Draft build. 12 placeholders on this page must be filled before launch. A production build fails until they are.
1. Who we are#
The controller of personal data described here is [SELLER LEGAL NAME], [REGISTERED ADDRESS] ("we", "us"). Contact for privacy matters: [DATA CONTROLLER CONTACT, e.g. hello@panelcraft.store].
2. Summary#
The website collects nothing beyond standard server logs. The desktop app keeps your data on your computer. Payment and purchase data is handled by Paddle. We hold the emails people send us.
3. Data we process#
- Website server logs. When you visit the site, our hosting provider's server records technical data such as IP address, date and time, requested page, browser type and response status. Purpose: delivering the site, security and fixing faults. Legal basis: legitimate interests (Art. 6(1)(f) GDPR). Retention: [LOG RETENTION PERIOD, e.g. 14 days].
- Emails to hello@panelcraft.store. Your address, name if given, and message content. Purpose: replying and providing support or billing help. Legal basis: legitimate interests or steps requested before a contract (Art. 6(1)(f) and (b)). Retention: [EMAIL RETENTION PERIOD].
- Purchases. Paddle.com Market Limited is the merchant of record and collects your payment, billing and tax details at checkout. Paddle processes these as an independent controller under the Paddle Privacy Notice (https://www.paddle.com/legal/privacy) and the Paddle Buyer Terms (https://www.paddle.com/legal/checkout-buyer-terms). We receive from Paddle the information needed to issue your licence and support you, such as your email address, plan, order reference and country. Legal basis: performance of a contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)). Retention: [PURCHASE RECORD RETENTION PERIOD].
- Licence activation. When you activate a licence key, the app sends the key and a device identifier to our licence service. We use it to confirm the licence is valid and to enforce the device limit. [CONFIRM: licence service exists and what it logs]
4. The desktop app#
The app works offline and stores projects, client data and quotes locally on your computer. We do not receive this data, and the app has no analytics. See Cookies and Data.
5. Cookies#
The website sets no cookies and uses no analytics.
6. Processors and recipients#
- Paddle.com Market Limited: payments, taxes, invoicing (independent controller for purchase data).
- Hosting provider: [HOSTING PROVIDER, e.g. Hetzner Online GmbH, Falkenstein, Germany; confirm], a hosting provider in the EU, hosts the website and its server logs.
- [EMAIL PROVIDER, if a third-party mailbox host is used]
We do not sell personal data.
7. International transfers#
The website is hosted in the EU. Paddle may transfer data internationally under its own notice. [CONFIRM: any non-EU email or licence provider]
8. Your rights#
Under the GDPR you may request access, correction, deletion, restriction, portability, and object to processing based on legitimate interests. You may withdraw consent where processing is based on consent. To exercise a right, email hello@panelcraft.store; we will answer within one month. For data held by Paddle, contact Paddle as set out in its notice. You may also complain to your local data protection supervisory authority [SUPERVISORY AUTHORITY, if applicable].
9. Security#
The app isolates its interface from the system, validates files it opens, and verifies signed licence tokens. The website is served over HTTPS. [CONFIRM: HTTPS]
10. Children#
PanelCraft is a professional tool and is not directed at children.
11. Changes#
We will update this page when practices change and change the date above.