Privacy Policy

Contact

For privacy questions about PalletDrawing, use the contact form on palletdrawing.com.

What we collect

• Account: your full name, phone number, email address and password (stored only as an irreversible hash). Your name and phone number are used only to contact you about your account.
• Google sign-in (if you choose it): the name, email address and account ID of your Google account. Your Google password never reaches us.
• Optional company profile details (name, address, logo, tax info) you enter for your documents.
• Your content: the pallet designs, templates and quotes you save.
• Subscription: when you upgrade to Premium, the customer, subscription and transaction IDs, subscription status, billing period dates and billing email that Paddle sends us; your credit balance and credit history (welcome, subscription, spend, gift and previously purchased packs). Card details never reach us.
• Design review links: when you send a design for approval, the name, decision (approved / changes requested), note and response time entered by the person who opens the link (your customer — a third party).
• Feedback form: your message and optional email, used only to reply to you.
• Anonymous, cookie-free page statistics for product improvement.

Third-party data collected through design review links is processed only on your instruction and only to run the approval of that design revision. You are responsible for whom you share a link with and for informing that person; links are time-limited and can be withdrawn.

How we use it

Solely to provide the service: signing you in, contacting you about your account, storing your designs in the cloud, generating your technical drawings and quote PDFs, recognising your subscription in the app and running the design approval flow. We do not sell your data, share it for advertising, or send unsolicited email.

Payments (Paddle)

Premium subscriptions are sold and billed by Paddle.com Market Ltd as Merchant of Record. Card and billing details you enter at checkout are processed directly by Paddle under Paddle's own privacy policy; we only receive the identifiers and status needed to link the subscription to your account. Invoices are issued by Paddle.

Service providers

• Supabase Inc. — database, authentication and file storage. Your data is stored in Supabase's European Union region (Frankfurt, Germany).
• Vercel Inc. — application hosting and anonymous, cookie-free analytics.
• Paddle.com Market Ltd (United Kingdom) — payments, invoicing and tax handling as Merchant of Record.
• Resend Inc. — delivers feedback-form messages to us by email.
• Google LLC — authentication, only if you use "Continue with Google".

These providers may operate servers outside your country. They process data only to provide their service to us, under their own privacy commitments and data processing terms, and may not use it for their own purposes.

Cookies

We use necessary authentication cookies and a 365-day browser cookie that prevents the free export allowance from being granted again to further accounts opened from the same browser. A hash of its random identifier is stored with the account ID and expires after 365 days; expired records are removed on the next free-account activation; account deletion does not immediately remove this abuse-prevention record. We do not collect hardware fingerprints. No advertising or tracking cookies. The Paddle checkout may set its own strictly necessary cookies when opened.

How your data is protected

All connections are encrypted (HTTPS). Data is stored with row-level security — each account can access only its own records. Design review links use unguessable, time-limited, revocable tokens and show only an image of the revision that carries the brand mark. Infrastructure is hosted on certified providers (Supabase, Vercel, Paddle).

Deleting your account

You can delete your account from the account settings inside the app, or request deletion any time through the contact form on palletdrawing.com (state your account email). All personal data is removed within a reasonable period, except where retention is legally required (for example Paddle's invoice records).

Your rights

You may request access to, correction or deletion of your personal data, object to its processing, or ask which providers it has been shared with. Use the contact form on palletdrawing.com; we answer within 30 days and free of charge.

Changes

We may update this policy; material changes will be reflected in the date above. For questions, use the contact form on palletdrawing.com.