Privacy Policy

Last updated:

PRIVACY POLICY OF MAKET

Hi. We are Maket (legally known as Maket Technologies Inc.). We are a Canadian technology company building an AI-powered platform for architectural design and visualization. Our mission is to democratize architecture by enabling anyone from homeowners to professionals to design, edit, and visualize conceptual floorplans and 3D renderings through an intuitive, AI-assisted experience.

If you use our platform or visit our website, this policy applies to you and you accept it. This policy explains what personal information we collect, how we use it, and the choices you have when you:

  • visit our website,

  • create an account or use our platform,

  • purchase or subscribe to our services, or

  • contact us (support, sales, marketing, events).

It also applies to information we may receive about you from third parties, where permitted by law.

This Policy applies in conjunction with our Terms of Services (the “Terms”) available here.

At a glance

  • We collect account, billing, and usage information to provide and improve the services.

  • We share information with service providers who help us run the services (we don’t sell your personal information).

  • Depending on where you live, you may have rights to access, correct, delete, or object to certain uses of your information.

  • Questions? Contact us at info@maket.ai.

What this policy does not cover:

  • Job applicants/Employees/contractors: If you apply for a job at Maket, our personnel privacy policy applies. 

  • Third-party sites: If you use third-party websites or services linked from our services, their privacy policies apply. We are not responsible for their privacy practices, as we do not control them.

Table of content

We recommend that you read this Policy to ensure that you are fully informed about the way we process your personal information before choosing to use our services, do business with us or otherwise provide personal information to us. 

You can use the headings below to jump to the section you need:

  1. Important terms used in this Policy

  2. Scope of this Policy

  3. The information that we collect

  4. How we collect personal information

  5. How we use of your personal information

  6. Who we share your information with

  7. International transfers

  8. Consent

  9. How we use cookies

  10. AI features and automated decision-making

  11. Security safeguards and security incidents

  12. For how long we retain your personal information

  13. Your choices and rights concerning your personal information

  14. How you can contact us

  15. Modifications to the Policy

  16. Additional information

1. Important terms used in this Policy

Here are a few terms we use in this policy and what we mean when we use them:

“personal information” is information concerning a natural person that allows this person to be identified, or any other similar definition given to such term in applicable laws; 

This means any information that can identify you directly or indirectly (for example, your name or email address).

“platform” refers to our online platform allowing users to design, edit, and visualize conceptual floorplans and 3D renderings through an intuitive, AI-assisted experience;

“process” or “processing” means generally any operation or set of operations which is performed on personal information or on sets of personal information, whether or not by automated means, such as to collect, use, disclose, transfer, store, adapt, store, etc. 

In short, we process information when we take an action that involves personal information. For example, when we store it in a database or use it to provide and improve the services.

“services” refers generally to any services or products provided by Maket, including the platform and Maket’s website.

As noted below, please take into consideration that certain terms could have different definitions depending on the jurisdiction where they are used. Privacy laws vary between jurisdictions.

2. Scope of this Policy

The Policy applies to personal information in our possession or control, including information collected when you utilize Maket’s services. The Policy also applies to information we receive from third parties about you while providing our services.

Maket operates its business in many different jurisdictions throughout the world. This Policy and Maket’s privacy practices have been constructed to comply with all those jurisdictions. As such, certain concepts and defined terms used in this Policy have been generalized to ensure this Policy remains consistent with all applicable data protection laws. Should you have any questions, please do not hesitate to contact our Data Protection Officer using the information set out in Section 14 below.

3. The information that we collect  and how we collect it

We aim to collect only the personal information that we need to provide and improve the services, meet legal requirements, and run our business. We do not collect more than we need. 

Generally, we obtain information directly from you. However, we may also collect personal information about you from outside sources, with your consent or without your consent, if permitted by law.

A. Information you provide to us

Category

Examples

Why we collect it

Account & profile

Name, email, password, language preference, organization name, account preference.

To create and manage your account and deliver the services

Billing & subscription

Billing address, payment method details, transaction records
Payment information is processed by third-party payment providers such as Stripe. Maket does not store full payment card details.

To process payments, prevent fraud, and maintain records

Business contact info (B2B)

Job title, company name, work email

To manage customer relationships and enterprise accounts

Support & communications

Support tickets, emails, call notes

To respond to you and improve support quality

Content you submit and create using the services

Personal information contained in project inputs, prompts, files, images, plans, designs, feedback

To provide the features you request and operate and improve the services

Important: we encourage you to minimize the personal information that you provide to Maket through the platform. 

B. Information we collect automatically

Category

Examples

Why we collect it

Device & browser data

IP address, device identifiers, OS, browser type

To keep the services secure and functioning

Usage data

Pages viewed, features used, clicks, logs, crash reports

To improve performance, usability, and reliability

Approximate location

City/region inferred from IP

To localize the experience, prevent fraud, and apply regional settings

Cookies & similar technologies

Cookie identifiers, preference signals

To remember settings, measure usage and improve services

C. Information we obtain from third parties (where allowed)

We may receive information from the following categories of third parties, provided they are authorized to disclose this information to us:

  • Payment processors (payment confirmations and fraud signals).

  • Authentication data (where you use third-party login, such as Google or Apple, we will obtain information such as your name, email address and profile picture (if provided)).

  • Analytics or advertising partners (site performance or campaign measurement).

  • Social networks (if you interact with our pages or choose to use a social sign-in option, where offered).

  • Public sources (for example, business contact data made public).

  • Governmental entities (for example, in the case of fraud).

  • Other partners, clients and collaborators (for example, if an enterprise client shares information about its authorized users)

We use this information in ways consistent with this policy and applicable law.

4. Sensitive Information

We do not intend to collect sensitive personal information (also called special categories under GDPR). We ask that you please not upload or include any such information in any plans, files, or communications with us or when using the services. If you voluntarily provide sensitive information, it will processed in accordance with this Policy.

We also don’t target our services at children and we do not knowingly collect personal information from children under the age required by applicable law in their jurisdiction.

5. How we use your personal information 

We only use personal information when we have a valid legal reason to do so. Here are the reasons for which we process your data:

Purpose and Description

Legal Basis (GDPR and UK GDPR)

To provide our services to you, including generation, editing, and visualization of floorplans; to provide any other product or service to you; to manage your subscription, billing and payments; to resolve technical issues with our products and services; to communicate with you when you submit questions, comments or suggestions; to maintain our business relationship generally; to keep our platform running.

Legitimate interests or performance of a contract

To improve our service offerings; to support our research and development; to understand how users interact with the services to improve it; to ensure the efficiency and quality of our products and services; to provide you with information about our technological services and products that may be of interest to you; for marketing purposes; to send you communications or updates.

Legitimate interests or consent (where required by applicable laws, such as in the case of email marketing)

To request your feedback.

Legitimate interests or consent (where required by applicable laws).

To prevent and detect error and fraud; to manage our disputes; to ensure the security of all interested parties of our enterprise.

Legitimate interests or performance of a contract

For training, quality assurance or administration purposes.

Legitimate interests or consent (where required by applicable laws)

To negotiate or enter into a corporate transaction.

Legitimate interests or performance of legal obligations

To meet legal requirements.

Compliance with legal obligations

To accomplish any other use that is clearly to your benefit.

Legitimate interests or protection of your vital interests 

* Note: The legal bases listed below apply where the GDPR applies (“GDPR” means Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data; the “UK GDPR” means the GDPR as saved into United Kingdom (“UK”) law by virtue of the United Kingdom’s European Union Withdrawal Act 2018);

Maket may also use your personal information to compile statistics, for example to detect trends in the use of its services and to improve them. However, these statistics do not identify you and have been anonymized. Anonymized information means it cannot reasonably be used to identify you.

Where authorized by law, your personal information may also be used for another purpose than those set out above without your consent. Otherwise, your personal information will not be used for purposes other than those described above, except with your consent.

Some information is necessary to provide the services (for example, an email address for account creation, or billing details for a paid plan). If you choose not to provide required information, we may not be able to use the services or specific features.

6. Who we share your information with

We share personal information only when necessary to operate our business and provide the services, and we limit sharing to what is necessary. We do not sell your personal information.

As of the date of this Policy, Maket shares personal information only with its service providers and sub-processors as described in this section. Maket does not share personal information with other third parties for their own independent purposes, unless it first obtains your consent. Maket communicates personal information to the following categories of third-parties:

A. Within Maket

Your information may be accessed by employees and contractors within Maket who need it to perform their job. Access is limited and based on the principle of least privilege.

B. Service providers (processors)

We work with trusted vendors who help us run the services. These may include providers of:

  • cloud hosting and infrastructure

  • large language model providers

  • payment processing and billing

  • analytics and performance monitoring

  • customer support systems

  • email delivery and communications

  • security monitoring

These providers:

  • can only use your information under our instructions,

  • must protect it with appropriate security safeguards, and

  • are contractually required to comply with applicable data protection laws.laws, such as in the case of email marketing)

C. Business partners

We may share limited information with partners such as resellers, referral partners, or event sponsors where necessary to support our business or provide services to you. Where required, we will obtain your consent before sharing information for marketing purposes.

D. Professional advisers

We may share information with lawyers, auditors, accountants, banks, or insurers where required for legal, financial, or compliance purposes.

E. Corporate transactions

If we are involved in a merger, acquisition, financing, restructuring, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate safeguards.

F. Legal and safety disclosures

We may disclose personal information if we believe in good faith that it is necessary to:

  • comply with a law, regulation, court order, or lawful government request,

  • protect the rights, property, or safety of Maket, our users, or others,

  • detect or prevent fraud or security incidents,

  • enforce our agreements or policies.

Maket will obtain your consent if it wishes to communicate your personal information to third parties not listed above. Any such third parties are required by contract to protect your personal information and to use it only for the purposes for which it was shared.

Third-party websites

If you access third-party websites or services through our platform, their privacy policies apply. We are not responsible for their practices. You can request information about the categories of recipients we share personal information with by exercising your right of access (see Section 13).

7. International transfers

Because we operate internationally and use service providers in multiple countries, your personal information may be processed outside your province, state, or country of residence (including Canada, the United States, the EEA, and the UK). All transfers or communications of personal information outside the jurisdiction where it was initially collected will be made in accordance with applicable laws. For example, where required by law, we implement appropriate safeguards when we transfer personal information internationally, which may include:

  • contractual protections (such as Standard Contractual Clauses approved by the European Commission and, where applicable, the UK Addendum)

  • data transfer assessments where required,

  • technical and organizational security measures.

If you would like more information about our transfer safeguards, you may contact us.

8. Consent

In some situations, we may rely on your consent to process personal information. Your consent may be express or implied. For example, your specific consent will be required for :

  • certain marketing communications,

  • certain non-essential cookies and tracking technologies,

  • processing of sensitive information (only where legally permitted).

When we rely on consent:

  • we request it in clear and specific language,

  • your consent must be manifest, free and informed,

  • you may withdraw it at any time,

  • withdrawing consent does not affect processing that occurred before withdrawal.

You can withdraw consent by:

  • using the unsubscribe link in marketing emails,

  • adjusting cookie preferences through our consent tool,

  • contacting us directly.

Please note that if you withdraw consent for certain processing, some features of the services may no longer be available. This will not affect your ability to browse our public website.

9. How we use cookies

Cookies are small data files stored on your device when you visit our services. They help us remember your preferences and understand how you use our services. 

We use cookies to:

  • make the website work,

  • remember preferences,

  • understand usage and performance,

  • measure marketing effectiveness (where allowed).

And our cookies fall under these broad categories:

  • Essential cookies — required for core functionality and security.

  • Analytics cookies — help us understand website performance.

  • Marketing cookies — help measure and improve marketing (where allowed). These cookies may be set by us or by third-party partners.

We use a consent tool (currently CookieYes) that lets you manage non-essential cookies. You can manage your cookie preferences and understand which cookies are used by the services at any time by using the CookieYes banner that appears when you first visit our website, or by clicking the cookie settings link in our website footer. You can also block or delete cookies through your browser settings.

Please note: blocking certain cookies can prevent access to our services or your experience might be degraded. However, disabling non-essential Cookies should not affect core functionality, but may limit analytics-based improvements.

We may also use web beacons (tracking pixels) in our marketing emails to see which pages you view and which messages you open. If you consent to receiving email marketing communications from us, you acknowledge the use of such tracking tools allowing us to analyse the effectiveness of our marketing campaigns.

10. AI features and automated decision-making

AI Features

Our services include AI-assisted functionality to help generate, edit, or visualize designs and related outputs. To provide these features, we process the inputs you provide (which may include prompts, files, and project content) and usage signals (such as feature interactions). 

If you submit personal information, protected health information, or other sensitive information through these features, you consent to Maket processing that information to provide the Services. You understand that this information may be incorporated into AI outputs (as defined in the Terms). 

Maket uses third-party large language model providers to power certain AI features. Some of the content you submit may be transmitted to and processed by these providers in accordance with their applicable terms and data processing agreements. A list of our current AI subprocessors is available upon request.

If you submit as an AI Input (as defined in the Terms) information relating to a third party, you represent and warrant that you have obtained all necessary consents from that individual prior to submission.

The AI models used in Maket are trained using internal data, public datasets, licensed data, and synthetic data generated by our teams. Maket may also train its AI models on AI Input (as defined in Maket’s Terms of Services). In doing so, Maket will deploy commercially reasonable to anonymise AI Input data before using it for training purposes. However, Maket cannot guarantee perfect anonymization. For this reason, Maket asks that you avoid incorporating personal information in AI Input. If you do incorporate personal information in AI Input, you consent to Maket using it for training purposes. Except strictly as explained in this paragraph, Maket will never train its AI systems using your personal information.

Automated Decision Making

We do not currently use automated decision-making that produces legal or similarly significant effects on you. If this changes, we will update this policy and provide any required notices and choices. Depending on your location, you may have the right to request more information about automated processing and to object to certain profiling. You may also have the right to object to profiling for direct marketing.

11. Security safeguards and security incidents

Security measures that have been implemented by Maket

We use administrative, technical, and physical safeguards designed to protect personal information. These physical, electronic, and administrative measures include: 

Data in Transit:

All communications between your browser, API client, or application and Maket's servers are protected by end-to-end encryption (HTTPS/TLS 1.2 or higher).

Data Storage:

Customer data — including project files, uploaded images, and generated floorplans — is stored in encrypted databases and object storage systems with secure key management.

Where feasible, data is pseudonymized or anonymized to reduce re-identification risk.

Access Controls:

We implement role-based access, least-privilege principles, and multi-factor authentication (MFA) to ensure only authorized personnel can access user or system data.

Access permissions are reviewed regularly to maintain compliance.

System Resilience and Backups:

We perform continuous encrypted backups with industry-standard recovery objectives (RTO/RPO) to minimize downtime and data loss.

Critical systems are hosted on redundant infrastructure to ensure continuity of service.

Security Monitoring:

Our infrastructure benefits from real-time monitoring, centralized logging, and automated alerting for suspicious or abnormal activity.

Audit logs are retained for up to one (1) year for forensic and compliance purposes.

Staff and Vendor Oversight:

All Maket employees:

  • undergo background checks,

  • sign confidentiality and data-protection agreements, and

  • receive annual privacy and security training.

Third-party sub-processors (such as Stripe, Google Cloud, OpenAI, and others) are vetted and contractually bound to maintain equivalent safeguards and to process data only under Maket's documented instructions.

We review these security measures regularly to ensure they are applied properly and continue to be fully effective and appropriate given the evolution of our systems and of information technologies.

However, since no mechanism provides flawless security, there is always some degree of risk. The safety and security of your information also depends on you. Where you have chosen a password for access to certain parts of our services, you are responsible for keeping this password confidential and to change it regularly. 

In the event of a security incident

If a security incident or personal data breach (collectively, an “Incident”) involving personal information occurs, Maket will, where required by law, notify affected individuals and to the relevant governmental or supervisory authority (such as the Commission d’accès à l’information du Québec, the Office of the Privacy Commissioner of Canada, the UK’s Information Commissioner’s Office, or the appropriate regulatory authority within the European Union) the occurrence of such Incident and take steps to minimize the impact of the Incident on affected individuals. 

Maket will also investigate the Incident and adopt methods to reduce the risk of a same nature or similar type of Incident occurring again. Maket maintains a record of all Incidents involving personal information as required by applicable law and, upon request and where required by law, will make such record available to the appropriate privacy authorities. 

12. For how long we retain your personal information

We keep personal information only for as long as we need it to:

  • provide the services,

  • meet legal and accounting requirements,

  • resolve disputes,

  • prevent fraud or misuse, and

  • enforce our agreements.

How long we keep information depends on why we collected it in the first place, however we may keep and use anonymized or aggregated versions of Customer Data and AI Outputs (which do not identify you) to improve and train our systems, support research and analytics, and protect the Platform.

Time

What happens

While active

Account data and projects are retained for the duration of the user account. Once deleted, they are removed from active systems.

Upon deletion

Account data is deleted within a reasonable timeframe, except where retention is required by law.

Per tax laws

Billing data is retained according to applicable tax obligations in relevant jurisdictions.

Limited period

Technical logs and usage data are retained for security and maintenance purposes only.

Client relationship

Communications with users (emails, support interactions) may be retained for client relationship management and support purposes.

13. Your choices and rights concerning your personal information

You have certain rights relating to your personal information that are subject to applicable law, in addition to the other rights set out in this Policy. The availability to you of such rights depends on the privacy legislation applicable to you. For this reason, certain of the rights listed below may not be available to you depending on the jurisdiction from which you are using our services. Note that after exercising certain of these rights, we may no longer be able to provide certain of our services to you. 

Should you wish to exercise any of these rights, please refer to the procedure set out in Section 14. Note that the law provides certain restrictions on your exercise of these rights. We will advise you in such situations.

YOUR CHOICES

You can choose not to provide us with personal information

If you choose to do this, you can continue to use the website and browse its pages, but we will not be able to process transactions without personal information. You will also not be able to create an account on our platform.

You can turn off cookies

You can block cookies by activating a setting on your browser allowing you to refuse cookies, or by using the cookie tool on our website. You can also delete cookies through your browser settings. If you turn off cookies, you can continue to use the website, but certain services (like our support webchat) will not work effectively.

You can ask us not to use your data for marketing

We will inform you (before collecting your data) if we intend to use it for marketing purposes. You can opt out from marketing by emailing us at info@maket.ai or by using any opt out tool made available to you through our mailing tool.

YOUR RIGHTS

You have the right to access information we hold about you and to be informed on our practices

You have the right to ask whether we process your personal information and to receive a copy of it. You may also request additional information, including:

  • the categories of personal information we process,

  • the purposes for which we use it,

  • the categories of recipients with whom we share it,

  • how long we keep it (or how we decide that),

  • your rights in relation to that information.

We will respond within the time required by applicable law (generally within one month).

In limited circumstances, we may not be able to provide certain information, for example, if doing so would affect another person’s rights or if an exception under applicable law applies. If that happens, we will explain why.

You have the right to make us correct any inaccurate personal information about you

If you believe that we hold personal information about you that is inaccurate, incomplete or ambiguous, you have the right to request that we correct your information. In some cases, you can ask us to limit how we use your personal information (for example, while we verify its accuracy or assess an objection).

You can object to us using your data for profiling you or making automated decisions about you

Where permitted or required by applicable law, you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or that similarly significantly affects you.

You have the right to port your data to another service

We will provide your data in a structured, commonly used, machine-readable format so that you can provide it to another service. If you ask us and it is technically possible, we will directly transfer the data to the other service for you. We will not do so to the extent that this involves disclosing data about any other individual.

You have the right to be ‘forgotten’ by us

You can do this by asking us to erase any personal data we hold about you, if it is no longer necessary for us to hold the data for purposes of your use of Maket. This right doesn’t always apply (for example, if we have a contract with you), but we’ll tell you if this is the case when you ask us to erase your data.

You have the right to restrict our processing of your data

You may impose certain restrictions on our processing of your personal information in certain limited instances, for example when you believe its processing is unlawful, but you oppose its erasure.

You have the right to lodge a complaint regarding our use of your data

Please tell us first, so we have a chance to address your concerns. If we can’t resolve your concern, you may have the right to lodge a complaint with your local privacy regulator. For example: the CAI (Québec), the OPC (Canada), the ICO (UK), or a supervisory authority in the EEA.

14. How you can contact us

Question, concerns or requests generally

All questions, concerns or requests regarding this Policy or about the processing of your personal information, including requests concerning the exercise of your rights set out in Section 13 above, should be made in writing to Maket’s Data Protection Officer, as person in charge of the protection of personal information at Maket. 

Email: info@maket.ai
Data Protection Officer
Maket Technologies Inc.
800 Rue du Square-Victoria, 3rd Floor
Montréal, Québec H3C 0B4
Canada 

We will respond within the timelines required by applicable law. If we refuse to comply with your request, Maket will inform you of the reasons for the refusal and the sections of the applicable law that support the refusal, subject to the limitations of the law, and inform you of your potential recourses.

Note that if you submit a request to us, we may require that you identify yourself and provide proof of identification so that we may verify the request.

Where permitted at law, we may charge reasonable fees to you to answer your request. In such a case, we will inform you of the applicable fees beforehand. 

15. Modifications to the Policy

We occasionally update this Policy and reserve the right to change the content of this Policy at any time. Any changes made will be communicated to you through our website or our platform. Notice of changes may also be given to you by email, if you have provided us this information as part of our business relationship. For material changes, meaning changes that reduce your rights or expand the purposes for which we process your personal information, we will provide at least thirty (30) days' advance notice before the effective date of the change. 

Maket may also make administrative or clerical modifications to this Policy that do not affect your rights or obligations without sending you any communication or notice. 

By continuing to use the services after an update, you acknowledge and accept the updated policy, to the extent permitted by law.

16. Additional information

For more information about your privacy and your rights, we invite you to consult the public resources made available by the privacy regulator in your jurisdiction.


Policy updated on June 15, 2026 (Version 2026-1).