Privacy Policy

This policy explains what personal data Tessumi collects, why, on what legal basis, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR). It applies to tessumi.com and the Tessumi application.

1. Who is responsible for your data

The data controller is Dominiek De Wilde (Sole proprietor (eenmanszaak) — natural person), trading as Wilde Performance Systems and operating the Tessumi service, established in Belgium.

• Enterprise number (KBO/BCE): 0676.855.607
• VAT: BE 0676.855.607
• Address: Belgium — full postal address available on request at privacy@tessumi.com
• Privacy contact: privacy@tessumi.com

2. What data we collect

Account data

When you create an account we collect your name and email address. If you choose “Sign in with Google”, your name, email address and profile picture are received from Google (the source), only if you choose that option.

Content you create

The venue plans, blueprints, measurements and project details you upload or create. Blueprints are images or PDFs you provide; please do not upload documents containing personal data you are not entitled to share.

Payment data

When you buy a plan, payment is handled by Stripe. We do not see or store your card number; we store a Stripe customer identifier and your purchase status so we know which plans you have unlocked.

Technical data

Like any website, our hosting provider processes your IP address and basic request logs for security and to deliver the service. We do not use any analytics, advertising or cross-site tracking cookies.

Providing your name and email is necessary to create an account and use Tessumi; without them we cannot provide the service. Everything else you provide, such as blueprints, is optional and at your choice.

3. Why we use it, and our legal basis

• To provide the service (your account, saving and rendering your plans, exports, share links) — legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
• To process payments and keep tax records — performance of a contract and compliance with a legal obligation (Art. 6(1)(b) and (c)).
• AI blueprint detection — only when you actively choose to use this optional feature, the blueprint image is sent to our AI provider to detect walls, doors and obstacles. Legal basis: your consent, given by choosing to use the feature (Art. 6(1)(a)), which you can withdraw at any time.
• Security, fraud prevention and keeping the service reliable — our legitimate interest (Art. 6(1)(f)).
• Service or account emails (e.g. confirming a purchase) — performance of our contract. Any purely promotional email would only be sent with your consent (Art. 6(1)(a)).

4. Who we share data with

We do not sell your data. We use a small number of carefully chosen service providers (processors) who process data on our behalf, under data processing agreements:

• Supabase — Authentication, database and file storage. Location: European Union (Frankfurt, eu-central-1). Privacy policy.
• Vercel — Website and application hosting. Location: USA / EU — EU-US Data Privacy Framework. Privacy policy.
• Google — Optional "Sign in with Google" authentication. Location: USA / EU — EU-US Data Privacy Framework. Privacy policy.
• Stripe — Payment processing (when you buy a plan). Location: USA / EU — EU-US Data Privacy Framework. Privacy policy.
• Anthropic — AI blueprint detection, only when you use that feature. Location: USA / EU — Standard Contractual Clauses. Privacy policy.

5. International transfers

Your account and content are stored in the European Union (our database and file storage run in Frankfurt, Germany). Some providers above are based in the United States. Where data is transferred outside the EEA, it is protected by an adequacy mechanism such as the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses. You can request a copy of the relevant safeguards by emailing privacy@tessumi.com.

6. How long we keep it

• Account and content data: for as long as your account exists, then deleted within 30 days of account closure.
• Purchase and invoicing records: kept for the period required by Belgian tax law (currently up to 7 years).
• Security logs: kept for a short period and then rotated.
• Blueprint images sent for AI detection are processed transiently and not used to train any model.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased (“right to be forgotten”);
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw any consent at any time, without affecting prior processing.

To exercise any of these, email privacy@tessumi.com. You can also delete your account at any time, which erases your plans and profile. We respond within one month.

If you believe we have mishandled your data, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) (Rue de la Presse 35, 1000 Brussels, Belgium).

8. Cookies and local storage

We only use storage that is strictly necessary to run the service, so we do not show a cookie banner:

• a login session cookie (set by Supabase) that keeps you signed in;
• a small local setting that remembers you have seen the intro, so we do not show it again.

We use no analytics, advertising or third-party tracking cookies, and load no third-party content on our marketing pages. If that ever changes, we will ask for your consent first.

9. Automated decisions and children

Tessumi’s layout engine arranges booths on a floor plan; it does not make automated decisions that produce legal effects about people. The service is intended for business use and is not directed at children under 16.

10. Changes to this policy

We may update this policy as the service evolves. We will change the “last updated” date above and, for material changes, notify you. Questions? Email privacy@tessumi.com.