Privacy
Privacy policy
Last updated · to be completed
To be completed. Document to be validated by a DPO / lawyer before publication.
Data collected
Login email, password (hashed), billing information (handled by Stripe, Surplan never stores credit card numbers), imported PDF plans, measurements and projects you create.
Purposes
Provide the service (authentication, plan storage, sync across devices), billing, support, and aggregated anonymised usage statistics.
Hosting
Your data is hosted in France (eu-west-3, Paris region) by Supabase Inc. (AWS infrastructure). Payments are processed by Stripe (Ireland, GDPR).
Retention
Your data is kept while your account is active. Upon cancellation, it is kept for 30 days then permanently deleted.
Your rights
In accordance with the GDPR, you have rights of access, rectification, erasure, portability and opposition. Exercise these rights by writing to contact@surplan.io.
Cookies
The marketing site does not use tracking cookies. The app uses only cookies strictly necessary for functioning (authentication).