How this policy is structured. DesignFlow OS is a suite of products operated by Lapunne Limited. Because the products process data in different ways, this policy has two parts:
The DesignFlow OS suite comprises: the Folder Structure Guide, Studio OS, DesignFlow AI, Counsel, Snagflow, and DesignFlow Academy (including the SOP Library).
DesignFlow OS is operated by Lapunne Limited, a company registered in England and Wales. We provide AI-assisted tools and resources for architecture, interior design, and construction professionals.
For any data protection enquiry, contact [email protected].
When you visit our websites, we automatically collect limited device information: browser type, IP address, time zone, pages viewed, and referring sources. This is collected through cookies and similar technologies (see section 8).
When you buy a product or create an account, we collect the information needed to provide it: your name, email address, billing address, firm name (where relevant), and the records of what you have purchased. Payment card details are handled by our payment processor and are never stored by us.
When you use a product, we collect product-specific data described in Part B and in each product's terms.
When we refer to "personal information" in this policy, we mean all of the above.
We use your personal information to: fulfil orders and process payments; provide access to the products you buy; send order confirmations, receipts and service-related messages; respond to your enquiries; protect against fraud; and understand and improve our websites and products.
We do not sell your personal data, and we do not use it for advertising.
We process your information on the basis of: contract (to provide the product you have bought); legitimate interests (to run, secure and improve our business); consent (where required, e.g. optional marketing); and legal obligation (e.g. tax and accounting records).
We share personal information only with trusted providers necessary to operate, and only as needed:
We may also disclose information where required by law, to respond to lawful requests, or to protect our legal rights. We do not sell your data to any third party.
Some providers (e.g. Anthropic in the United States) are located outside the UK/EEA. Where personal information is transferred outside the UK/EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses.
We retain order and account information for as long as your account or relationship with us is active, and for as long afterwards as we are legally required (e.g. for tax records). Product-specific retention is described in Part B. You can request deletion at any time (see section 9).
Our marketing websites use cookies for functionality and analytics (Google Analytics). You can disable cookies in your browser; see allaboutcookies.org. The Counsel app uses only essential cookies for authentication and session management — no advertising cookies, tracking pixels, or third-party analytics. We do not change our behaviour in response to "Do Not Track" signals.
You have the right to: access the personal data we hold about you; correct inaccurate data; request erasure of your data; restrict or object to certain processing; and receive your data in a portable format. To exercise any of these, contact [email protected].
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled incorrectly.
We may update this policy to reflect changes in our practices or legal obligations. Material changes will be posted here and, for account holders, notified by email or in-app. The date at the top shows when it was last updated.
Lapunne Limited — [email protected]. For urgent data-breach or erasure requests, please mark your email: URGENT — DATA REQUEST.
Counsel is our intelligent project adviser and reporting tool for construction professionals. Because it processes project information, the following additional terms apply.
What Counsel collects. Account information (email, firm name, preferences); project information you enter (project names, client names, site addresses, contract types, RIBA stages); data extracted from documents you upload (cost figures, programme dates, risks, actions) — stored so you can review and edit it before generating a report; generated report text — stored so you can access, download and re-use it; and usage data (credits used, reports generated, login timestamps) for billing and account management.
How your documents are processed — documents are never stored. Documents you upload (PDFs, images, text) are processed in memory only. They are never written to our servers or database. They are passed directly to the AI service, used to extract relevant project information, and then discarded. The only information retained is the extracted data fields and the generated report text. If you delete your account, no copy of your original documents remains on our systems.
AI processing and Anthropic. Counsel uses Claude, an AI assistant developed by Anthropic, to read documents and generate reports. Content submitted for processing is sent to Anthropic's API. Under Anthropic's API terms, data submitted via the API is not used to train Anthropic's models. Your project information is used solely to produce your report and is not made available to other users or organisations. Anthropic acts as a sub-processor; its infrastructure is in the United States, with appropriate transfer safeguards. See anthropic.com/privacy.
Where your data is stored. Account data, project information and generated reports are stored in a secure database hosted by Supabase, located in West Europe (London), United Kingdom, supporting UK GDPR compliance. Data is encrypted in transit (TLS) and at rest (AES-256). See supabase.com/privacy.
Data isolation between firms. Each firm's data is logically isolated using database row-level security. One firm's users cannot access another firm's projects, reports or data. Within a firm, users share access to the firm's projects and reports; firm administrators manage user access in Settings.
Retention and deletion. Account and project data is retained while your account is active. If you cancel, data is retained for 30 days to allow recovery, then permanently deleted. You can request immediate deletion at any time via Settings or [email protected].
Sub-processors for Counsel: Supabase (database/auth/storage, London); Anthropic (AI processing, US); Cloudflare (hosting/CDN, global).
DesignFlow AI works differently from Counsel, and this gives it a distinctive — and in some respects simpler — privacy position.
DesignFlow AI is a downloadable pack of AI specialists, a Voice Calibrator, and automation schedules that you install into your own Claude (Anthropic) environment and run on your own project information, within your own Notion (Studio OS) workspace.
This means your project data is processed under your own arrangements, not ours. When you use the DesignFlow AI specialists, your documents and project information are processed by your own Claude account under your agreement with Anthropic, and stored in your own Notion workspace under your agreement with Notion. Lapunne Limited does not receive, process, or store the project data you run through the specialists.
What we do collect is limited to the information needed to sell and deliver the pack to you (name, email, purchase record — covered by Part A) and, if you subscribe via DesignFlow Academy for updates, your subscription details.
Because the processing happens in your environment, you are the data controller for the project information you run through DesignFlow AI, and you are responsible for your own compliance, your own client confidentiality, and your own arrangements with Anthropic and Notion.
Studio OS, the SOP Library, the Folder Structure Guide, and DesignFlow Academy content are digital resources (templates, guides, documents, courses). For these, we collect only the information needed to sell, deliver and support them (covered by Part A). Studio OS and the SOP Library operate within the Notion platform and are subject to Notion's own terms and privacy policy. Snagflow processing terms will be added to this policy when Snagflow launches.
DesignFlow OS is operated by Lapunne Limited, registered in England and Wales. This policy is governed by the laws of England and Wales.