Privacy Policy
Last updated: September 7, 2026
This Privacy Policy explains how YZ AI (also referred to as 元筑AI; “we”, “our” or “us”) — an independent design-technology product operated by an individual — collects, uses, stores, shares and protects personal information when you visit the website https://yzdesignai.com or use its AI-assisted design platform (collectively, the “Service”). By creating an account, signing in or using the Service, you agree to the practices described in this policy.
This document is provided in English and Chinese. If there is any conflict, the English version prevails for users outside mainland China. For users in mainland China, both language versions apply and are governed by the laws of the People’s Republic of China as described in our Terms of Service.
1. Who We Are and the Scope of This Policy
The Service is provided by an individual operator publishing under the brand name “YZ AI / 元筑AI”. Questions, requests and legal correspondence can be sent to 719542959@qq.com.
This policy covers personal information processed when you use yzdesignai.com, including account sign-in, project creation, uploading site media, AI analysis, AI chat, design generation and reporting. It supplements, and should be read together with, our Terms of Service.
2. Information We Collect
We collect only the information that is needed to operate the Service and to deliver the features you ask for:
- Account data — the email address you sign in with. If you choose to sign in with Google, we receive the email address (and, if you allow it, profile picture) associated with your Google account. We do not store passwords; sign-in uses one-time codes or your identity provider.
- Design content you upload — site photos, CAD or terrain drawings, scans, hand-drawn sketches, SketchUp screenshots, floor-plan images and other design files you add to a project.
- Text you provide — prompts, chat messages, notes, feedback and stage inputs (site analysis, scheme concept, plan drawing, rendering, and PPT generation).
- Content generated for you — AI analysis reports, generated images and renderings, text drafts and presentation slides produced through the Service.
- Account and usage records — projects, point balance and transaction ledger, AI-operation audit records used to charge points correctly and prevent abuse.
- Recharge and payment records — activation codes redeemed in the product and, if online payment is enabled later through a third-party processor, purchase-confirmation records. We do not store full card numbers.
- Technical data — basic logs needed for security and troubleshooting, such as IP address, browser type and timestamps. We do not run third-party analytics or advertising trackers on the Service.
If you choose not to provide information that a feature requires, that feature may be limited or unavailable.
3. How We Use Information
- To operate the Service — authenticate you, store and organise your projects, and provide the design and AI features you request.
- To generate AI outputs — analyse uploaded site media and drawings and produce the reports, images and text results you ask for.
- To run our points system — deduct points for paid features, keep an accurate balance, and detect and prevent abuse.
- To communicate with you — send transactional email such as sign-in codes and purchase confirmations, and respond to support requests.
- To secure the Service — investigate misuse, protect accounts and comply with applicable law.
- To improve the product — using aggregated or de-identified information; we do not build profiles from your personal information for unrelated advertising.
We do not sell personal information. We do not use the content you upload to train our own models, and we do not share your content with third parties except as described in Section 5.
4. Legal Basis for Processing
Where the laws of mainland China (including the Personal Information Protection Law, or “PIPL”) apply, we process personal information on the following bases: performance of the contract between you and us when we provide the Service you request; your consent where required (for example, for optional sign-in methods or cross-border AI processing); our legitimate interests in securing and improving the Service; and compliance with legal obligations.
In other jurisdictions, we rely on the equivalent bases available under the applicable data-protection law. You may withdraw consent or object to processing at any time by emailing us (see Section 14).
Most content you process on the Service is design media rather than information about individuals. Please do not upload personal or sensitive information about identifiable people (for example, recognisable faces or identity documents of third parties) unless you have the right to do so.
5. Sharing with Service Providers
We share information only as needed to operate the Service. The following categories of processors help us deliver it; each acts on our instructions and has its own privacy policy describing how it protects data:
- Supabase Inc. — authentication and the PostgreSQL database that stores accounts and project content (supabase.com).
- Vercel Inc. — hosting of the application (vercel.com).
- Cloudflare, Inc. — object storage (R2) and content delivery used to store uploaded media and generated images (cloudflare.com).
- Resend — delivery of transactional email such as sign-in codes (resend.com).
- GrsAI (grsaiapi.com) — our AI model gateway. When you run an AI feature, the relevant prompt, project context and any image you ask to be analysed are transmitted to hosted AI models so that the result can be generated.
- Google (only if you sign in with Google) — Google shares your email address and optional profile picture under its own terms and privacy policy.
- Payment processors (when online payment is enabled in the future, for example via Creem) — the chosen processor handles the card transaction directly; we receive only confirmation of the outcome and never see or store your full card details.
Your content is shared with an AI provider only for the purpose of generating the output you requested. Where an AI provider may retain content under its own policies, we select providers and settings intended to keep retention to the minimum needed to deliver results. The processors above are located in a number of countries; see Section 8 on international transfers.
6. Confidential Projects
When you mark a project as confidential, we disable the free-form AI chat assistant and cloud text generation for that project, so that the project’s text content is not sent to cloud text-model providers. Vision-based site understanding and image/rendering generation that must process the media you have chosen to upload may still run so that the outputs you request can be produced.
Confidential marking is a project-level control that you manage in the product; it is not a substitute for reviewing what you upload to any service.
7. Cookies and Local Storage
The Service uses only functional cookies and local storage: your sign-in session (handled through our authentication provider), your language preference, and small interface preferences such as the state of panels. We do not use advertising, social-media or third-party analytics cookies, and we do not track you across other websites.
You can clear cookies and local storage in your browser at any time; you may need to sign in again afterwards.
8. International Data Transfers
To provide the Service, your information may be transferred to and processed in countries other than the one in which you reside, including outside mainland China (for example, where an AI model provider or hosting provider is located). We rely on appropriate safeguards for these transfers, and where the law requires your separate consent for a cross-border transfer (for example under the PIPL), your use of the relevant feature constitutes such consent or we will seek it separately.
For users in mainland China: some AI models used by the Service are hosted outside mainland China. By using AI features that depend on those models, you acknowledge and consent to this processing.
9. Data Retention
We keep your account and content for as long as you maintain your account, and content for as long as it remains part of a project you keep. Where the product provides deletion controls (for example deleting a project or uploaded asset), deletion removes the corresponding records and stored objects from the Service’s active storage.
Account closure and full deletion of all associated data are currently completed on request rather than through a self-serve control in the interface — please email us (see Section 14) and we will act on your request within a reasonable time, subject to any retention we are legally required to keep (for example billing or audit records).
We do not automatically delete content merely because an account is inactive, and we do not silently remove data without notice where you have an ongoing subscription or balance.
10. Your Rights and Choices
Depending on where you live, you may have the following rights over your personal information:
- Access and correction — view and correct your account information and content.
- Portability / export — receive a copy of your data in a structured, commonly used format, on request.
- Deletion — delete projects and assets through the product where available, or request deletion of your account and associated data by email. Where required by law we honour deletion subject to legitimate retention periods.
- Withdrawal of consent / objection — withdraw consent you gave for a specific processing, or object to processing based on legitimate interests.
- Complaint — you may also complain to a competent supervisory authority. For users in mainland China this includes the authorities responsible for personal-information protection.
Currently, full account deletion and data export are fulfilled on request via email rather than self-serve in the interface. We respond to requests within 30 days where we can, and we may ask you to verify your identity first. Contact:
719542959@qq.com
11. Security
We protect information with encryption in transit (TLS), encryption at rest provided by our storage providers, least-privilege access controls, and session handling through our authentication provider. Because sign-in uses one-time codes or your chosen identity provider, the Service does not store passwords.
No method of transmission or storage is completely secure. Please keep your account secure: do not share your sign-in email and codes with others, and contact us if you suspect unauthorised access.
12. Children
The Service is not directed to children and is not intended for anyone under 16 years of age (or under 14 in mainland China, as required by the PIPL). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it where required by law.
13. Changes to This Policy
We may update this policy from time to time. When we make material changes, we will update the “last updated” date above and, where practical, notify you through the Service or by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy, except where the law requires your separate consent.
14. Contact and Complaints
The operator of the Service is an individual publishing under the brand name “YZ AI / 元筑AI”. For privacy requests, support or legal correspondence, please email:
719542959@qq.com
We will respond within a reasonable time (normally within 30 days). If you are in mainland China and are not satisfied with our response, you may also contact the competent authorities responsible for personal-information protection. These terms are governed by the laws of mainland China; for details on governing law and jurisdiction please see our Terms of Service.