Who we are
Plandia.ai is a service operated by Jerry Cronin ("we", "us", "our"), providing project management software for land use planning firms. Jerry Cronin is the data controller for personal data processed through this service. This page explains what data we collect, the legal basis on which we process it, and how we use cookies.
What we collect
- Account data: name, email, phone, and your firm membership when you sign up or are invited to a workspace.
- Workspace content: the projects, hearings, tasks, files, and notes you and your teammates create.
- Operational data: minimal logs needed to run the service, prevent abuse, and debug errors (including IP address, device/browser identifiers, and timestamps).
- Billing data: collected and stored by our payment processor Paddle (see "Sharing" below). We receive limited data such as subscription status, plan, and last four digits of the card.
Legal basis for processing (GDPR / UK GDPR)
- Performance of a contract — to provide the workspace, process your subscription, and deliver the features you sign up for.
- Legitimate interests — to secure the service, prevent fraud and abuse, debug errors, and improve the product.
- Consent — for optional analytics cookies and marketing communications, where applicable.
- Legal obligation — to comply with tax, accounting, and other applicable laws.
Cookies and local storage
We use cookies and similar browser storage in three categories:
- Strictly necessary — sign-in session, authentication tokens, and the workspace you last selected. Without these the app cannot function.
- Functional — UI preferences such as sidebar collapsed state.
- Analytics (when enabled) — aggregate product usage so we can improve features. We do not use advertising or cross-site tracking cookies.
You can clear cookies and local storage at any time from your browser. Doing so will sign you out and reset preferences.
How we use your data
- To run the workspace, store your projects, and deliver the features you use.
- To send transactional email such as password resets, invitations, and notifications you opt into.
- To process subscription payments and issue invoices via Paddle.
- To respond to support requests and to comply with legal obligations.
Sharing
We do not sell personal data. We share data only with service providers we use to run the platform, under contracts that require them to protect your information:
- Paddle.com Market Limited — our Merchant of Record and payment processor. Paddle handles all checkout, billing, payment, sales tax/VAT, invoicing, refunds, and chargebacks for purchases of Plandia.ai. When you buy a subscription, Paddle is the seller of record and processes your payment data directly. See Paddle's privacy policy.
- Hosting and database providers — to host the application and store your workspace data.
- Email delivery providers — to send transactional and notification email.
- Authorities — where required by law.
Data retention
- Account and workspace data: retained while your account is active. After account deletion, data is deleted or anonymised within 30 days, except where we are required to retain it for legal, tax, or accounting purposes (typically up to 7 years for billing records held by Paddle and us).
- Operational logs: retained for up to 90 days for security and debugging, then deleted.
- Backups: rolling backups are retained for up to 30 days.
Security
We use appropriate technical and organisational measures to protect your data, including encryption of data in transit (TLS) and at rest, role-based access controls, row-level security in the database, hashed credentials, audit logging, and least- privilege access for staff. No system is perfectly secure, but we work to keep your data safe and notify affected users of material incidents as required by law.
International transfers
Your data may be processed in countries other than your own, including the United States. Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
Your rights
- You can update your profile and notification preferences in Settings.
- EU/UK users have rights under GDPR including access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to lodge a complaint with a supervisory authority. We respond within one month.
- California users have rights under CCPA/CPRA including the right to know, delete, correct, and opt out of sale/sharing (we do not sell or share personal data for cross-context behavioural advertising).
- To exercise any of these rights, contact us via the in-app Support page.
Contact
Plandia.ai is operated by Jerry Cronin. For privacy questions or data requests, reach us through the in-app Support page.