Privacy Policy

1. Who we are (controller)

This Privacy Policy explains how Jukka Nilsson, Poste Restante 00510, Helsinki, Finland (“we”, “us”, or “our”) processes personal data when you use Elevator Dynamics Engine at https://planelevators.com (the “Service”).

We are the data controller for personal data described in this policy. Contact: support@planelevators.com.

This policy is intended to meet the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection law.

2. Personal data we collect

Account and authentication: email address; authentication credentials or magic-link tokens managed via our auth provider; account identifiers; session information needed to keep you signed in.

Profile and subscription: plan and subscription status; trial end dates if any; Stripe customer identifier linked to your account; timestamps for account creation and updates.

Project data (Pro): project names and configuration data you save (building and traffic parameters and related JSON), associated with your user ID.

Billing and payments: payment and subscription data is processed by Stripe. We receive limited billing metadata (for example customer ID, subscription status, and checkout/session references). We do not store full card numbers on our servers.

Usage and analytics: product interaction events (for example CTA clicks, checkout started/completed, upgrade prompts, and feature use such as simulation runs, PDF export, and cloud save) via Vercel Analytics. These events may include non-identifying building-size metrics (floor count, car count, population, and building type) and which Free-plan limits were reached. We do not send project names, addresses, or email addresses to analytics. We also receive approximate technical data such as pages viewed and device/browser characteristics as provided by our hosting/analytics tools.

Technical and security logs: IP address, request metadata, and error logs as needed to operate, secure, and debug the Service.

Communications: content of emails or messages you send to support@planelevators.com.

Free anonymous use: if you use the free simulator without an account, we may still process technical and analytics data as described above, but we do not require your name or email for that use.

3. Purposes and legal bases

Provide the Service and accounts (contract — Art. 6(1)(b) GDPR): authentication, saving projects, delivering Free/Pro features.

Billing and subscriptions (contract — Art. 6(1)(b)): checkout, renewals, customer portal, entitlement updates.

Operate, secure, and improve the Service (legitimate interests — Art. 6(1)(f)): preventing abuse, debugging, analytics of product usage, maintaining infrastructure.

Legal obligations (Art. 6(1)(c)): accounting, tax, and responding to lawful requests.

Where we rely on legitimate interests, we balance those interests against your rights. You may object as described in Section 7.

4. Processors and recipients

We use service providers (processors or independent controllers as applicable) to run the Service, including:

Supabase — authentication, database, and related backend infrastructure for accounts and project storage.

Stripe — payment processing, checkout, billing portal, and subscription management.

Vercel — application hosting and Vercel Analytics.

These providers process data on our instructions or as independent controllers for their own compliance (for example Stripe as payment provider). We do not sell your personal data.

5. International transfers

Some providers may process data outside the European Economic Area (for example in the United States). Where required, transfers are safeguarded by appropriate mechanisms such as the European Commission’s Standard Contractual Clauses, provider certifications, or other lawful transfer tools.

You may contact support@planelevators.com for more information about transfer safeguards applicable to our stack.

6. Retention

Account and profile data: kept while your account is active. After deletion requests, we delete or anonymise personal data within a reasonable period, unless longer retention is required for legal, security, or accounting reasons.

Project data: retained while associated with an active account and Pro access; may be deleted or become inaccessible when Pro access ends or the account is deleted.

Billing records: retained as required by bookkeeping and tax law (often several years).

Logs and analytics: retained for shorter operational periods unless needed for security investigations.

7. Your rights

Under the GDPR you may have the right to: access your data; rectify inaccurate data; erase data; restrict processing; data portability; object to processing based on legitimate interests; and withdraw consent where processing is consent-based (withdrawal does not affect prior lawful processing).

You can delete your account from the Account page. For other rights, email support@planelevators.com. We may need to verify your identity.

You may lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu) or another supervisory authority in your EU/EEA country of residence.

8. Cookies and similar technologies

We use cookies and similar technologies necessary for authentication and session management (for example to keep you signed in via our auth provider).

We use Vercel Analytics to understand how the Service is used, including aggregated product-usage metrics such as building size and feature interactions. Analytics may use first-party or similar measurement techniques as described by Vercel. We do not log project names, addresses, or email addresses in analytics, and we do not use additional marketing pixels or advertising cookies in the Service as of the date of this policy.

You can control cookies through your browser settings. Disabling necessary cookies may prevent sign-in or account features from working.

9. Children

The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe we have done so, contact support@planelevators.com and we will take appropriate steps to delete the data.

10. Changes and contact

We may update this Privacy Policy from time to time. The “Last updated” date will change, and the current version will be posted at https://planelevators.com/privacy. Material changes may also be communicated by email or in-product notice where appropriate.

Questions or requests: support@planelevators.com.

Postal address: Jukka Nilsson, Poste Restante 00510, Helsinki, Finland.