Privacy

Last updated: [date]

Who’s responsible

[Your business name], [address], is responsible for your personal data in Vanwright. Questions or requests: [contact email].

What we collect, and why

• Layouts you don’t save to an account stay in your browser. We never receive them.
• Your email address, if you sign in, to send sign-in links and run your account.
• Layouts you save to your account, to store them and open them on your devices.
• Your subscription: its status and renewal date, from Stripe. Stripe handles your card; we never see the card number. If we’ve given you Pro for free, we keep your email address with the gift and when it ends.
• When you first print or export with Pro (the type and the date, not what you printed), so we can apply the refund promise in our terms.
• Messages you send with Send feedback, and the email address you give for a reply.
• Error reports when something goes wrong: the error, your browser and screen size, which van and how many pieces. Never the layout itself.

We use this to provide Vanwright and your subscription (our contract with you), to fix problems and prevent abuse of refunds (our legitimate interests), and to keep accounting records (a legal duty).

Who we share it with

Only the companies that run parts of Vanwright for us, under contracts that protect your data:

• Supabase: accounts, saved layouts and sign-in emails.
• Stripe: payments, invoices and receipts.
• [Email provider, e.g. Resend]: sending sign-in emails.
• [Hosting, e.g. Cloudflare]: serving the website.

Some of them process data outside the UK, such as in the US. Where they do, they use approved safeguards such as the UK International Data Transfer Addendum or the UK-US data bridge. We don’t sell your data, and there are no advertising trackers.

Cookies and browser storage

Vanwright uses your browser’s storage only to work: to keep your layout, your settings (like dark mode) and your sign-in. We don’t use advertising or analytics cookies, so there’s nothing to accept.

How long we keep it

• Your account, saved layouts and usage records: until you delete your account.
• Invoices and payment records: kept by Stripe and us for as long as the law requires (usually six years).
• Feedback and error reports: up to [12 months].

Your rights

You can ask for a copy of your data, ask us to correct it, or delete your account yourself from the account page in the planner. You can also object to how we use it. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk).

Changes

If we change this policy in a way that matters, we’ll tell you before it takes effect.