Who is responsible
The person responsible for processing your data is Pedro Augusto Ribeiro Mangoni, who runs WoodPath. To talk about your data, get in touch through the Support page.
What stays in your browser
The editor calculates the parts, the nesting and the files on your device. Without a login, the project is saved in your browser, in IndexedDB. It only goes to your account if you save the project to the cloud.
Your cookie choice also stays in your browser. The items are listed in the Cookie policy.
Data we process
| Data | What it is | What we use it for |
|---|---|---|
| Account | Email, a password stored only as a hash, and the identifier of your Google sign-in, if you use it. | Signing in, confirming your email and recovering access. |
| Cloud projects | Parameters, measures and files of the projects you save to your account. | Resuming a project on another device and exporting it. |
| Payments | Subscription plan and status, file purchases and billing identifiers. | Unlocking your plan and purchased files. The card number stays with Stripe; WoodPath does not store it. |
| Aggregate usage | Counts of actions in the editor, such as opening the editor or downloading a file. They include no geometry and no project name. | Understanding usage and improving the product. WoodPath only sends these counts with your choice under Usage measurement. |
| Ads | Data processed by Google AdSense. | Showing ads on the Free plan, only with your choice under Ads. Paid plans load no ads. |
Legal bases
We process data to perform the contract with you (account, projects and payments), to keep the service secure and, where needed, on the basis of your consent, such as for usage measurement and ads. You can withdraw your consent at any time in Cookie preferences.
Who we share it with
We share data only with the providers below, to the extent needed for each purpose.
- Cloudflare: hosting, anti-bot verification (Turnstile) and file storage (R2).
- Managed PostgreSQL provider: the account database.
- Stripe: payment processing.
- Resend: sending account emails.
- Google: optional sign-in with Google and, with your choice, AdSense on the Free plan.
With your choice under Ads, Google acts as an independent controller when it shows AdSense ads. See how Google uses data from partner sites and apps in the Google partner-site policy.
Some of these providers process data outside Brazil, with contractual safeguards, under article 33 of the LGPD.
How long we keep it
We keep account data and saved projects for as long as the account exists. After deletion we erase this data, except payment and tax records that the law requires us to keep for longer.
Aggregate usage counts, when sent with your choice, are kept for up to 13 months.
Your rights
The LGPD (article 18) guarantees you the right to:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- ask for anonymisation, blocking or deletion of unnecessary data or data processed in breach of the law;
- portability: export your projects. In the editor, the project selector exports each project as .json;
- know which providers we share your data with;
- withdraw your consent at any time;
- object to processing that does not rely on your consent, if it breaches the law (article 18, §2);
- lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) (article 18, §1).
To exercise these rights, including deleting your account, get in touch through the Support page.
Changes to this policy
When this policy changes, we publish the new version on this page and update the date at the top.