Privacy Policy

Lift Planner Pro is operated by DarkSpace Software & Security, United Kingdom. We are the "data controller" for the information you provide through the Service.

Contact: m.blenkinsop@yahoo.co.uk

We only collect the data needed to run the Service:

• Account data: name, email address, hashed password (if you register directly), or OAuth identifiers if you sign in with a third-party provider.
• Project data: lift plans, drawings, RAMS documents, crane configurations and any files you upload. Stored only against your account.
• Billing data: processed by Stripe; we never see your full card details. We retain transaction IDs and subscription state.
• Technical data: IP address, browser type, device type, pages visited, error logs. Used for security, abuse prevention and service reliability.
• Contact-form data: any message you send us via /contact or email.

• Provide and operate the Service (legal basis: contract).
• Authenticate and secure your account (legal basis: legitimate interest / contract).
• Process payments and manage subscriptions (legal basis: contract).
• Respond to support requests (legal basis: legitimate interest).
• Comply with legal obligations (legal basis: legal obligation).
• Send essential service emails (password resets, billing receipts).

We do not sell your personal data. We do not use your project data to train third-party AI models.

We use strictly necessary cookies for authentication (session tokens) and local storage for UI preferences (theme, panel layout, recently used tools). Analytics cookies (Google Analytics) are only loaded if you consent via the cookie banner where one is displayed.

We share data only with:

• Stripe, Inc. — payment processing.
• Render.com / hosting provider — to run the application servers and databases.
• Authentication providers — only if you choose to sign in via Google/Microsoft.
• Law enforcement — where legally required.

Project and account data are retained while your account is active. If you delete your account, your personal data is erased within 30 days, except where we are required to keep financial records (typically 6 years) for tax/accounting purposes.

You have the right to: access your data, correct it, delete it, restrict processing, object to processing, data portability, and withdraw consent at any time. To exercise any of these rights email m.blenkinsop@yahoo.co.uk. You may also complain to the UK Information Commissioner's Office (ico.org.uk).

The Service is intended for professional use and is not directed at children under 16. We do not knowingly collect data from children.

Data is transmitted over TLS/HTTPS. Passwords are hashed with bcrypt. Database access is restricted to authorised personnel. Regular backups are encrypted at rest. Despite these measures no system is 100% secure; report suspected issues to the contact above.

Our hosting and payment providers may process data outside the UK (EU, US). Where they do, we rely on Standard Contractual Clauses or equivalent safeguards to ensure an adequate level of protection.

We may update this policy from time to time. Material changes will be announced via the app or by email. The "Last updated" date above reflects the most recent version.