Privacy Policy
Controller and scope
HAAVIK APP DEVELOPMENT, owner Sander Haavik, Norway, is responsible for the commercial account information described here. Contact support for privacy requests.
Engineering data stays local
We do not receive your CSV/XLSX content, samples, procedure limits, project/weld names, charts, PDF reports, audit JSON or engineering notes. Browser-local storage contains your work and settings; it is not a cloud backup. Do not send these records by support email.
Commercial information
We process your email, account/license identifiers, payment references, credit ledger, subscription and seat state, random installation UUID and authorization timestamps to deliver purchased access. We use a random installation identifier, not a hardware serial or IP address as license identity.
Purposes and legal bases
Account, licensing and payment processing are necessary to perform the service contract. Records required by law are retained to meet legal obligations. Proportionate security controls protect the service and customers under legitimate interests. We do not sell personal data or use engineering data for advertising.
Service providers
Lemon Squeezy processes checkout and payment information under its own terms and privacy notice. Transactional email and hosting providers process only the information needed to deliver messages and infrastructure. Ordinary infrastructure logs may include connection metadata such as IP addresses; this is not a PWHT data upload.
Storage and retention
Sign-in links expire after 15 minutes and sessions after 24 hours. Account and commercial records are retained while needed to provide the service, resolve disputes, prevent abuse or meet legal recordkeeping duties. On an access/deletion request we explain any information that must be retained and why. No fixed legal retention period is invented here.
Your choices and rights
You can request access, correction, deletion, restriction or portability, and object where applicable, by contacting support. You may complain to the Norwegian Data Protection Authority (Datatilsynet). Necessary browser storage supports sign-in, installation identity and local work; this release includes no advertising trackers or analytics cookies.