Privacy Policy

Last updated 2 August 2026

The short version

Your drawings, characteristics, operations, control plans and inspection records never leave your computer. We could not produce them if asked, because we do not have them.

What we hold is the minimum needed to run an account: your email address, your shop name, your settings and library, and your subscription state.

Why this is architectural rather than a promise

ctrlPlanner does the calculation and rendering in your browser. Plan content is written to files on your own drive in the open ".cplan.zip" format and to your browser's local storage. There is no upload step and no server-side copy — the design is what enforces this, not a policy we could quietly change.

This is the reason ctrlPlanner does not widen the assessment boundary of a shop already operating inside CMMC or ITAR scope: controlled technical data stays on equipment you already control.

What we collect

Account: your email address, and the shop name you enter. Used to sign you in and to identify your account.
Shop settings and library: your default units and decimals, methods, frequencies, operation templates, smart-fill rules and the shop details that print on an AS9102 header. Stored so they follow you between machines.
Subscription state: your Stripe customer and subscription identifiers, your plan, and whether the subscription is in trial, active, past due or cancelled.
Basic technical logs from our hosting and email providers, such as IP address and timestamps, kept for security and troubleshooting.

What we do not collect

Drawings, prints or any image you import.
Characteristics, dimensions, tolerances, operations or annotations.
Control plans or AS9102 inspection records.
Analytics, behavioural tracking or session recording. There is no telemetry in the product, by design.
Advertising identifiers. We do not advertise and we do not sell or share personal information.

Cookies and similar technology

We use browser storage to keep you signed in and to hold your licence status and your working plan. These are functional and there is no advertising or analytics cookie to consent to.

Who else processes your data

Supabase — account records, shop settings and subscription state.
Stripe — payment processing. Stripe receives your billing details directly; we never see your card number.
Vercel — hosting and delivery of the application.
Our transactional email provider — delivery of sign-in links.

Each is a processor acting on our instructions. None of them receives plan content, because we do not have it to pass on.

How long we keep it

Account and settings data is kept while your account exists and for a reasonable period afterwards for tax and accounting purposes. Ask us to delete your account and we will remove your account record and settings; billing records that we are legally required to retain are the exception.

Your rights

Depending on where you are, you may have rights to access, correct, export or delete the personal data we hold, and to object to or restrict its processing. Write to us and we will action it. Because plan content is already on your own equipment in an open format, an export of it is something you can perform yourself at any time without asking.

Children

ctrlPlanner is business software and is not directed at anyone under 18.

Changes

If we change what we collect, we will update this page and email account holders before the change takes effect.

Contact

Privacy questions, or a request about your data: support@ctrlplanner.com. Postal address: [BUSINESS ADDRESS].