Privacy policy

This policy explains what Sawplan collects, why we collect it, and the choices you have. We keep it proportionate to a practical workshop tool — not a data broker.

Who we are

Sawplan provides a timber cut planning service. The website is at sawplan.work and the app, where accounts, projects and yards live, is at app.sawplan.work. The data controller for your account and project data is Sawplan. Contact: hello@sawplan.work.

What we collect

Account information

When you register, we store your name, email address, and a hashed password. We do not store plain-text passwords.

Google and Facebook sign-in

If you choose “Continue with Google” or “Continue with Facebook”, we ask the provider only for basic sign-in information: your account identifier with that provider, your name and your email address (Facebook lets you decline the email; we then ask you to enter one). We store the identifier and the email the provider shared so we can recognise you next time and show which account is connected. We do not store provider passwords or access tokens and do not receive your contacts, posts or photos. A new account created this way starts without a password and must confirm its email address with us before saving work, even if the provider already verified it. We never connect a provider to an existing account just because the email matches; you connect providers yourself in Settings after signing in, and you can set a password or disconnect a provider there. See Data deletion instructions.

Project and yard data

Saved projects include stock lengths, parts, kerf, trim, currency, designs, and optional yard snapshots you attach to a job. Yard catalogs you create are stored on your account. This data is used to provide the service you request.

Guest calculator data

If you use Sawplan without signing in, your current project may be kept in your browser’s local storage on your device. That data is not sent to our servers until you save it to an account.

Share links

When you create a share link, we store an unlisted random token that maps to a copy of the project JSON needed to display the plan. Anyone with the link can view that project. Revoking the link removes public access.

AI design requests (Pro)

When you use AI-assisted design, your messages and the current design are sent to the AI model provider we use to generate a draft. The conversation, resulting design and AI-unit usage are stored with your project and account so you can continue editing and see your allowance.

Contact messages

If you use the contact form, your name, email address, subject and message are sent by email to our support inbox so we can reply. Please do not include passwords or payment details.

Bot protection (Google reCAPTCHA)

When bot protection is turned on, the log-in, registration, forgot-password, verification-email and contact forms use Google reCAPTCHA, which Google provides to us as a service provider for security and abuse prevention. While one of these forms is shown, your browser loads Google’s script, which looks at how the page is used and at browser and device signals, and Google may set its _GRECAPTCHA cookie. When you submit, we send Google only the resulting one-time token and the name of the form; we never send it your name, email address, password or message. Google returns a risk score that we use only to accept or refuse that submission. We do not store the token or Google’s full result; our server logs keep only the form name, the outcome and the score. Without JavaScript these forms cannot be sent while protection is on; you can email us instead.

Usage analytics

We run our own first-party analytics on the website and the app. Each site keeps a random visitor and session identifier in your browser’s local storage, and records pages viewed (without query strings or share and reset tokens), the referring site, campaign tags in the link, which call-to-action links you click, and the device type, browser and platform derived from your user agent. In the app, signed-in activity is linked to your account. The website and the app keep separate identifiers. No third-party analytics or advertising service receives this data.

Payments

If you buy Pro, the payment step is handled by our payment provider, Paddle. You enter payment details with Paddle, not on Sawplan. We store your plan, billing interval, subscription status and dates, and the customer and subscription references Paddle sends us, so we can apply your Pro access.

Technical logs

Our servers may record standard request metadata (such as IP address, user agent, and timestamps) in server logs for security, abuse prevention, and debugging. We do not use third-party advertising trackers.

How we use your data

• Authenticate you and keep your session secure.
• Store and sync your projects and yards across devices.
• Provide share links you explicitly create.
• Apply your plan, Pro access and AI-unit allowance.
• Respond to support requests you send us.
• Understand how the website and app are used, in aggregate.
• Maintain and protect the service.

Legal basis

We process account and project data to perform our contract with you (providing Sawplan). We process security logs, bot-protection checks on the forms listed above and cookies necessary for authentication based on our legitimate interest in running a secure service. Where consent is required for non-essential cookies, we will ask before setting them.

Retention

We keep your account and projects until you delete them or close your account. Server logs are retained for a limited period appropriate for security and troubleshooting, then rotated or deleted.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, or to object to certain processing. Email hello@sawplan.work to exercise these rights; account deletion is described in our Data deletion instructions. You may also lodge a complaint with your local data protection authority.

International transfers

If you access Sawplan from outside the country where our servers are hosted, your data may be processed in that location. We take reasonable steps to protect it in line with this policy.

Children

Sawplan is not directed at children under 16. We do not knowingly collect data from children.

Changes

We may update this policy when the service changes. The date at the top will change when we do. Continued use after an update means you accept the revised policy.

See also our Cookies notice and Terms of use.