WALLSIZER
Legal

Privacy Policy

Issued

Last updated: 13 August 2026
Data controller: ILLUSTRO S.R.L., 203c, 547570 Solovastru, Mures, Romania · Trade Register no. J26/75/2016 · CUI/VAT: RO35474147 · hello@wallsizer.com

Summary
The short version

Your projects are saved locally in your browser and synced to your Wallsizer account, so your work follows you across devices. A reduced copy of each design image is stored with the project so your devices, and on the Team plan your team, see the same design; the original print file never leaves your device. We process only what we need to run your account and billing: your email, your subscription status and your billing details. We do not sell data and we do not run advertising.

01
Your projects

Your projects and what stays on your device

Wallsizer stores your projects (dimensions, openings, settings) locally in your browser and syncs them to your account on our servers, so you can continue on another device and, on the Team plan, share them with your team. On the Team plan, teammates also see who last worked in a shared project and roughly when (the display name set by the account owner, or the email prefix) — that is how the app warns people away from a project a colleague is editing. Deleting a project in the app removes it from your account, from your other devices at their next sync, and deletes any design copies stored for it on our servers.

Uploaded design images: a reduced copy of the image is stored with the project in a private bucket on our servers, only so that your other devices and, on the Team plan, your team members see the same design; the original file never leaves your device. Documents you export (PDF, JPG) are generated in your browser and saved by you.

Measure links (Team plan): when you send a measuring link, the room dimensions your client enters (walls, doors, windows) are transmitted over an encrypted connection and stored as part of the project in your account, and nowhere else. The link expires on its own after 7 days and you can revoke it at any time. We do not use this data for anything except showing it to you in your project.

Support attachments: screenshots you attach to a support message are delivered to our support inbox by email and are not stored on our servers.

02
What we collect

What we collect, why, and on what legal basis

DataPurposeLegal basis (GDPR art. 6)
Email address and sign-in data, and on the Team plan the optional display name the account owner sets for each personCreating your account and signing you in(b) performance of the contract
Billing data: name, billing address, country, VAT ID if provided, subscription status. Collected and processed by Stripe; we never see or store full card numbersCharging the subscription, calculating tax, issuing invoices(b) contract and (c) legal obligation (tax and accounting law)
Support correspondence, including screenshots you choose to attach (delivered by email, not stored on our servers)Answering your messages(b) contract and (f) legitimate interest
Room measurements entered through a measure link you send (walls, openings, and the optional label you set on the link)Delivering the measurements into your project(b) performance of the contract
Technical logs: IP address, timestamps, request data, kept minimalSecurity, abuse and fraud prevention(f) legitimate interest in securing the service
Product usage events, tied to your account id: that an export happened (mode and file kind, never dimensions or project content), that a project was first saved, that the app was opened or used on a given day, that a measure link was created or answeredUnderstanding whether new subscribers reach their first export, and deciding which onboarding emails are worth sending(f) legitimate interest
Aggregated, cookieless site analytics (Cloudflare Web Analytics)Understanding site traffic; no cookies, no cross-site tracking, no individual profiles(f) legitimate interest
Product and onboarding emails to subscribersHelping you use what you paid for; you can opt out at any time(f) legitimate interest in line with art. 13(2) of Directive 2002/58/EC (existing-customer communication)
03
Processors

Who processes data on our behalf

StripeStripe, Inc. and Stripe Payments Europe: payments, subscriptions, tax calculation and invoicing data.
CloudflareHosting, content delivery, security and cookieless analytics.
SupabaseThe database and file storage behind your account: synced projects, team membership, measure link data and, on the Team plan, the reduced design copies stored for sharing.
ResendDelivery of transactional email: sign-in links and support correspondence, including attachments you send to support.
Google FontsThis website serves its fonts from our own servers — no request goes to Google when you browse wallsizer.com. The application at app.wallsizer.com still loads its fonts from Google servers; when the app loads, your browser sends your IP address to Google to fetch the font files. No other data is shared with Google by us.

Each processor acts under a data processing agreement and its own security measures.

04
Transfers

International transfers

Some processors are based in the United States. Transfers rely on the EU-US Data Privacy Framework, under which Stripe and Cloudflare are certified, and, where the framework does not apply, on the European Commission's Standard Contractual Clauses together with additional safeguards.

05
Retention

How long we keep data

Account dataFor the life of the account, then deleted or anonymized within 12 months after closure.
Invoicing recordsKept for the periods required by Romanian accounting and fiscal law, which prevail over the 12-month rule.
Technical logsShort rotation, typically 30 to 90 days.
Product usage eventsDeleted automatically after 400 days.
Project dataDelete a project in the app and it is removed from your account on our servers, from your other devices at their next sync, and any design copies stored for it are deleted with it.
06
Your rights

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction, portability, and the right to object to processing based on legitimate interest. Write to hello@wallsizer.com and we will respond within one month. You also have the right to lodge a complaint with a supervisory authority: in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro), or the authority in your own EU country.

07
Cookies

Cookies and local storage

The Wallsizer site does not set advertising or cross-site tracking cookies, and our analytics are cookieless. The application uses localStorage and IndexedDB to store your projects and preferences on your device and syncs project data to your account, which is essential functionality, not tracking. The Stripe checkout and customer portal, hosted by Stripe, set the cookies strictly necessary for payment security and fraud prevention under Stripe's own privacy policy. Clicks on the pricing links of this site are counted in aggregate only — which plan, which campaign the visitor came from, and the day — with no IP address, no cookie and no identifier of any kind.

08
Your clients

Data your clients entrust to you

Your projects can contain personal data of your own clients: a project name, the label on a measure link, the measurements a client submits. For that data you are the controller and Wallsizer processes it only on your behalf, to store and sync your projects under the contract between us. We use it for nothing else. If you need a signed data processing agreement for your records, write to hello@wallsizer.com.

09
Children

Children

Wallsizer is a professional tool and is not directed at children. We do not knowingly process data of persons under 16.

10
Changes

Changes

If we change this policy in a material way, we will notify subscribers by email before the change takes effect.

11
Contact

Contact

ILLUSTRO S.R.L. · 203c, 547570 Solovastru, Mures, Romania · Trade Register no. J26/75/2016 · CUI/VAT: RO35474147 · hello@wallsizer.com