Privacy Policy

Last updated: September 10, 2026

1. Who handles your data

Planichapa is operated by FOOLABS, registered in Brazil under company number (CNPJ) 37.724.297/0001-48. For anything concerning personal data, including the requests described in section 7, write to mail.foolabs@gmail.com.

2. What we collect

What you give us when you sign up: your name and e-mail address. The password is stored only as a cryptographic hash — not even we can read it.

What you generate by using the site: the calculations you run — part type, the measurements you enter and the results. They stay linked to your account so you can look them up later.

Payment data: if you buy full access, we keep the amount, the date and the status of the order. No card or bank account details ever pass through this site. In Brazil, Pix payments happen inside your own banking app; all that reaches us is the fact that an amount arrived. Outside Brazil the seller is Paddle: card details are entered on Paddle's page and handled by Paddle, under Paddle's privacy policy. What reaches us is the confirmation of the payment, and the amount, the date and the order status named at the top of this paragraph come from it.

Where you came from: when you create the account, we store alongside it what the address of the first page you opened carried — the advertising campaign (the utm_ parameters), the click identifier when you arrive from an ad, the site that brought you, the page you landed on, the language you read in and whether you were on a phone or a computer. It tells us which ad worked. We also keep the IP address the account was created from, and that one has a different reason: it is what lets us spot an account opened by a bot or in bulk. All of it is written once, on arrival, and nothing is collected after that. We also keep your answer to the cookie notice at the time you signed up — accepted, refused or no answer — because anyone who asks for consent has to be able to show what was answered. We do not store your full user-agent string, and we do not ask any of this of a third party.

Collected automatically: IP address, browser type, pages visited and access times, through server logs and the measurement tools in section 3.

3. Cookies and third-party tools

Session cookie — strictly necessary. It is what keeps you signed in. The site does not work without it.
Google Analytics — counts how many people visit and which pages they pass through, in aggregate.
Cloudflare Turnstile — checks that the contact form was filled in by a person rather than a bot.
Meta Pixel — when active, tells Meta (Facebook and Instagram) that a visit came from an ad, so campaign results can be measured.
Google Ads — when active, tells Google that a visit came from one of its ads, so campaign results can be measured.
Paddle and ProfitWell — never on a plain visit: only on the buy click, or on a payment link Paddle sent you. The checkout loads Paddle's script, which brings ProfitWell, the retention analytics tool from the same group.
Sign in with Google and with Facebook — if you choose to create your account or sign in through one of them, we receive from the provider only your name, your e-mail and an identifier for your account there. We do not receive your password, your contacts or your posts, and we post nothing on your behalf. You can undo that link at any time in your Google or Facebook settings, and your account here goes on existing — to sign in without the provider, use "Forgot your password?" and choose one.

None of the three measures anything before you accept in the cookie notice. Google Analytics and Google Ads are loaded only after you accept. The Meta Pixel library is loaded before that, with consent revoked — it sends nothing, and choosing "Essential only" keeps it that way. The session cookie and Cloudflare Turnstile are strictly necessary and do not depend on that choice. You can revisit the choice whenever you like, with the "Review cookies" button in the footer of any page.

4. What we use it for

Running your account and giving you access to your calculations.
Tracking the free monthly allowance and the validity of paid access.
Sending service e-mail: password resets, order confirmations and account notices.
Understanding how the site is used and where it breaks, so it can be fixed.
Measuring advertising results while campaigns are running.

We do not sell your data, and we do not send third-party marketing.

5. Who we share it with

Only the providers the site needs to work:

Fly.io — server and database hosting.
Google — system e-mail delivery, Google Analytics and Google Ads advertising measurement.
Cloudflare — contact form protection.
Meta — advertising measurement while campaigns are running.
Paddle — sale, billing and invoicing outside Brazil. Paddle is the party that receives the payment details of a buyer outside Brazil, and that handling is governed by Paddle's privacy policy.

These services process data outside Brazil — in the United States, and in the United Kingdom and the European Union in Paddle's case — which constitutes an international transfer of data under article 33 of the Brazilian General Data Protection Law.

6. How long we keep it

For as long as your account exists. If you ask us to delete it, we remove the account data and the calculations. Records of paid orders may be kept for the period required by tax law. Server access logs are kept for six months, as required by article 15 of the Brazilian Internet Civil Framework.

7. Your rights

Brazil's General Data Protection Law (Law 13.709/2018) gives you the right to confirm whether we process your data, access it, correct it, request deletion, request portability, learn who it was shared with and withdraw consent. To exercise any of these, write to mail.foolabs@gmail.com. We answer within fifteen days.

You can delete your account at any time, with no need to give a reason.

8. Security

All site traffic is encrypted over HTTPS, passwords are stored as bcrypt hashes and database access is restricted. No system is completely safe: should an incident occur that could pose a meaningful risk to you, we will notify both you and the Brazilian data protection authority.

9. Children

Planichapa is a work tool and is not intended for anyone under 18. We do not knowingly collect data from children.

10. Changes to this policy

If this policy changes in any meaningful way, we will give notice by e-mail or on the site before the change takes effect. The date at the top shows the last revision.

11. Contact

Questions about this policy: mail.foolabs@gmail.com or WhatsApp.