Cyberinfomatic (“we”) operates SketchToPlanAI. This Privacy Policy explains what personal data we collect, why, and how you can exercise your rights. We handle personal data in line with the Nigeria Data Protection Act, 2023 (NDPA) and, where still relevant, the Nigeria Data Protection Regulation (NDPR).
Controller: Cyberinfomatic, Nigeria. Public company site: https://cyberinfomatic.com. Privacy contact: [email protected]; phone +234 816 666 8759.
These pages apply to SketchToPlanAI. Cyberinfomatic may publish additional company-wide notices on cyberinfomatic.com.
1. What we collect
- Account details: name, email, optional phone, password (stored hashed by our auth provider).
- Sketches and briefs: photographs of drawings, room marks, land sizes, and related project metadata.
- Generated files: review drawings, 3D massing previews, estimate tables tied to your project.
- Usage and security logs: login times, project status, technical logs needed to run conversion.
- Trial anti-abuse signals: a device cookie, hashed email, hashed IP (capped), and a browser fingerprint that does not include your name. See Cookies.
- Price zone you choose for material rates (Nigerian geopolitical zones).
- Payment metadata when you buy credits (amount, reference, plan) via Paystack — not full card numbers.
- Theme preference (light / dark) on this device.
Sketches can reveal a home layout. Treat them as sensitive. Do not upload identity documents or photographs of people unless necessary.
2. Why we use it
To create and secure your account, convert sketches, show drawings and estimates, process payments, provide support, prevent abuse, and meet legal duties. We do not sell your sketches. We do not use your sketches to train public foundation models. We process them to provide SketchToPlanAI to you and to improve reliability and safety of that service.
3. Legal bases (NDPA)
Contract: running the account and conversion you requested. Legitimate interest: security, fraud and trial-abuse prevention, and service improvement that does not override your rights. Consent: optional marketing we do not run today. Legal obligation: records the law requires us to keep.
4. Processors and transfers
We use specialised providers to run the product, including:
- Supabase — authentication, database, and file storage.
- Paystack — payment processing when you buy credits.
- Google (Gemini) — optional vision assistance to interpret room marks on sketches you submit for conversion.
- Hosting / CDN providers that serve the application.
Some processing may occur outside Nigeria. Where that happens, we rely on appropriate contractual and technical safeguards with those providers. We do not publish detailed infrastructure maps in this public notice.
5. Sharing
We share personal data only with processors who help run the product, when the law requires it, to protect Cyberinfomatic or users, or with a professional you explicitly ask us to send a file to. We do not sell personal data.
6. Retention
We keep a project in your account until you delete it. A deleted project stays in the recycle bin for 30 days, and you can restore it during that time. After 30 days it leaves your account. We keep a staff record of the project. You may ask us to delete the account. A device mark may be stored with the account for security. We may keep minimal records needed for security, disputes, tax, or legal duty.
7. Your rights
Subject to the NDPA, you may request access, correction, deletion, restriction, or a copy of your personal data, and you may object to some processing. Contact [email protected]. You may also complain to the Nigeria Data Protection Commission (NDPC).
8. Children
The product is for people who can form a contract. We do not knowingly create accounts for children.
9. Security
We use industry-standard controls (encrypted transport, access control, hashed passwords via our auth provider, server-side secrets). No method of transmission or storage is 100% secure; we work to reduce risk continuously.
10. Cookies
Full list: Cookie notice.
11. Changes
We may update this Policy. The “Last updated” date will change. Material changes will be highlighted in-product or by email where appropriate.
Last updated 11 September 2026. Not legal advice — have counsel confirm NDPA registration and wording for your launch.