1. Scope
This Privacy Policy applies to the PlanProof website, accounts, schedule-validation service, customer support, and related communications. It does not govern third-party websites or services that operate under their own privacy policies.
2. Information we collect
Information you provide
- Account and contact details, such as your name and email address.
- Schedule files and related project information that you choose to upload. Raw XER files are processed in memory and are not retained; generated reports and activity-level evidence are saved to your account.
- Support requests, feedback, survey responses, and communications with us.
- Billing details needed to identify your subscription and transaction. Full payment-card information is collected and processed by Paddle, not stored by PlanProof.
Optional first-party analytics
Analytics are disabled until you choose “Allow analytics.” If enabled, PlanProof records a random browser identifier, pages viewed, selected product events, referring domain, country-level location and timestamps. We do not store your IP address, full referring URL, advertising identifier or raw schedule content in analytics. You may reject analytics without losing product access.
Essential sign-in and checkout technologies may still operate because they are required to provide the service you request.
3. How we use information
- Provide, operate, troubleshoot, secure, and improve PlanProof.
- Process uploaded schedules and generate validation results.
- Provide free tools, protect saved workspaces, manage optional bundle orders and existing billing records, and provide customer support.
- Communicate service, security, billing, and policy updates.
- Prevent fraud, abuse, unauthorised access, and violations of our terms.
- Comply with legal obligations and establish, exercise, or defend legal claims.
- Send marketing communications where permitted; you may unsubscribe at any time.
4. Legal bases
Where data-protection law requires a legal basis, we process information as necessary to perform our contract with you, pursue legitimate interests such as operating and securing the service, comply with legal obligations, and act on consent where consent is required. You may withdraw consent at any time without affecting earlier lawful processing.
5. Schedule files and validation data
Uploaded schedule files are processed to provide the requested validation. We limit access to authorised personnel and service providers with a business need. We do not sell schedule files or use them to advertise to you. Unless a longer period is required for an account feature, support request, security investigation, or legal obligation, uploaded source files are scheduled for deletion after the applicable retention period communicated in the service. Generated reports and account history may remain available while your account is active.
Before uploading a schedule, remove personal, confidential, classified, export-controlled, or third-party information that is not necessary for validation.
6. When information is shared
We may share information with carefully selected providers that help us deliver hosting, storage, analytics, security, communications, customer support, and payment services. Paddle acts as our payment provider and merchant of record and processes checkout and billing information under its own privacy terms. We may also disclose information when required by law, to protect rights and safety, during a business transaction such as a merger or acquisition, or when you direct or consent to the disclosure.
We do not sell your personal information.
Contact form messages
When you use the contact form, your name, email address and message are sent through Resend to support@planproof.co so we can respond. Resend processes these details to deliver the email. Do not include sensitive information or project documents. PlanProof uses keyed hashes of your email address and network address with short-lived counters in its database to limit spam; raw network addresses and message contents are not stored in that rate-limit table. Expired counters are removed on subsequent submissions. Contact emails are also handled by the support mailbox provider. See Resend’s privacy policy for its practices.
7. International transfers
PlanProof and its providers may process information in countries other than your own. Where required, we use appropriate safeguards for international transfers, such as contractual protections and recognised transfer mechanisms.
8. Retention
We retain personal information only as long as reasonably necessary for the purposes described in this policy, including providing the service, maintaining transaction and tax records, resolving disputes, enforcing agreements, and meeting legal requirements. Retention periods vary by data type and context. When information is no longer required, we delete or anonymise it where reasonably practicable.
9. Security
We use administrative, technical, and organisational safeguards designed to protect information against unauthorised access, loss, alteration, or disclosure. No internet service can guarantee absolute security. You are responsible for using strong credentials, protecting access to your account, and uploading only information you are authorised to process.
10. Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, withdraw consent, and complain to a data-protection authority. To submit a request, email privacy@planproof.co. We may verify your identity before completing a request. Some information may be retained where permitted or required by law.
11. Cookies and choices
Essential cookies support security, checkout, and core service operation. Optional first-party analytics remain disabled until you choose “Allow analytics”. Your choice is stored in this browser under planproof-analytics-consent. Use the persistent “Analytics preferences” button on any page to change it. Rejecting analytics stops future analytics events and removes the random analytics browser identifier from this browser; it does not delete records already received. If browser storage is blocked, a choice may apply only during the current visit. No advertising or external analytics scripts are currently configured in the application. You can control cookies through browser settings, although blocking essential cookies may prevent parts of PlanProof from working.
12. Children
PlanProof is a business service and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided information, contact us so we can review and delete it where appropriate.
13. Policy changes
We may update this policy to reflect changes in the service, our practices, or the law. We will post the revised policy with a new effective date and provide additional notice when required.
14. Contact
For privacy questions or requests, email privacy@planproof.co. For general support, email support@planproof.co.