Privacy Policy (Model Template)

• Authentication Data: Your email address, used to provide passwordless session authentication and communicate essential product updates.

• Workshop Progress Data: Interactive woodworking progress, including completed steps, cut list piece checklists, custom dimensional parameters calculated in millimeters, optional step toggles, and workshop shopping list prices.

• Device Information: Device fingerprints, hardware/browser user-agent labels (e.g., "iPhone · Safari"), creation date, and last seen timestamps, used strictly to enforce the fair-use limit of up to 3 connected devices.

• Commercial & Purchase Records: Transaction identifiers (Stripe Checkout session ID), purchased plan SKUs, payment currency, gross amounts paid, and statutory withdrawal waiver timestamps.

We engage trusted third-party service providers bound by strict data processing agreements:

• Supabase Inc.: Relational database (PostgreSQL with Row Level Security), user authentication, and secure private asset storage (EU/US data centers).

• Vercel Inc.: Application hosting, edge computing, content delivery network (CDN), and operational server logs.

• Stripe Payments Europe, Ltd. / Stripe Inc.: Payment gateway processing, merchant tax compliance (Stripe Tax), and fraud prevention.

If you reside in the European Economic Area (EEA) or the United Kingdom, you have enforceable rights regarding your personal information:

• Right of Access & Portability: You can at any time download an export of your entire profile, device history, workshop progress, and purchase records in standard JSON format via your Account page (/app/account).

• Right to Rectification: You may correct your account preferences, default measurement units, and language preferences directly in the app settings.

• Right to Erasure ("Right to be Forgotten"): You can permanently delete your account at /app/account using our two-step email confirmation. Deletion permanently erases your profile, devices, and project progress.

• Right to Lodge a Complaint: You retain the right to lodge a formal complaint with your national supervisory authority (e.g., CNIL in France, CNPD in Portugal, AEPD in Spain, ICO in the UK).

When you choose to delete your account, your personal profile, device records, and project progress are immediately and permanently wiped from our production database.

However, in strict compliance with statutory accounting, anti-fraud, and tax retention laws (which require transaction records to be kept for 7 to 10 years depending on jurisdiction), order transaction proofs in our purchases table are permanently unlinked and anonymized (user_id set to NULL).

Under Directive 2011/83/EU and the Consumer Contracts Regulations, consumers purchasing digital plans and interactive digital content acknowledge that immediate access waives the statutory 14-day cancellation and refund period. The exact timestamp of this consent is recorded upon purchase completion.

For any questions regarding this Privacy Policy or your data protection rights, please contact our legal counsel team at [SUPPORT_CONTACT_EMAIL] or by postal mail at [COMPANY_ADDRESS].