with our file storage provider at web addresses that are not protected by a login. Access to your project inside the Service is controlled by your account and the permissions you set. The underlying file address is not.
In practice this means that anyone who obtains the direct web address of one of your files can open it without signing in. We do not publish those addresses, they are not listed anywhere, and they are not indexed by search engines. But they are not secret, and you should treat them as though they could be shared.
What this means for you. Please consider carefully before uploading documents containing information you would not want a third party to see if the address were forwarded — for example identity documents, bank details, or contracts containing other people's personal data. The Service is designed for property, design, and budget planning, and you do not need to upload identity or financial documents to use it.
We are working to place uploaded files behind authenticated access. We will update this policy and notify account holders when that work is complete. If you have concerns about a specific file, contact [email protected] and we will remove it.
10. Cookies and Tracking Technologies
10.1 What We Use
We use the following types of cookies and similar technologies:
Strictly Necessary Cookies. These are essential for the Service to function and cannot be disabled. They include session cookies for authentication, security tokens, and load-balancing cookies.
Functional Cookies. These remember your preferences and settings (such as language, display preferences, and last-visited project) to provide a more personalized experience.
Analytics Cookies and Local Storage. These help us understand how users interact with the Service by collecting information about pages visited, time spent, and features used. Our analytics provider stores this information primarily in your browser's local storage rather than in cookies, but we treat it as non-essential tracking and gate it behind your consent in the same way.
Advertising Cookies. Only if you accept advertising cookies, we use the Meta pixel (cookies such as _fbp, _fbc and fr, kept for up to 90 days) to measure our Facebook and Instagram ads and to show our ads to people who visited our website. These cookies are off until you opt in, and you can switch them off at any time in Cookie preferences, which also removes our _fbp and _fbc cookies. If you use Global Privacy Control, we do not load them.
10.2 Your Cookie Choices
When you first visit the Service, we present a cookie consent banner that allows you to accept or reject non-essential cookies. You can change your cookie preferences at any time through the "Cookie preferences" link in the website footer, which reopens the consent panel.
You can also manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Service.
10.3 Global Privacy Control (GPC)
We recognize and honor Global Privacy Control (GPC) signals transmitted by your browser or browser extension. GPC is the modern, legally enforceable successor to the deprecated Do Not Track (DNT) standard. When we detect a GPC signal (Sec-GPC: 1), we treat it as a valid opt-out request for the sale or sharing of your personal information under applicable US state privacy laws (including CCPA/CPRA), and we disable non-essential tracking for your session.
You can enable GPC in browsers that support it natively (such as Firefox, Brave, and DuckDuckGo) or by installing a GPC-compatible browser extension. For more information, visit https://globalprivacycontrol.org.
We do not respond to the legacy Do Not Track (DNT) header, as the DNT specification was abandoned by the W3C in 2019 and carries no legal weight.
11. Your Rights
11.1 Rights Under GDPR (EU/EEA Users)
If you are located in the European Union or European Economic Area, you have the following rights under the GDPR:
Right of Access (Art. 15). You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.
Right to Rectification (Art. 16). You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure (Art. 17). You have the right to request deletion of your personal data where there is no compelling reason for its continued processing. This right is subject to certain exceptions, such as legal retention obligations.
Right to Restriction of Processing (Art. 18). You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest its accuracy.
Right to Data Portability (Art. 20). You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object (Art. 21). You have the right to object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests. You have an absolute right to object to processing for direct marketing purposes.
Right to Withdraw Consent (Art. 7(3)). Where processing is based on your consent (such as marketing communications or Community Content sharing), you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right Not to Be Subject to Automated Decision-Making (Art. 22). You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. As described in Section 5.3, our AI Features do not make such decisions.
11.2 Rights Under UK GDPR (United Kingdom Users)
If you are located in the United Kingdom, you have equivalent rights under the UK GDPR. You may contact the Information Commissioner's Office (ICO) at https://ico.org.uk if you have concerns about how we process your personal data.
11.3 Rights Under CCPA/CPRA (California Residents)
If you are a California resident, you have the following rights under the California Consumer Privacy Act and the California Privacy Rights Act:
Right to Know. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting the information, and the categories of third parties with whom we share it.
Right to Delete. You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
Right to Correct. You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out of Sale or Sharing. You have the right to opt out of the sale or sharing of your personal information. We do not sell your personal information. We use the Meta pixel for advertising only after you opt in through our cookie banner. You can opt out at any time through Cookie preferences or by enabling Global Privacy Control.
Right to Limit Use of Sensitive Personal Information. You have the right to limit the use and disclosure of sensitive personal information to what is necessary to perform the Service.
Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA/CPRA rights.
Categories of Personal Information Collected. For purposes of the CCPA/CPRA, we have collected the following categories of personal information in the preceding twelve (12) months:
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, email address, username, IP address, account name | YES |
| B. Protected classifications | Gender, age, race, ethnicity, marital status | NO |
| C. Commercial information | Subscription records, payment history, transaction details | YES |
| D. Biometric information | Fingerprints, voiceprints | NO |
| E. Internet or network activity | Browsing/usage data, feature interactions, log data | YES |
| F. Geolocation data | General location derived from IP address; precise coordinates of a property you add | YES |
| G. Audio, electronic, or similar | Photographs of your property, floor plans, uploaded documents, AI-generated images | YES |
| H. Professional or employment info | Job title, work history | NO |
| I. Education information | Student records | NO |
| J. Inferences | Preferences and characteristics derived from usage patterns | YES |
| K. Sensitive personal information | — | NO |
We do not sell personal information. If you accept advertising cookies, we share identifiers and internet activity (categories A and E) with Meta for cross-context behavioral advertising; you can opt out at any time as described above.
Verification. When you submit a request, we may ask you to verify your identity by confirming your email address or other account details.
11.4 Rights Under Other Jurisdictions
If you are located in another jurisdiction with applicable data protection laws (such as Brazil's LGPD, Canada's PIPEDA, Australia's Privacy Act, or Singapore's PDPA), you may have similar rights under those laws. Please contact us to exercise your rights, and we will respond in accordance with the applicable legal requirements.
11.5 How to Exercise Your Rights
You can exercise your rights by:
- Email: Contact us at [email protected] with your request. This is the primary route for access, correction, erasure, portability, and restriction requests. For US-specific requests, you may also use [email protected] or visit https://a-z.house/contact.
- Deletion: Step-by-step instructions for requesting deletion of your account and data are at https://a-z.house/data-deletion.
- In the Service: You can edit or delete individual projects, properties, documents, and designs directly in the Service at any time. We do not currently offer self-serve full-account deletion or a one-click data export — both are handled by email as described above, and we are working to bring them into the product.
- Response Time: We will acknowledge your request promptly and respond within 30 days (GDPR) or 45 days (CCPA/CPRA). If we need additional time, we will inform you of the reason and the extended deadline.
- No Fee: In most cases, you will not need to pay a fee. If a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse the request, and we will explain why.
11.6 Right to Lodge a Complaint
If you believe that we have not handled your personal data properly, you have the right to lodge a complaint with your local supervisory authority. For users in Bulgaria, this is the Commission for Personal Data Protection (CPDP) at https://www.cpdp.bg. For users in other EU/EEA countries, you can find your local authority at https://edpb.europa.eu/about-edpb/about-edpb/members_en.
12. Children's Privacy
The Service is not directed at children under the age of 18. We do not knowingly collect personal data from children under 18. If you are a parent or guardian and become aware that your child has provided us with personal data, please contact us at [email protected]. If we become aware that we have collected personal data from a child under 18 without parental consent, we will take steps to delete that information.
13. Third-Party Links and Services
The Service may contain links to third-party websites, products, or services that are not operated by us. This includes product links that may appear in AI-generated recommendations. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party service you visit or use.
14. Marketing Communications
14.1. We will only send you marketing communications (such as product updates, tips, newsletters, or promotional offers) if you have given us your explicit consent to do so, or where permitted under applicable law (such as soft opt-in for existing customers under the EU ePrivacy Directive).
14.2. You can withdraw your consent to marketing communications at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us at [email protected].
14.3. Withdrawal from marketing communications does not affect transactional communications (such as subscription receipts, security alerts, or service-critical notices), which we may continue to send as necessary for the operation of the Service.
15. Changes to This Privacy Policy
15.1. We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we will notify you by email or through a prominent notice on the Service at least 30 days before the changes take effect.
15.2. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after the effective date of any changes constitutes your acknowledgment of the updated policy.
15.3. We will maintain an archive of previous versions of this Privacy Policy, which is available upon request.
16. Browser Extension (House A-Z Product Saver)
If you install the House A-Z Product Saver browser extension (the "Extension"), the following describes how it handles your data. The Extension is a companion to your House A-Z account and is governed by this Privacy Policy in the same way as the rest of the Service.
16.1 What the Extension Does
The Extension's sole purpose is to let you save products you find on third-party websites into your House A-Z projects and budgets. It acts only when you explicitly trigger it — by opening the side panel, selecting "Extract Product from Page," or using the element picker.
16.2 Data the Extension Accesses and Collects
- Product information you choose to save. When you extract or pick a product, the Extension reads that page's product details — such as name, brand, price, currency, description, image URL, and the page URL — and sends them to your House A-Z account to be saved to the project and budget you select.
- Authentication data. The Extension reads your House A-Z session cookie from the
a-z.housedomain (via our authentication provider, Clerk — see Section 6.1) solely to confirm you are signed in. It does not read cookies from other websites. - Local device storage. The Extension uses your browser's extension storage to cache your session token and remember lightweight interface state (for example, which tabs have the panel open and the most recently extracted product). This data remains on your device.
The Extension does not collect your browsing history, does not track the pages you visit, and does not read page content unless you actively ask it to save a product from the page you are viewing.
16.3 Browser Permissions
The Extension requests only the permissions required for this purpose: access to the active tab and script injection (to read product details from the page you choose, on your action); host access (because products may be on any website); cookie access (to confirm your House A-Z sign-in); storage (for the local cache described above); and the side panel (to display its interface).
16.4 How Extension Data Is Used and Shared
Product data captured by the Extension is used only to create and update items in your House A-Z projects and budgets, and is handled under the same terms as data you enter directly into the Service (Sections 4 and 6). We do not sell Extension data and do not use it for any purpose beyond saving products to your account.
17. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:
Azai-25 EOOD
Ovcha Kupel 1
Sofia, Sofia City Province 1632
Bulgaria
Data Protection Officer: Yuriy Boev
Email: [email protected]
US Privacy Requests: [email protected]
Phone: +359 87 888 0176
Website: https://a-z.house
Contact Form: https://a-z.house/contact
This Privacy Policy was last updated on 23 July 2026.