Privacy policy

Planlot ApS, CVR 44171945, Roshagevej 21, 2720 Vanløse, is the data controller for personal data collected through this website and for account data in the Planlot service.

Where a customer uses Planlot to manage their own facilities, that customer is the controller for the data they enter and Planlot acts as their processor.

• Account data: name, email address, phone number, and the business and locations you are given access to.
• Content you enter: locations, units, tasks, reviews, comments, expenses and any files you upload.
• Contact form submissions: the name, email, company and message you send us, used only to answer you. Your IP address is held in server memory for up to an hour to limit abuse of the form, and is never written to disk.
• Technical data: a correlation identifier per request, plus error reports when something goes wrong. Error reports carry identifiers, not the content of your screens.

Account and content data are processed to perform our contract with you. Contact form data is processed on the basis of legitimate interest in answering enquiries. Error reporting is processed on the basis of legitimate interest in keeping the service working.

These sub-processors handle data on our behalf:

• DigitalOcean: hosting and file storage, Amsterdam (EU).
• Microsoft: outbound email via Microsoft 365 (Graph).
• Mapbox: map tiles. Map views send location coordinates to Mapbox in order to fetch the imagery.
• Simply.com: domain and DNS.
• Google (Firebase Cloud Messaging): delivers push notifications to the mobile apps. It receives the notification text and a device token.
• Apple (Apple Push Notification service): delivers push notifications to iPhone and iPad. It receives the notification text and a device token.

Error tracking runs on our own infrastructure in the EU and is not a third-party service. We use no analytics, advertising or tracking services.

Application data and uploaded files are stored in the European Union (Amsterdam). Email is processed through Microsoft 365 in the European Union/EFTA. Mapbox, Google and Apple are US companies; transfers to them rely on the EU-US Data Privacy Framework or the EU standard contractual clauses.

Account and content data are kept for as long as the account is active. Deleted records are retained in a recoverable state rather than erased immediately, so that an accidental deletion can be undone. Error reports are kept for 90 days.

When you delete your account, it is closed immediately and anonymised 30 days later: your name, email address and phone number are replaced, your profile picture, notification settings and device registrations are deleted, and your name is removed from activity history. Signing in during those 30 days cancels the deletion. Work you did for a business (tasks, reviews, comments) stays with that business, attributed to a deleted user.

Contact form messages are kept for 12 months.

Under the GDPR you may request access to your personal data, correction of it, erasure, restriction of processing, portability, and you may object to processing. Write to support@planlot.com. We answer within one month.

You can delete your own account at any time in the app, under Settings → My account (see how to delete your account). If your data was entered by a business you work for, that business is the controller, and we will forward your request to them.

You may also complain to Datatilsynet, the Danish Data Protection Agency, at datatilsynet.dk.

Neither this website nor the app uses analytics, advertising or tracking cookies. See the cookie policy for exactly what is stored in your browser.