1. Data Controller

LoadPlan, located in Vilnius, Lithuania, is the data controller responsible for your personal data. Contact: hello@loadplan.eu

2. Data We Collect

We collect the following categories of data:

Account data: email address, name, company name (when you register)
Usage data: load plans you create, cargo configurations, vehicle selections
Technical data: IP address, browser type, device type, operating system
Payment data: processed securely by Stripe — we do not store card numbers
Communication data: emails and support requests you send us

3. How We Use Your Data

We use your data to:

Provide and maintain the Service
Process your subscription payments
Send essential service notifications (account, billing, security)
Improve the Service based on usage patterns
Respond to your support requests
Comply with legal obligations

We do not sell your personal data to third parties. We do not send marketing emails unless you explicitly opt in.

4. Legal Basis (GDPR)

We process your data based on:

Contract performance: to provide the Service you subscribed to
Legitimate interest: to improve the Service and prevent fraud
Legal obligation: to comply with tax and accounting requirements
Consent: for optional marketing communications (you can withdraw anytime)

5. Data Sharing

We share data only with:

Stripe: payment processing (PCI DSS compliant)
Supabase: database and authentication hosting (EU region)
Vercel: web application hosting

All service providers are bound by data processing agreements and GDPR compliance.

6. Data Retention

We retain your account data for as long as your account is active. After account deletion, we remove personal data within 30 days, except where retention is required by law (e.g., billing records retained for 10 years per Lithuanian tax law). Load plans and cargo data are deleted upon account deletion.

7. Your Rights

Under GDPR, you have the right to:

Access your personal data
Correct inaccurate data
Delete your data ("right to be forgotten")
Export your data in a portable format
Restrict or object to processing
Withdraw consent at any time
Lodge a complaint with the Lithuanian Data Protection Authority (VDAI)

To exercise your rights, email hello@loadplan.eu. We will respond within 30 days.

8. Cookies

We use essential cookies required for the Service to function (authentication, session management). We do not use advertising or tracking cookies. Analytics, if implemented, will use privacy-respecting tools that do not track individual users.

9. Security

We protect your data using industry-standard measures including SSL/TLS encryption in transit, encrypted storage at rest, access controls, and regular security reviews. No system is 100% secure — if you discover a vulnerability, please report it to support@loadplan.eu.

10. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated via email. The latest version is always available at this page.

11. Contact

For privacy-related questions or requests:
hello@loadplan.eu
LoadPlan, Vilnius, Lithuania