Legal

Privacy policy

Last updated: [date]

Template for legal review. This text is a starting point and must be reviewed by a lawyer before publication. Fields in brackets must be filled in.

This policy explains how Croqui PRO, operated by [company name], [registration number], [address] (“we”), handles personal data, in line with applicable data-protection laws such as the GDPR (EU), the LGPD (Brazil) and similar regulations.

1. What stays on your device

Photos, sketches, measurements, text and any other content you create in the app are stored only in your browser's local storage (IndexedDB). They are not sent to our servers. If you clear your browser data or change devices, this content may be lost; export anything you need to keep.

To move to another phone, the app creates a backup file (.croqui) with the photo, lines and dimensions; you choose where to save it (e.g. Google Drive, WhatsApp, e-mail). We never receive it.

2. Data we process

Account: e-mail address, used for sign-in by one-time code and for account messages.

Subscription: Stripe customer and subscription identifiers, plan, status and validity dates. We never receive or store card numbers.

Security: minimal technical records (IP address, date and time, sign-in attempts) to prevent fraud and abuse, kept for [period].

Usage: the number of sketches you have created, used only to apply the free-plan limit — never the photos or their content.

3. Purposes and legal bases

Providing the service and managing the subscription — performance of a contract. Preventing fraud and keeping the service secure — legitimate interest. Meeting tax and legal obligations — legal obligation.

4. Sharing

We only share data with processors needed for the service: Stripe (payments), our hosting and database provider and our e-mail provider. They may store data in other countries under appropriate safeguards. We do not sell personal data.

5. Cookies

We use a single essential session cookie to keep you signed in. We use no advertising cookies and no third-party tracking.

6. Retention

We keep account data while the account is active and, after it is closed, for the period required by legal and tax obligations, [period].

7. Your rights

You may request access, correction, deletion, portability and restriction of your data, object to processing and withdraw consent, as provided by the law that applies to you, by writing to [contact-email].

8. Security and contact

We use encrypted connections (HTTPS), short-lived one-time sign-in codes, protected sessions and restricted database access. Data protection contact: [name] — [contact-email].