Privacy Policy
Last updated: 18 October 2026
1. Who we are
This policy explains how ORCASOFT CONSULTANCY SERVICES (OPC) PRIVATE LIMITED, trading as Planimble, with its registered office at [Registered office address], Mumbai, Maharashtra, India ("we", "us"), handles personal data when you visit planimble.com or use the Planimble app at app.planimble.com.
- Controller. We are the controller for the personal data of account holders, team members, billing contacts and website visitors.
- Processor for sketch content. Sketches can contain information about other people's property, such as addresses, policy or claim numbers and notes. For that content our customer (the inspector, firm or carrier) is the controller, and we process it on their instructions as their processor or service provider. Business customers can ask for a data processing addendum (DPA).
- Privacy contact. support@planimble.com
2. What we collect, why, and our legal basis
| Data | Why we use it | Legal basis |
|---|---|---|
| Account: email, display name, password (stored only as a salted hash), Google account ID if you sign in with Google | Create and secure your account, confirm your email, reset passwords | Contract |
| Sketch content: drawings, dimensions, area classes, stamps, cost estimates, property address, policy or inspection ID, notes, review status | Store and sync your sketches, team review, exports | Contract; for third-party property data, our customer's instructions |
| Team data: names, email addresses and roles of people you invite | Send invitations, apply permissions, manage seats | Contract; legitimate interest in running team workspaces |
| Billing data: Paddle customer, subscription and transaction IDs, plan and seat count | Turn on paid plans, manage seats, keep accounting records | Contract; legal obligation |
| API data: hashed API keys for B2B customers | Authenticate server-to-server requests | Contract |
| Technical data: IP address, browser type, request times, sign-in attempt counts, error logs | Prevent abuse and brute-force attacks, enforce sign-up limits, fix problems | Legitimate interest in security and fraud prevention |
| Monthly usage counts | Apply the Free plan's monthly limit | Contract |
We never see your card details. Payment details go directly to Paddle.
3. Cookies and storage on your device
- One essential cookie. planimble_session keeps you signed in. It is HttpOnly and secure, and expires after 30 days without use.
- Device storage for offline work. The app keeps your sketch drafts in your browser (IndexedDB and local storage) and caches its own files so it can open without a connection. Signing out on a shared device is up to you.
- No tracking. We use no analytics, advertising or cross-site tracking cookies.
4. Who we share data with
We do not sell or rent personal data. We share only what each provider needs:
- Paddle (Paddle.com Market Limited and its affiliates), our Merchant of Record, which handles checkout, payments, tax, invoices, refunds and fraud checks as an independent controller. See Paddle's privacy notice.
- Google LLC, if you choose Google sign-in.
- Font and style networks: Google Fonts (Google LLC) and the Tailwind CSS CDN (Tailwind Labs Inc.), which your browser loads files from and which therefore receive your IP address.
- Postmark (ActiveCampaign, LLC), which sends confirmation, password reset and team invitation emails.
- Our cloud hosting provider, which runs our servers and stores data under access controls.
- Professional advisers and authorities: lawyers, accountants and auditors under confidentiality, and courts or authorities when the law requires it.
5. International transfers
We are based in India and our providers operate in the United States, the United Kingdom and the EU. When personal data from the EEA, UK or Switzerland is transferred to countries without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with encryption in transit and access controls.
6. How long we keep data
- Account and sketches: while your account is open. Sketches on the Free plan are not deleted automatically, because they are often kept as inspection records.
- After you ask us to delete your account: we delete it and its sketches within 30 days of confirming the request. Backup copies expire within a further 90 days.
- Security and error logs: up to 30 days.
- Billing records: as long as tax and accounting laws require.
7. Your rights
Depending on where you live, including under the EU and UK GDPR and India's Digital Personal Data Protection Act, you can:
- get a copy of your personal data, and export your sketches from the app at any time;
- correct inaccurate data;
- have your data deleted;
- restrict or object to processing based on legitimate interests;
- withdraw consent where we rely on it;
- complain to your data protection authority, for example an EU authority, the UK ICO or the Data Protection Board of India.
US residents (including California, Virginia, Colorado, Connecticut and Texas) have the right to know, access, delete and correct their personal information and not to be discriminated against for using these rights. We do not sell or share personal information for cross-context behavioral advertising.
Email support@planimble.com from your account's email address to use any of these rights. We reply within 30 days.
8. Security
We protect data with HTTPS encryption in transit, salted password hashing, hashed API keys, secure HttpOnly session cookies, protection against cross-site request forgery, sign-in rate limits and lockouts, and separation between customer accounts. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.
9. Children
Planimble is a professional tool for adults. We do not knowingly collect data from anyone under 18.
10. Changes and contact
We may update this policy. For material changes we will update the date above and tell account holders by email or in the app.
ORCASOFT CONSULTANCY SERVICES (OPC) PRIVATE LIMITED, trading as Planimble
Registered office: [Registered office address], Mumbai, Maharashtra, India
Email: support@planimble.com