Privacy Policy

PlanFinder – Privacy Policy (GDPR)
Applies to: planfinder.xyz website and the PlanFinder Revit plugin (including cloud-based Generate and licensing services).

1. Controller

Controller (data controller) under the GDPR:
PlanFinder
Address: Dr. Claas Noorduijnstraat 9A-28, 6522 AS Nijmegen, The Netherlands
Contact: contact@planfinder.xyz

2. Data protection contact

For privacy-related requests (access, deletion, questions), contact: contact@planfinder.xyz.
If you need an individual contact person for procurement, you may also use: jeroen@planfinder.xyz.

3. Overview of processing activities

Website (planfinder.xyz)

• Data processed: Server logs (e.g., IP address, user agent, time of request).

• Purpose: Website delivery, security, abuse prevention.

• Legal basis: Art. 6(1)(f) GDPR (legitimate interests).

• Storage / retention: Retention configured in the hosting environment; kept only as long as necessary for security and operations.

Website forms

• Data processed: The details you enter in our contact, project enquiry and cancellation forms (such as name, email address, company and message). The contact and project enquiry forms also send the website that referred you, the page you first landed on (including any campaign tags in its address) and the pages you sent the form from. Your browser keeps this in session storage, which is cleared when you close the tab, and only sends it when you submit a form.

• Purpose: Responding to your request, preparing proposals, and understanding which pages and channels lead to enquiries.

• Legal basis: Art. 6(1)(b) GDPR (contract, or steps you ask us to take before entering into one) and Art. 6(1)(f) GDPR (legitimate interests).

• Storage / retention: Submissions reach us by email, sent through Resend or, if that fails, FormSubmit, and are kept as long as needed to handle your request and any business relationship that follows.

Website statistics

• Data processed: Page views measured by Cloudflare Web Analytics, and counts of actions on the site, such as downloads, clicks on booking and checkout links, and forms sent. Each action is stored with the page, a short label (for example the file name) and the country derived from your IP address. We set no cookies for this, do not store your IP address and do not record what you type into forms.

• Purpose: Understanding which pages lead to enquiries, downloads and purchases, and noticing when a form stops working.

• Legal basis: Art. 6(1)(f) GDPR (legitimate interests).

• Storage / retention: Processed by Cloudflare as our hosting provider. Action counts are kept for 3 months.

Generate (cloud-based)

• Data processed: Geometry-only payload converted into PlanFinder’s internal plain geometry format (boundary polygon + façade geometry + entrance geometry), plus user-selected generation preferences such as preferred room counts. No BIM parameters/metadata transmitted.

• Purpose: Compute and return layout alternatives based on the provided geometry and preferences.

• Legal basis: Art. 6(1)(b) GDPR (contract).

• Storage / retention: No persistent storage of payload. Processed transiently in AWS Lambda; technical logs may exist (see section 6).

Licensing

• Data processed: Email address, company name, machine identifier.

• Purpose: License issuance, validation, renewals, fraud prevention.

• Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(f) GDPR (legitimate interests).

• Storage / retention: Stored in AWS RDS. Retention: for the term of the license + a limited period for support/accounting, unless deletion is required earlier.

Payments

• Data processed: Payment and invoicing data processed by Stripe (e.g., billing details, payment method tokens; PlanFinder may receive limited billing metadata).

• Purpose: Process payments and manage subscriptions.

• Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR (legal obligations).

• Storage / retention: Stripe retention per their policies; PlanFinder retains invoices per legal retention requirements.

4. Cloud processing (AWS)

The Generate service and licensing backend run on Amazon Web Services (AWS) in the EU region eu-central-1 (Frankfurt).
For Generate, the Revit plugin extracts the required geometry, converts it into PlanFinder’s internal plain geometry format, and transmits it together with selected generation preferences (e.g., preferred room counts).
No BIM parameters, metadata, or other non-geometric model information are transmitted as part of the Generate payload.

5. Sub-processors

• Amazon Web Services (AWS) – compute (Lambda), database hosting (RDS), logging (CloudWatch), region: eu-central-1 (Frankfurt).

• Stripe – payment processing and subscription management.

• Resend – delivery of website form submissions by email, region: EU (Ireland).

• FormSubmit – delivery of website form submissions by email, as a fallback.

6. Logging and retention

Operational logs are used for stability, troubleshooting, and security. AWS CloudWatch may store technical request logs.
Log retention is configured in AWS and can be adjusted per environment. Where feasible, application logging avoids storing request payload contents.

7. International transfers

AWS services are configured for EU-region processing (Frankfurt). Stripe is an international provider; processing may involve transfers outside the EU/EEA. Where required, such transfers rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) and additional measures provided by Stripe.

8. Data subject rights

You have the right to:

• Access (Art. 15 GDPR)

• Rectification (Art. 16 GDPR)

• Erasure (Art. 17 GDPR)

• Restriction (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Object (Art. 21 GDPR)

• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

9. Contact and requests

Requests can be sent to contact@planfinder.xyz.