Privacy Policy

Last updated: March 2026

1. Introduction

Setout AI ("we", "our", "us") operates the website setoutai.com (the "Service"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.

2. Information We Collect

We collect the minimum information necessary to provide the Service:

Email address — collected during account registration via Google sign-in, Microsoft sign-in, or email one-time password verification.
Display name — either provided by your sign-in provider or derived from your email address. You can change this at any time in your profile settings.
Project data — site boundaries, design layouts, and configuration parameters you create while using the Service. This data is stored to enable saving and loading your work.

3. How We Use Your Information

Your information is used solely for the following purposes:

To authenticate your identity and maintain your account session.
To save and restore your projects and design layouts.
To enforce usage limits associated with your account plan.

4. Data Sharing

We do not sell, trade, rent, or otherwise share your personal information with any third parties. Your data is never shared with advertisers, data brokers, or any external organizations.

5. Third-Party Services

The Service uses the following third-party services for authentication:

Google OAuth — for sign-in authentication. See Google's Privacy Policy.
Microsoft OAuth — for sign-in authentication. See Microsoft's Privacy Statement.

We also use third-party services for email delivery and security verification during the sign-in process. We do not use any analytics, tracking, or advertising services.

6. Cookies

The Service uses a single authentication cookie that is required for the Service to function. This cookie contains your encrypted session token and expires after 30 days. We do not use tracking cookies, advertising cookies, or any other non-essential cookies.

7. Data Storage and Security

Your data is stored in a secured database hosted on infrastructure we control. All communication between your browser and our servers is encrypted using HTTPS/TLS. Authentication tokens are stored in secure, HTTP-only cookies that are not accessible to client-side scripts.

8. Data Retention and Deletion

Your data is retained for as long as your account exists. You may delete your account at any time through the profile settings in the application. When you delete your account, all associated data — including your projects, design layouts, and usage records — is permanently and irrecoverably deleted from our systems.

9. Your Rights

You have the right to:

Access your personal data (visible in your profile and projects).
Correct your personal data (editable via profile settings).
Delete your account and all associated data at any time.

If you are located in the European Union, you are entitled to additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with a supervisory authority.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

If you have any questions about this Privacy Policy, please contact us at bassel.harby@aucegypt.edu.