Paving Planner

Privacy Policy

Last updated 1 August 2026

This is an English summary provided for convenience. The legally binding version is the Slovak original at pavingplanner.com/gdpr.

1. Controller

The data controller is Michal Antal (fyzická osoba), Kollárova 3, 903 01 Senec, Slovensko, phone +421 940 595 800, email m.antal.work@gmail.com. We process personal data in line with Regulation (EU) 2016/679 (GDPR).

2. What we process

  • Account data — email, hashed password, first and last name, phone number.
  • Content you enter — projects, drawings, price lists, client contacts and quotes. You are responsible for lawfully entering any third-party data.
  • Technical data — server logs and IP addresses, used for security and abuse prevention (legitimate interest), including at sign-up and sign-in.
  • Sketch photos uploaded for AI conversion — deleted after processing.
  • Subscription data — plan, status and an anonymous card fingerprint provided by Stripe (never the card number), used to prevent multi-account abuse (legitimate interest).
  • Voluntary cancellation feedback — used to improve the service; providing it is never a condition of cancelling and it is deleted with your account.

3. Purposes and legal bases

Providing the service and managing your account (contract, Art. 6(1)(b)); security and abuse prevention (legitimate interest, Art. 6(1)(f)); analytics and marketing only with consent (Art. 6(1)(a)) — currently not used.

4. Processors

Supabase (database, authentication, storage), Cloudflare (hosting, CDN, network protection), Google (Gemini API for sketch conversion — paid tier, no training on your data; and Google Sign-In, from which we receive only your name and email) and Stripe (payments — card data is handled solely by Stripe). We never sell your data or share it for marketing.

5. Transfers and retention

Our providers may process data outside the EU/EEA under Standard Contractual Clauses or the EU-US Data Privacy Framework. We keep your data for the lifetime of your account; deleting the account really deletes the data, including uploaded files. Statutory retention periods (e.g. accounting records for paid plans) may require keeping some records longer.

6. Cookies

We use only functional cookies (sign-in session, interface preferences). No analytics or marketing cookies are in use; if that changes, a consent banner will be added first.

7. Your rights

Under Articles 15–22 GDPR you may request access, rectification, erasure, restriction, portability, object to processing and withdraw consent at any time — by email to m.antal.work@gmail.com. You may also lodge a complaint with the Slovak Data Protection Office (dataprotection.gov.sk).

← Back to home page