Privacy Policy

1. Scope

This Policy describes how Planuze handles personal data in the desktop application, on the planuze.com website and in the related services (account, licences, payments, support and the pack marketplace).

Legal TODO: identification of the controller, of the data protection officer (DPO) and of the official channel for exercising rights.

2. What stays on your machine

Planuze is local-first. The following never leaves your computer:

• your projects, the declarative model and the generated code;
• the AI agent sessions and history;
• the credentials and API keys you configure, stored in the operating system's own credential vault (Keychain on macOS, DPAPI on Windows, libsecret on Linux).

These items are not sent to Planuze servers.

3. Data we process

• Account: identification and authentication data needed to create and access the account.
• Licence and device: technical identifiers of the authorised device, to validate the licence and detect misuse.
• Payment: handled by an external payment provider; card data does not pass through our servers.
• Support: the content you send in a support conversation.
• Crash diagnostics: application error reports, used to fix defects.

Legal TODO: complete and final inventory per purpose, with the exact fields of each category.

4. Legal bases and purposes

Legal TODO: entire section — legal basis for each processing activity (contract performance, legitimate interest, consent, legal obligation) and the matching purpose.

5. Sharing and processors

We use service providers for payment, e-mail delivery, file storage, cloud infrastructure and crash diagnostics.

Legal TODO: named list of processors/sub-processors, country of processing and purpose of each.

6. Retention and deletion

Account data is kept while the account exists. After closure, data is deleted or anonymised, except where the law requires retention.

Legal TODO: retention periods per category and statutory retention grounds.

7. Your rights

Applicable data protection law grants, among others, the rights to confirmation of processing, access, correction, portability, deletion and withdrawal of consent.

Legal TODO: procedure and response deadline for data subject requests.

8. International transfers

Part of the infrastructure may operate outside the user's country.

Legal TODO: safeguards applied to international transfers.

9. Security

Credentials are stored encrypted in the operating system vault; communication with the services uses encrypted channels; internal administrative access is restricted and audited.

Legal TODO: description of technical and organisational measures and of the incident response procedure, including notification to the data subject and the authority.

10. Cookies and similar technologies on the website

Legal TODO: website cookie inventory and how consent is collected.

11. Changes to this Policy

This Policy is versioned just like the Terms: each version has a number and an effective date, and a published version is never edited afterwards.

Legal TODO: how material changes are communicated.

12. Contact

Requests regarding personal data can be sent through the support channels available in the application and at planuze.com.

Legal TODO: contact address of the data protection officer (DPO).