This policy explains what PlankCAD collects, why, who else processes it, how long it is kept, and what you can require us to do with it. It is written to be read, not to be survived. If anything here is unclear or looks wrong, write to support@plankcad.com and we will fix the text or the practice.
PlankCAD is operated by Rekto Digital LLC ("we", "us"), which is the data controller for the information described here. PlankCAD is browser-based estimating and quoting software for woodworking shops, available at plankcad.com. Contact: support@plankcad.com.
| What | Why | Basis |
|---|---|---|
| Account data — your email address, your name if you give one, and a hashed password. | To sign you in, to keep your work separate from everyone else's, and to email you about your account. | Performance of our contract with you. |
| The work you create — estimates, quotes and their revisions, customers, projects, material and labour rates, cut lists, offcut inventory and business defaults. | This is the product. It is stored so it is there when you come back, on any device. | Performance of our contract with you. |
| Billing data — your subscription status and the customer and subscription identifiers Stripe gives us. | To know whether your subscription is active. We never see or store your card number — Stripe collects and processes payment details directly. | Performance of our contract with you. |
| Operational logs — request timing, error traces and IP address at the moment of a request. | To keep the service up, to find faults, and to limit abuse. IP addresses are used in the moment and are not retained as part of your profile. | Our legitimate interest in a service that works and is not abused. |
| Measurement — described in its own section below. | To understand which parts of the site are used. | Consent, for anything that sets a cookie. Legitimate interest for cookieless counts. |
We do not collect special category data, we do not buy data about you from anyone, and we do not sell or rent your data to anyone.
The measurement described below never records the numbers you type, the names of your customers or projects, or the value of any estimate or quote. Those are the most commercially sensitive things in the product — what a shop charges and what its costs are — and they exist only in your account, for you.
We keep anonymous daily totals of how PlankCAD is used — for example, how many times the board foot calculator produced a result on a given day and whether metric or imperial was selected, or how many quotes were exported. These are counters, not records: no cookie is set or read, no identifier is created, and nothing links one count to another or to you. A step such as “a quote was exported” is stored as a number and a date and nothing else — never the quote, the customer, the project name or any amount. We never store the measurements you type, and your IP address is used only momentarily to limit abuse and is not saved. If your browser sends a Do Not Track or Global Privacy Control signal, we count nothing at all.
We measure traffic — which pages are visited, where visitors arrived from, and the country, browser and device type. It sets no cookies and is not used to build a profile or follow anyone between sites. It is not, however, identifier-free: Vercel identifies a visitor by a hash derived from the incoming request, which is discarded after 24 hours. We say so plainly rather than describing it as anonymous. We do not send it page addresses that contain a quote, customer, project or estimate reference. Vercel processes this on our behalf; see Vercel’s privacy documentation.
If you choose “Accept” on the cookie banner, we load Google Analytics 4,
which sets cookies (_ga and _ga_<id>) and
recognises your browser across visits and pages so we can see how people move through the
site. If you choose “Decline”, the Google Analytics tag is never added to the page — it is not loaded in a restricted mode, it simply does not run. If your browser sends Do Not Track or Global Privacy Control we do not load it either, whatever the banner says. Google processes this data as described in
Google’s privacy policy.
You can withdraw consent at any time by clearing this site’s data in your browser,
which makes the banner ask again.
These are the only third parties that receive any of it, and each receives only what its job requires:
These providers operate in the United States and the European Union, so your data may be transferred outside your country. Where that transfer leaves the UK or EEA it relies on the providers’ Standard Contractual Clauses.
A copy of recent work is also cached in your browser’s local storage purely so the app loads quickly. Clearing it deletes nothing from our servers.
Wherever you live, you may ask us to do all of the following, and we will do them:
Write to support@plankcad.com. We will answer within 30 days and will not charge you or ask why. If you are in the UK or EEA and think we have got it wrong, you may complain to your data protection authority; if you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we will never treat you differently for exercising any right in this section.
Traffic is encrypted in transit. Passwords are hashed, never stored in a readable form, and cannot be recovered by us — only reset by you. Access to the database is restricted at the row level so one account cannot read another’s work. No system is perfect: if a breach ever affects your data, we will tell you and the relevant regulator without waiting to be asked.
PlankCAD is a tool for businesses and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, tell us and we will remove it.
If we change it in a way that materially affects you, we will say so on this page and, where the change is significant, email you before it takes effect. The date at the top always reflects the current version.
Questions, requests or complaints about this policy: support@plankcad.com.