Privacy
What happens to what you send.
In short
- The Editor is an artificial intelligence. Your photograph or text is sent to it only to write your answer.
- We do not keep your photograph, your text or the answer. From texts we keep one thing: how often the Editor struck each of the 54 selling words on a fixed list taken from our book (section 7). Nothing you write can enter that list. Our AI provider, Anthropic, normally deletes what we send within 30 days.
- Before a photograph leaves your device, your browser removes its location and camera data. What is in the picture still travels, so leave out people and anything private.
- To keep the free daily limit fair, we count uses with a code made from your connection. The code changes every day, is deleted every night and never appears in our technical records.
- No accounts, no cookies, no advertising, no tracking.
1. Who is responsible
The controller is Doukas Chatzidoukas – Paris Kamarinopoulos O.E., a general partnership (Ο.Ε.) registered in Greece, G.E.MI. 069732203000, VAT EL998558970, 26 Vasileos Konstantinou Avenue, 116 35 Athens, Greece. SoFAUXREAL is its publishing brand. Write to notes@sofauxreal.com about anything on this page.
2. What we process, and why
| What | Why | Legal basis (GDPR) | Kept by us |
|---|---|---|---|
| The photograph or text you send, and the answer | To write the answer you asked for | Art. 6(1)(b), the service you requested | Not stored |
| Your IP address, while the request lasts | To deliver the app and answer the request | Art. 6(1)(b) and 6(1)(f) | Not stored by us (see section 7 for our host's logs) |
| A daily code made from your IP address | To apply the daily limit and prevent abuse | Art. 6(1)(f), legitimate interest | Until shortly after midnight UTC |
| Technical records: timings, costs, errors | To run the service securely and within budget | Art. 6(1)(f) | At least 24 hours, at our host; the period may vary with the service plan |
| Counts: uses per day, costs, and how often each word of a fixed list of 54 selling words was struck | For our monthly count of selling words (the Cosy Index) and to plan the service | Art. 6(1)(f) | Totals without personal data: kept; monthly counts: 13 months (section 7) |
| Your email, if you write to us | To answer you | Art. 6(1)(f), and 6(1)(c) where the law requires a reply | As long as needed, then up to one year |
3. Photographs
Your browser first redraws the picture at no more than 1280 pixels on its longest side. Redrawing removes the location (GPS), the camera details and the other data hidden in the file. The copy travels encrypted to our host, Netlify, and from there to Anthropic, whose AI system looks at it only to write the answer. Our server holds it in memory for the length of the request. It does not save it or write it in any record. The picture itself still travels: faces, rooms, documents, screens, number plates. Please leave out people and anything private. The Editor is instructed to ignore people and never to identify anyone, but the picture is still sent.
4. Texts
A text goes the same way. We do not keep it. The only thing we record is whether the Editor struck one of the 54 selling words on our fixed list, as explained in section 7. In one use the text is sent twice: once for the corrections and once for the questions that follow.
5. The source check
Only if you tap “A known piece? Let the Editor check”, your photograph and the Editor's first answer are sent to Anthropic a second time. The Editor may then run up to two web searches through Anthropic. The searches contain words written by the Editor, never the picture. They may contain a name visible in the picture, such as a signature, a label or a maker's mark. Anthropic runs the searches through a search provider listed among its sub-processors (trust.anthropic.com). The pages found are shown to you as sources.
6. The daily limit
Each connection may use the Editor a limited number of times a day. To count, our server combines your IP address, the date and a secret, and turns them into a one-way code. We never store the address itself. The code changes every day. Because we could recompute it while the day lasts, it is still personal data: pseudonymised, not anonymous. Day codes are deleted by a scheduled job every night shortly after midnight (UTC). People who share one connection, such as a household, an office or some privacy relays, share one limit.
7. Technical records and counts
Our server code writes short technical records: timings, costs, errors and the reason a request was refused. They contain no photograph, no text, no IP address and no part of your daily code; each record carries only a random request number. Technical log records are kept under our host’s policy for at least 24 hours; the period may vary with the service plan. Like every web host, Netlify also receives your IP address to deliver the pages and may keep it in its own logs under its own policies. We also keep totals that do not identify anyone: costs per day and month, response times, how many uses there were each day by type (photograph or text), and how many uses were a connection's first, second or third that day. From texts we count one more thing, for our monthly count of selling words, the Cosy Index: how often the Editor struck each word of a fixed list of 54 selling words, taken from our book The Dictionary of Interiors and translated into the app's languages. The list is written in advance and never changes with your text, so a name or any other word of yours cannot enter it; if the Editor strikes a word that is not on the list, only a total goes up and the word itself is not stored. We keep these counts for our own editorial work. Monthly counts are deleted after 13 months, so that a month can be compared with the same month a year earlier.
8. On your device: no cookies
The app sets no cookies and uses no analytics or advertising tools. It keeps in your browser:
- three small settings: the language you chose, whether you closed the tip about adding the app to your Home Screen, and whether you have seen the note about the beta;
- a copy of its own pages, script, fonts and icons, so that it opens quickly and can tell you politely when there is no connection.
- only until you close the tab, the Editor's last line (up to 240 characters), so that it does not repeat itself.
It never keeps your photographs or texts there, and no answer outlives the tab; they exist only in the open page. These items are strictly necessary for the app you asked to use, so the law does not require your consent for them. You can delete them at any time in your browser settings.
9. Who receives data
We use two service providers, each acting for us as a processor under a written data processing agreement:
- Netlify, Inc. (United States) hosts the app and runs our server code. It uses cloud infrastructure from Amazon Web Services and Google Cloud.
- Anthropic provides the AI system (Claude). Our contracting party is Anthropic Ireland, Limited, under Anthropic's commercial terms and data processing addendum, which Doukas Chatzidoukas – Paris Kamarinopoulos O.E. holds; processing takes place in the United States through Anthropic, PBC and its sub-processors.
- If you write to us, your email passes through our email provider, Apple (iCloud Mail).
Under its commercial terms Anthropic may not use what we send to train its models. We do not sell or share data with anyone else, and nobody at SoFAUXREAL reads your photographs or texts.
10. Transfers outside the European Union
Netlify and Anthropic process data in the United States. Transfers to Netlify rely on the EU–US Data Privacy Framework, in which Netlify states it is certified, with the EU standard contractual clauses as a fallback. Transfers to Anthropic rely on the EU standard contractual clauses included in Anthropic's data processing terms. You can ask us at notes@sofauxreal.com for information on these safeguards.
11. How long
| Data | Retention |
|---|---|
| Photographs, texts, answers | Not stored by us. At Anthropic: deleted within 30 days. If Anthropic's automated safety systems flag a request as a possible breach of its usage policy, it may keep it for up to 2 years and safety scores for up to 7 years, and its staff may review it. It may also keep data where the law requires. |
| Day codes | Until shortly after midnight UTC |
| Technical records | At least 24 hours, at our host; the period may vary with the service plan |
| Totals of costs, response times and uses | Kept; they contain no personal data |
| Monthly counts of list words and of first, second and third uses | 13 months, then deleted |
| Emails to us | As long as needed to answer, then up to one year |
12. What we do not do
No accounts, no advertising, no analytics or tracking tools, no selling or sharing of data for marketing, no profiling, and no decisions about you that have legal or similarly significant effects.
13. Your rights
You may ask us for access to your data, correction, deletion, restriction or portability. You may object at any time to processing based on our legitimate interest, for reasons relating to your situation. Write to notes@sofauxreal.com. We reply within one month; if a request is complex we may extend this by up to two more months and will tell you why. Because we keep no photographs, texts or answers, the counted words come from a fixed list and are stored without any link to a person, and the daily code changes every day, we will often hold nothing that can be linked to you; we will tell you so. If you give us the date and time of a use, we will ask Anthropic to delete it; we cannot promise that it can be found from that alone. You may also complain to the Hellenic Data Protection Authority, Kifissias 1–3, 115 23 Athens, www.dpa.gr, or to the authority of the country where you live.
14. Security
Everything travels over HTTPS. The key to the AI service is kept only on our server, never in your browser. The server accepts requests only from this app, limits each connection and the total daily and monthly spending, and sends strict security headers. If a personal-data breach occurs, we assess it at once; where the law requires, we notify the authority within 72 hours of becoming aware of it, and we tell you directly if the risk to you is high.
15. Age
The Editor is meant for adults. If you are under 18, please do not use it. We do not knowingly process children's data, and we ask parents not to let children send photographs of people.
16. Changes
We date every version of this page and announce important changes in the app.
Privacy · Terms · About the Editor
Last updated: 2026-11-03