Privacy Policy

1. Introduction

This Privacy Policy explains how Koppe Digital OÜ, operating as Gridsnap ("we", "us", "our"), collects, uses, and protects your information when you use our floor plan editor at gridsnap.app and editor.gridsnap.app (the "Service").

We are committed to protecting your privacy. We collect only the information necessary to provide and improve the Service.

2. Information We Collect

2.1 Information You Provide

• Account information: When you create an account, we collect your email address and display name.
• Floor plan data: If you use cloud storage features, we store your floor plan projects on our servers.
• Communications: If you contact us for support, we collect the information you provide in your message.

2.2 Information Collected Automatically

• Usage data: We may collect anonymous, aggregated information about how the Service is used (e.g., feature usage, page views) to help us improve the product.
• Device information: Browser type, operating system, and screen resolution may be collected for compatibility and performance purposes.

2.3 Information We Do Not Collect

When using the free editor without an account, your floor plans are stored locally in your browser's storage. We do not have access to this data — it never leaves your device unless you explicitly export or share it.

3. Payment Processing via Paddle

We use Paddle.com Market Limited ("Paddle") as our Merchant of Record for all payment transactions. When you purchase a paid plan:

• Paddle collects and processes your payment information (credit card details, billing address, etc.) directly. We never see, store, or have access to your full payment card details.
• Paddle acts as the data controller for payment-related personal data.
• Paddle may collect your name, email address, country, and postcode for tax calculation and fraud prevention purposes.
• Paddle handles sales tax/VAT calculation, collection, and remittance.

For details on how Paddle handles your data, please refer to Paddle's Privacy Policy.

We receive from Paddle: your email address, country, transaction identifiers, and subscription status. We use this information to manage your account and provide access to paid features.

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Manage your account and provide access to features
• Process transactions and manage subscriptions (via Paddle)
• Send transactional emails (account verification, password resets, subscription updates)
• Respond to support requests
• Analyze usage patterns to improve the product (using aggregated, anonymized data)
• Detect and prevent fraud or abuse

5. Data Storage and Security

Account data and cloud-stored floor plans are hosted on secure servers provided by Supabase (hosted on AWS infrastructure). Data may be stored in the EU or US depending on infrastructure availability.

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Sharing

We do not sell your personal information. We share data only with:

• Paddle: For payment processing, as described in Section 3.
• Supabase: For authentication and data storage (as a data processor acting on our behalf).
• Law enforcement: Only when required by applicable law or valid legal process.

7. Cookies and Tracking

We use only essential cookies required for the Service to function (e.g., authentication session cookies). We do not use third-party advertising or tracking cookies.

Paddle may set cookies during the checkout process for fraud detection and transaction management. These are governed by Paddle's cookie policy.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data and account.
• Export: Request a copy of your data in a portable format.
• Objection: Object to the processing of your data in certain circumstances.
• Restriction: Request that we restrict the processing of your data.

To exercise any of these rights, contact us at support@koppe.ee. We will respond within 30 days. For payment-related data held by Paddle, you may also contact Paddle directly.

9. Data Retention

We retain your account data and floor plans for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it (e.g., transaction records for tax purposes).

Paddle retains transaction data in accordance with their own retention policies and applicable tax and financial regulations.

10. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers, in compliance with applicable data protection laws including GDPR.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "last updated" date at the top of this page indicates when the policy was last revised.

13. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at:

support@koppe.ee