Privacy policy

Who is responsible for your data

The controller of your personal data is CODEUP spółka z ograniczoną odpowiedzialnością, ul. Żywiecka 149, 43-300 Bielsko-Biała, Poland, tax ID (NIP) 9372738043, KRS 0000923171 (“we”).

For anything about your data, write to kontakt@solvecord.com. We have not appointed a data protection officer, so we answer directly.

Visiting this site

This site sets no cookies, stores nothing in your browser and loads no scripts, fonts or analytics from other companies.

Like any server, ours sees your IP address and browser type, because it cannot send you the page without them. We keep technical logs (IP address, time, the address of the page visited and browser type) for up to 30 days, for security and troubleshooting. The same applies to the app. Legal basis: our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR).

Reserving Home

If you reserve Home, we keep your email address, the language of the page, the plan and your consent. We use them only to write to you when sales start. The form sends them straight to our own server, with no third-party service in between.

Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with the link in the email or by writing to us. Withdrawing does not undo what we did before.

After you sign up we send an email with a link to confirm. If you do not confirm within 7 days, we delete the address.

A confirmed address is deleted when you use the delete link in any of our emails, 30 days after Home goes on sale, or at the latest 365 days after you signed up, whichever comes first. The email you get after confirming gives the exact date.

So that nobody can flood someone else’s inbox, we keep the sender’s IP address for one hour, stored as a hash, never the address itself. Legal basis: keeping the service secure (Art. 6(1)(f) GDPR).

Planning without an account

The app works without an account too. Your plan, drawings and settings then stay in your browser’s storage, on your computer. We cannot see them or reach them. You delete them by clearing the site’s data in your browser.

Your account

You sign in with a link we email to you. The link works for 10 minutes and only once. If signing in with Google is offered and you use it, Google passes us your email address, name and profile picture.

We keep your email address, your name (if you give it or Google passes it on), your Google profile picture (if you sign in with Google), your chosen language and when you joined. Each sign-in stores a session with your IP address and browser type. A session lasts 30 days from when it was last used. We delete its record when you sign out or delete your account, and at the latest 30 days after it expires.

To make abuse harder, we count sign-in attempts and emails sent per IP address and per inbox. Those counters are deleted after an hour.

Legal basis: the contract to use the service (Art. 6(1)(b) GDPR), and for the counters, keeping the service secure (Art. 6(1)(f) GDPR). We keep account data for as long as you have the account.

Projects, drawings and sharing

A project saved online is the documents of your house plan, the floor drawings you upload to it, and its history: who saved what, and when. A plan can show the layout of your house, cameras and network, so we treat it as private.

Projects belong to a workspace. Its members see the other members’ names and email addresses. When you invite someone, you give us their email address. We send them an invitation that is valid for 7 days.

A share link shows the project to anyone who has it, read-only and without the workspace or any people. You can turn it off at any time. Links also stop working when the person who made them leaves the workspace.

We keep projects, drawings and history until you delete them, or delete the workspace or your account. We do not look through them. We open a project only when you ask us to, for example when you report a bug. Legal basis: the contract (Art. 6(1)(b) GDPR).

Payments

Home and Pro are sold by Paddle (Paddle.com Market Limited, or another Paddle company depending on where you buy from) as the merchant of record. You give your name, address, card details and invoice details directly to Paddle. Paddle handles them as a separate controller, under its own privacy policy: paddle.com/legal/privacy.

From Paddle we receive only what we need to turn the plan on: the customer and transaction IDs, the plan bought, the number of seats, its status and the billing period. We never see your card details.

Legal basis: the contract (Art. 6(1)(b) GDPR). We keep this for as long as the workspace or project it belongs to exists.

When you write to us

We use your address and your message to reply and sort out the matter. Legal basis: our legitimate interest in answering messages (Art. 6(1)(f) GDPR), and for a complaint also a legal obligation (Art. 6(1)(c) GDPR). We keep the correspondence while the matter could come back, at the longest until any claims are time-barred.

Who else gets the data

These process data on our behalf, under a data processing agreement:

Brevo (Sendinblue SAS, France, EU): sends all our emails, that is sign-in links, invitations and reservation emails. It sees the recipient’s address and the email’s content.

Hosting: a hosting provider we will name here, together with the country its servers are in, before the service opens.

As separate controllers: Paddle, when you buy a plan (see “Payments”), and Google, if you sign in with Google.

Accountants and lawyers who help us, and authorities and courts where the law requires it, may also receive data.

We never sell data or use it for advertising. We make no decisions based solely on automated processing, and we do no profiling.

Data outside the European Economic Area

Brevo is in the European Union. We will give the country our servers are in together with the hosting provider. Paddle.com Market Limited is based in the United Kingdom, which the European Commission has found to protect data adequately. Google may also process data in the USA, under standard contractual clauses or the EU‑US Data Privacy Framework.

Cookies and browser storage

This site uses no cookies and no browser storage.

The app stores in your browser only what it cannot work without: projects kept without an account, your chosen language and the workspace you last picked. Once you sign in, it sets one session cookie that keeps you signed in. There are no analytics or advertising cookies, so we do not ask for consent to them.

Only on the payment page does the app load Paddle’s script, which opens the checkout. Paddle may then use its own cookies, as its privacy policy describes.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing and to take it with you. You can also object to processing we base on our legitimate interest, and withdraw consent at any time.

The quickest way is to do it yourself, in your account settings. “Download everything we keep about you” gives you a file with your profile, sessions, memberships and your Home reservation. It holds the content of projects in workspaces where you are the only member. Drawings are listed in it by name and size; you download the files themselves from the project.

“Delete my account” deletes the account, the workspaces where you are the only member, your share links and a Home reservation made with the same address. If you are the only owner of a workspace that has other people in it, or a workspace has a subscription that renews, the app first asks you to make someone else an owner or cancel the subscription.

For anything else, including erasing data Paddle holds, write to kontakt@solvecord.com. We reply within one month.

You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00‑193 Warsaw, uodo.gov.pl), or to the authority where you live.

Security

Connections are encrypted (HTTPS). Sign-in links work for 10 minutes and only once. Share links are random and you can turn them off at any time. The session cookie cannot be read by scripts on the page. Only we have access to the database.

Changes to this policy

When we change this policy, we change the date at the top of the page. We will email people with an account about important changes before they apply.