Privacy Policy

1. Introduction

MetriPlan is committed to protecting your privacy. This Privacy Policy explains how we collect, use, process, and protect your personal information in compliance with the Brazilian General Data Protection Law (LGPD).

2. Information We Collect

To provide our services and process paid plans, we collect the following categories of information:

  • Registration Information: Full name, email address, phone number, and encrypted password.
  • Billing Information: CPF/CNPJ (Brazilian taxpayer ID), full billing address, and payment details (processed securely by certified payment partners).
  • Project Data: Floor plans, measurements, photos of rooms, and technical notes uploaded to the platform.
  • Usage Data: Information about how you interact with our application, including access logs and system preferences.

3. How We Use Your Data

We use the information we collect to:

  • Provide, operate, and maintain our measurement and editing tools.
  • Process financial transactions related to subscription plans.
  • Send important communications, such as payment confirmations and security updates.
  • Improve the user experience and develop new features.
  • Comply with legal and tax obligations (such as issuing invoices).

4. Security and Storage

We employ advanced technical and organizational measures to protect your data against unauthorized access, loss, or alteration. Account and project data are stored in managed databases with encryption at rest and in transit (TLS 1.2+). Binary files (3D models, textures, renders) are stored in a blob storage service with URLs served via CDN. Sensitive payment information is never stored directly on our servers and is managed by payment gateways that comply with the PCI-DSS standard.

5. Sharing with Third Parties

MetriPlan shares data with the following third parties, strictly when necessary for the operation of the service requested by the user:

  • Infrastructure providers: Cloudflare (CDN, DDoS mitigation), hosting providers for application servers and databases, and binary object storage services served via our own CDN.
  • Payment gateways: PCI-DSS certified processors for subscription charges (Stripe or a local equivalent). They receive only the data strictly necessary for the transaction.
  • External AI providers: when the user requests photorealistic renders or AI enhancements, screenshots/snapshots of the 3D scene may be sent to external inference services (NOMO for photorealistic rendering; Google Gemini for enhancement passes). Only the image and the necessary prompts are transmitted — credentials and personal data never accompany these requests.
  • Asset providers: queries to public CC0 libraries (PolyHaven) are made server-side from MetriPlan. The third-party service does not receive user identifiers.
  • AI assistants connected via MCP (Model Context Protocol): see Section 7 ("Integration with AI Assistants").
  • Legal obligations: we may disclose data when required by court order or a competent authority, or to comply with tax obligations (invoice issuance).

We do not sell, rent, or transfer personal data to third parties for marketing or advertising purposes.

6. Data Retention

Data is kept only for as long as strictly necessary for the purpose for which it was collected:

  • Account and project data: retained while the account is active. After account deletion, removed from production systems within 30 days and from backups within 90 days.
  • Billing data and invoices: retained for 5 (five) years from the end of the corresponding fiscal year, in compliance with Brazilian tax legislation (Decree-Law 486/1969 and subsequent regulations).
  • Access and security logs: retained for 6 (six) months for auditing and incident investigation purposes, pursuant to art. 15 of the Brazilian Internet Civil Framework (Marco Civil da Internet).
  • Authentication and session tokens: revoked immediately upon logout or after a configured period of inactivity.
  • Generated AI content (renders, screenshots): kept for as long as the project containing it exists; deleted together with the project.

The user may request early deletion through the channels described in Section 9 (Contact), except where retention is legally required.

7. Integration with AI Assistants (MCP)

MetriPlan provides an MCP (Model Context Protocol) server at mcp.metriplan.com that allows external AI assistants — including, but not limited to, Claude (Anthropic), ChatGPT (OpenAI), and third-party MCP clients — to operate on the user's behalf after explicit OAuth 2.0 authentication.

When you authorize an AI assistant via OAuth:

  • The assistant receives an access token scoped to the operations you have authorized (e.g., mcp:plans.read, mcp:plans.write, mcp:catalog.read).
  • The assistant can read and modify floor plans, materials, 3D models, and renders associated with your account, according to the actions you request via prompt.
  • Content sent to the assistant (floor plans, screenshots, descriptions) is processed by the infrastructure of the AI provider chosen by the user. MetriPlan does not control the privacy practices of these providers — please review each provider's specific policy (e.g., Anthropic, OpenAI).
  • You can revoke the authorization at any time in Settings → MCP Connections, immediately terminating the assistant's access.
  • All communication between the assistant and mcp.metriplan.com takes place over HTTPS/TLS, with the bearer token transmitted only in the Authorization header.

8. Google Calendar/Meet Integration

MetriPlan offers an optional integration with Google Calendar and Google Meet, letting you schedule appointments (meetings or due-date reminders) linked to CRM deals and board tasks, directly on your own Google account.

When you connect your Google account:

  • The connection uses OAuth 2.0, per individual user — each team member connects their own Google account; the connection is never shared with the rest of the company.
  • MetriPlan only requests the scope needed to create, edit and remove events on your Google Calendar (calendar.events) and identify the connected account (email) — never access to your full calendar or other Google data.
  • If the item (deal or task) has an associated client with a registered email, you can choose to add them as a guest of the appointment — the invite is only sent if you explicitly check that option.
  • The access token is stored encrypted (AES-256) and is never shared with third parties.
  • You can revoke the authorization at any time in Settings → Integrations, immediately ending MetriPlan access to your Google account.

9. Your Rights (LGPD)

Under the LGPD, you have the right to:

  • Confirm the existence of processing of your data.
  • Access your personal data.
  • Correct incomplete, inaccurate, or outdated data.
  • Request the anonymization, blocking, or deletion of unnecessary data.
  • Request the portability of your data to another service provider.
  • Withdraw your consent at any time.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer (DPO) by email: privacidade@metriplan.com.br