Privacy Notice

Who controls your information

Paper&Plan is the seller and data controller for personal information processed to operate this shop. Paddle separately processes purchase and payment information as Merchant of Record under Paddle’s Privacy Policy.

Information and purposes

We process the planning goals and descriptions you submit and resulting designs to recommend or generate planners. These submissions can contain personal information you choose to include; do not submit passwords, payment card information, or sensitive information about yourself or others.

Hosting and diagnostics may process IP addresses, browser and device information, request details, usage events, and error reports to deliver the shop, diagnose problems, and prevent abuse. Support inquiries may contain your name, email address, order reference, and messages, used to resolve your request. Purchase information shared by Paddle is used for order fulfilment and purchase support when those features are available. The current shop does not provide shopper accounts or collect account passwords.

Legal bases

We rely on performance of a contract, including steps you request before purchase, to provide planner services and purchase support; legitimate interests to operate, secure, and diagnose the service; legal obligations for required records; and consent where required for optional processing. We do not use planner submissions for marketing.

Who receives information

Service providers including Lovable’s hosting and AI Gateway, and the AI providers processing requests through that gateway, receive information needed to operate the service. Paddle receives purchase information for sales, payment processing, subscription management where applicable, tax compliance, and invoicing. Professional advisers may receive information for legal or accounting requirements, and authorities may receive it where legally required. We do not sell your personal information.

Retention and security

The current planner page holds generated previews in your browser’s page state rather than a saved shopper account. Providers may retain request and diagnostic information under their own applicable terms. We keep support and order records only as long as needed for fulfilment, support, security, and legal obligations, then delete or anonymise them when no longer needed. We use appropriate technical and organisational safeguards, including encryption in transit, restricted access, and server-side handling of service credentials. No system can guarantee absolute security.

Your rights and international processing

Depending on your location, you may request access, correction, deletion, restriction, or portability of your information, object to certain processing, withdraw consent, and complain to your local data-protection authority. Providers may process information outside your country; applicable transfer safeguards are required where local law mandates them. For UK or EEA information, these may include adequacy decisions or standard contractual clauses, and applicable rights requests are normally answered within one month.

For purchase-related requests, use your receipt’s support link or paddle.net. For information submitted directly to the shop, the seller’s direct privacy contact will be provided before live sales; Paddle’s support channel concerns purchases and is not a substitute for a direct seller privacy contact.

Cookies and browser storage

The shop does not currently set marketing or analytics cookies in its storefront code. Hosting, checkout, and any sign-in services may use essential cookies or browser storage for security and operation. Your browser settings let you block or delete cookies, which may affect checkout. Any future optional analytics or marketing cookies will require the applicable notice and consent controls.