Your information at Floorplan.

Privacy notice · Updated November 3, 2026

Floorplan is opening in stages. This notice describes the current service, including the privacy cleanup configured to start when the website is published.

Who to contact

Lynn handles Floorplan support and privacy requests. Email lynn@floorplancanada.ca to ask a question, request access or correction, or raise a complaint.

Accounts and security

Creating an account supplies a display name, email and password. We store a password hash, account role, timestamps, sessions, login attempts and hashed password-reset codes. These support sign-in, account recovery and protection against unauthorized access. Without account details, account-based features are unavailable; you can still browse public pages.

Event submissions, maker profiles and party pages

We store the details you enter, their connection to your account, submission status and review notes. Authorized owner review is required. In the current service, internal approval does not automatically publish your submission. Do not include someone else's private details without permission. We will explain any new publication process before introducing it.

Private planning tools

Vendor and home-party plans saved to your account are private to that account. Party plans may include a home location, host and vendor names, guest nicknames and RSVPs, agreed prices, tasks and notes. Only enter the details you need and are authorized to keep. Guests can plan on their device without an account. Downloaded copies and printed checklists are under your control.

Information saved on your device

Planning tools use browser storage for items such as checklists and floorplan drafts. Area preferences store a postal-code prefix, city and search radius rather than the full postal code. These local settings are not a promise of account backup or synchronization. Clearing browser site data removes locally saved work. Sign-in uses session cookies.

Visitor analytics

Floorplan's built-in visitor analytics is disabled for publication. Essential account, security and service-operation records still apply. Visiting the Floot builder or other providers' websites is governed by their own privacy notices.

Email and support

Emails to our contact address, including attachments, are received through Floot and forwarded to the owner's Microsoft Outlook/Hotmail inbox. We use them to respond and resolve requests. Forwarding records contain a message fingerprint, delivery identifier, status and timestamps to prevent duplicate forwards. Authorized support work may use a connected AI assistant to retrieve or summarize correspondence; this is not automatic inbox monitoring. Please avoid sending passwords, payment-card details or identity documents.

Service providers and processing locations

Floorplan uses Floot for hosting, application infrastructure and email. Floot identifies Amazon Web Services as its app hosting provider and Neon as its app database provider. Microsoft handles forwarded support email. Connected AI services may process correspondence when used for support. Information may be processed outside Canada; we do not promise Canadian-only storage. Service providers may also keep operational logs and backups under their own terms.

Read the Floot privacy policy and Microsoft privacy statement. External organizer, supplier and seller websites have their own privacy practices.

Optional email updates

Email signup is separate from account registration. When Floorplan opens signup, we ask for your email, chosen area, topics, frequency and express consent. An inbox confirmation code must be entered before the choices become active. We store the code as a hash, its expiry and attempt count; the consent wording, choices and confirmation time; subscription status; and delivery identifiers and outcomes. Verification requests are rate limited using a hashed request bucket rather than storing a raw IP address in these records. You can withdraw consent after confirmation or by replying Unsubscribe to a Floorplan message, without signing in. Sending is paused until Floorplan’s sender details are complete and the owner enables it.

Payments

Paid plans are not active. Signing up for an account does not sign you up for promotional emails or start a paid plan. Floorplan does not collect booth fees or payments between shoppers and sellers.

How long information is kept

• Accounts, private plans, profiles and submissions: kept while needed to provide your account and manage your work. You may request deletion at any time. Deletion is handled by Lynn after identity verification, rather than an automatic self-service button.
• Sessions and password-reset records: daily cleanup is configured to remove records more than 30 days past expiry. Expired credentials stop working before the database record is removed.
• Login attempts: daily cleanup is configured to remove dated attempts older than 90 days.
• Support correspondence: kept while an enquiry is open and reviewed for deletion 12 months after resolution. This is a manual review covering the support inbox, attachments and available Floot email records, not an automatic email expiry.
• Forwarding fingerprints: retained while the forwarding service needs them to prevent duplicate delivery. They do not contain the message body or attachments and are included in a relevant deletion request review.
• Email updates: unconfirmed signups older than 30 days and expired request buckets are removed by daily cleanup. Confirmed choices, consent evidence and delivery records are kept while needed for the service and to honor opt-outs. Unsubscribed or suppressed addresses are excluded from sending. Contact Lynn for access, correction or deletion requests.
• Local drafts and preferences: remain on your device until you clear them or your browser removes them.

The daily cleanup starts when Floorplan is published. Provider logs, recoverable deleted mail and backups may remain after removal from our active records; their timing depends on the provider. We do not promise immediate removal of every copy. Records needed for a specific security incident, dispute or legal obligation may be kept longer where applicable; we will explain relevant limits when responding to your request.

Your choices and requests

Email us to ask what personal information we hold about you, request a correction or deletion, withdraw optional consent or make a complaint. We may verify your identity without asking for your password. We will explain the steps, any applicable limits and the expected response time. Deleting an account removes access to account-based features. Please also clear local site data on your devices if you want to remove locally saved drafts.

Safeguards

Passwords and reset codes are stored as hashes. Authenticated access controls protect account and submission records. Access to support correspondence is limited to authorized support work. No online service can guarantee absolute security.

Changes to this notice

We will update this notice as the service changes and explain new uses of personal information before introducing them. Material changes may require additional consent.