Privacy Policy

Last updated: October 29, 2026

1. Who handles your data

Planichapa is operated by FOOLABS, registered in Brazil under company number (CNPJ) 37.724.297/0001-48. For anything concerning personal data, including the requests described in section 7, write to mail.foolabs@gmail.com.

2. What we collect

What you give us when you sign up: your name, e-mail address and telephone number. The password is stored only as a cryptographic hash — not even we can read it.

What you generate by using the site: the calculations you run — part type, the measurements you enter and the results. They stay linked to your account so you can look them up later.

Payment data: if you buy full access, we keep the amount, the date and the status of the order. No card or bank account details ever pass through this site. In Brazil, Pix payments happen inside your own banking app; all that reaches us is the fact that an amount arrived. Outside Brazil the seller is Paddle: card details are entered on Paddle's page and handled by Paddle, under Paddle's privacy policy. What reaches us is the confirmation of the payment, and the amount, the date and the order status named at the top of this paragraph come from it.

Where you came from: when you create the account, we store alongside it what the address of the first page you opened carried — the advertising campaign (the utm_ parameters), the click identifier when you arrive from an ad, the site that brought you, the page you landed on, the language you read in and whether you were on a phone or a computer. It tells us which ad worked. We also keep the IP address the account was created from, and that one has a different reason: it is what lets us spot an account opened by a bot or in bulk. All of it is written once, on arrival, and nothing is collected after that. We also keep your answer to the cookie notice at the time you signed up — accepted, refused or no answer — because anyone who asks for consent has to be able to show what was answered. At sign-up we also record your browser's time zone (for example, America/Chicago), once, and use it only in aggregate — added up with every other account's — to know which countries the site serves. We do not store your full user-agent string, and we do not ask any of this of a third party.

Collected automatically: IP address, browser type, pages visited and access times, through server logs and the measurement tools in section 3.

If you write to us: the name, e-mail address, telephone number, subject and message you send through the contact form, which reach us by e-mail and are kept so we can answer you.

If you ask for the sheet by e-mail: the address you give, the part and the measurements, to send the sheet and to know who asked. Without an account that is all we keep; the address does not go on any list.

If you tell us which part you could not find: the text you write, the page it came from and the language, which also reach us by e-mail; and your e-mail, only if you leave it, so that we can let you know when the part is added. With an account, the request is linked to it and is deleted along with it.

If you answer "Did the part cut right?": your answer, the 1-to-5 rating and your comment, if any, linked to your account and to the calculation. The comment can only appear on the site with your first name, and only if you tick that it may; the rating goes, without your name, into the average rating the site publishes.

3. Cookies and third-party tools

Session cookie — strictly necessary. It is what keeps you signed in. The site does not work without it.
Google Analytics — counts how many people visit and which pages they pass through, in aggregate.
Cloudflare Turnstile — checks that the contact form was filled in by a person rather than a bot.
Meta Pixel — when active, tells Meta (Facebook and Instagram) that a visit came from an ad, so campaign results can be measured.
Google Ads — when active, tells Google that a visit came from one of its ads, so campaign results can be measured.
Meta, from our server — when a purchase is confirmed, we tell Meta the amount and the currency. It does not go through your browser, and carries no e-mail, telephone, name or IP address: the only identifier is a one-way code derived from your account.
Paddle and ProfitWell — never on a plain visit: only on the buy click, or on a payment link Paddle sent you. The checkout loads Paddle's script, which brings ProfitWell, the retention analytics tool from the same group.
Sign in with Google and with Facebook — if you choose to create your account or sign in through one of them, we receive from the provider only your name, your e-mail and an identifier for your account there. We do not receive your password, your contacts or your posts, and we post nothing on your behalf. You can undo that link at any time in your Google or Facebook settings, and your account here goes on existing — to sign in without the provider, use "Forgot your password?" and choose one.

None of the three is loaded before you accept in the cookie notice: Google Analytics, Google Ads and the Meta Pixel are loaded only after you accept, and choosing "Essential only" means none of them is loaded at all. If you arrived from a Meta ad and only accepted on a later page, the identifier of that click, read from the address of the page you arrived on, goes into the Meta Pixel's cookie (_fbc) when you accept — the same one it would have saved on its own had you accepted on arrival. The session cookie and Cloudflare Turnstile are strictly necessary and do not depend on that choice. You can revisit the choice whenever you like, with the "Review cookies" button in the footer of any page.

4. What we use it for

Running your account and giving you access to your calculations.
Tracking the free monthly allowance and the validity of paid access.
Sending service e-mail: password resets, order confirmations and account notices — such as the monthly allowance renewing and a single request for feedback on the part you exported — and, in the first three weeks, three e-mails with layout tips, each with a link to stop receiving them.
Understanding how the site is used and where it breaks, so it can be fixed.
Measuring advertising results while campaigns are running.

We do not sell your data, and we do not send third-party marketing.

5. Who we share it with

Only the providers the site needs to work:

Fly.io — server and database hosting.
Google — system e-mail delivery, Google Analytics and Google Ads advertising measurement.
Cloudflare — contact form protection.
Meta — advertising measurement while campaigns are running.
Paddle — sale, billing and invoicing outside Brazil. Paddle is the party that receives the payment details of a buyer outside Brazil, and that handling is governed by Paddle's privacy policy.

These services process data outside Brazil — in the United States, and in the United Kingdom and the European Union in Paddle's case — which constitutes an international transfer of data under article 33 of the Brazilian General Data Protection Law.

6. How long we keep it

For as long as your account exists. If you ask us to delete it, we remove the account data and the calculations. Records of paid orders may be kept for the period required by tax law. Server access logs are kept for six months, as required by article 15 of the Brazilian Internet Civil Framework.

7. Your rights

Brazil's General Data Protection Law (Law 13.709/2018) gives you the right to confirm whether we process your data, access it, correct it, request deletion, request portability, learn who it was shared with and withdraw consent. To exercise any of these, write to mail.foolabs@gmail.com. We answer within fifteen days.

If you are in the European Union, the European Economic Area or the United Kingdom, each use of your data rests, under the General Data Protection Regulation (GDPR) — the UK GDPR in the United Kingdom —, on one of these legal bases:

Performance of the contract you enter into when you create the account (art. 6(1)(b)): your account and calculations, the free allowance and paid access, service e-mail, the session cookie and signing in with Google or Facebook.
Your consent (art. 6(1)(a)), given and withdrawn in the cookie notice: Google Analytics, Google Ads, the Meta Pixel and the _fbc cookie written when you accept.
Our legitimate interests (art. 6(1)(f)): protecting the site from abuse — server logs, the IP address an account was created from and Cloudflare Turnstile; knowing which advertising works and which countries the site serves — where you came from and the purchase report our server sends to Meta; answering what you send through the contact form; the single request for feedback on a part you exported; and keeping records of paid orders for as long as Brazilian tax law requires.
Legal obligation (art. 6(1)(c)): keeping your answer to the cookie notice at sign-up, because the GDPR requires consent to be demonstrable (art. 7(1)).

The GDPR also gives you the right to access your data, have it corrected or erased, restrict its use, receive it in a portable format, object to the uses based on legitimate interests and withdraw your consent at any time, without affecting what was done before. You exercise these rights the same way, by writing to mail.foolabs@gmail.com, and you can also lodge a complaint with the data protection authority of the country where you live or work — in Ireland, the Data Protection Commission; in the United Kingdom, the Information Commissioner's Office.

You can delete your account at any time, with no need to give a reason.

8. Security

All site traffic is encrypted over HTTPS, passwords are stored as bcrypt hashes and database access is restricted. No system is completely safe: should an incident occur that could pose a meaningful risk to you, we will notify both you and the Brazilian data protection authority.

9. Children

Planichapa is a work tool and is not intended for anyone under 18. We do not knowingly collect data from children.

10. Changes to this policy

If this policy changes in any meaningful way, we will give notice by e-mail or on the site before the change takes effect. The date at the top shows the last revision.

11. Contact

Questions about this policy: mail.foolabs@gmail.com or WhatsApp.