Privacy Policy

Last Updated: December 28, 2024**

1. Introduction

Welcome to CalculatorDesk. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our calculator services.

This policy applies to all users of CalculatorDesk, regardless of your subscription tier (Free, Plus, or Pro). By using our Service (as defined in our Terms of Service), you agree to the collection and use of information in accordance with this policy.

2. Data Controller Information

For the purposes of GDPR, the data controller responsible for your personal data is:

CalculatorDesk

• Email: legal@calculatordesk.com
• Data Protection Officer: privacy@calculatordesk.com

Note: Please replace with your actual contact details and registered business address before going live.

3. Data We Collect

3.1 Account Information

When you create an account, we collect the following information:

• Email Address: Used for account identification, login authentication, service communications, and subscription management
• Password: Stored as a cryptographic hash (never in plain text) for account security
• Name (optional): For personalization of your experience
• Subscription Tier: To determine your feature access level (Free, Plus, or Pro)
• Account Creation Date: To track your membership duration

3.2 Calculation Data

We store your calculator inputs and results according to your subscription tier to provide calculation history features:

Free Tier:

• Last 10 calculations stored locally in your browser
• Automatically deleted after 30 days
• We do not have access to this data

Plus Tier:

• Up to 6 months of cloud storage in our database
• Includes calculation inputs, outputs, and timestamps
• Synchronized across your devices

Pro Tier:

• Unlimited cloud storage
• Full calculation history for account lifetime
• Additional metadata (notes, tags, favorites) if you choose to add them

3.3 Usage Analytics Data

To improve our Service, we collect anonymized usage analytics:

• Page Views: Which pages you visit and when
• Calculator Usage: Which calculators you use (but not the values you enter)
• Session Duration: How long you use our Service
• Device Information: Browser type, device type (mobile/desktop), operating system
• Geographic Location: Country/region (derived from IP address)
• Event Tracking: Button clicks, navigation patterns, feature usage

This data is collected via Google Analytics 4 and is anonymized before storage. See Section 8 (Cookies and Tracking) for more details.

3.4 Payment Information

When payment processing becomes available for paid subscriptions, we will collect:

• Billing Information: Name, billing address, country
• Payment Details: Processed securely by our payment processor (we never store full credit card numbers)
• Transaction History: Subscription payments, refunds, and billing cycles

Note: Payment processing is not yet implemented. This section will be updated when payment services are available.

3.5 Technical Data

We automatically collect certain technical information when you use our Service:

• IP Address: Automatically logged by our servers for security and fraud prevention
• Session IDs: Randomly generated identifiers stored in your browser's local storage
• Access Logs: Timestamp and duration of your visits
• Error Logs: Technical errors to help us diagnose and fix issues

4. Legal Basis for Processing

Under GDPR Article 6, we process your personal data based on the following legal grounds:

4.1 Contract Performance (Article 6(1)(b))

Processing is necessary to perform our contract with you, including:

• Creating and managing your account
• Providing calculator tools and features
• Storing your calculation history (cloud storage tiers)
• Processing subscription payments (when implemented)
• Delivering customer support

4.2 Legitimate Interests (Article 6(1)(f))

We process certain data based on our legitimate business interests:

• Service Improvement: Analyzing usage patterns to improve calculator accuracy and user experience
• Security: Detecting and preventing fraud, abuse, and security threats
• Marketing: Sending service updates and feature announcements (you can opt-out anytime)
• Business Operations: Managing our business, including financial reporting and compliance

4.3 Consent (Article 6(1)(a))

For certain data processing activities, we rely on your explicit consent:

• Cookies: Non-essential cookies (analytics, marketing) via Cookiebot consent banner
• Marketing Emails: Promotional communications (separate from service emails)
• Optional Features: Beta features or surveys that collect additional data

You can withdraw consent at any time by contacting us or using the opt-out mechanisms provided.

4.4 Legal Obligations (Article 6(1)(c))

We process data to comply with legal requirements:

• Tax and accounting obligations
• Responding to lawful requests from authorities
• Enforcing our legal rights

5. How We Use Your Data

We use your personal data for the following purposes:

5.1 Service Provision

• Authenticate your login and maintain your session
• Display your calculation history and saved calculations
• Determine which calculator features you can access
• Synchronize data across your devices
• Generate PDF/CSV exports of your calculations (paid tiers)

5.2 Communication

• Send account verification and password reset emails
• Provide customer support responses
• Send important service updates (security alerts, terms changes)
• Send subscription notifications (renewal reminders, payment confirmations)
• Send optional promotional content (with your consent, opt-out available)

5.3 Service Improvement

• Analyze which calculators are most popular
• Identify and fix bugs or calculation errors
• Optimize website performance and loading times
• Develop new calculator features based on usage patterns
• A/B test new features to improve user experience

5.4 Security and Fraud Prevention

• Detect and prevent unauthorized access to accounts
• Identify suspicious activity or abuse of the Service
• Prevent fraudulent subscription signups or chargebacks
• Comply with legal and regulatory requirements

6. Data Storage and Retention

6.1 Storage Locations

Your data is stored in the following locations:

• Your Browser: Free tier calculation history (localStorage)
• Supabase Database: Account data and cloud calculation history (EU region)
• Vercel Edge Network: Website hosting and delivery

6.2 Retention Periods

We retain your data for the following periods:

Account Data: Retained until you delete your account, plus 90 days for backup/recovery purposes

Calculation History:

• Free Tier: 30 days (automatically deleted from browser)
• Plus Tier: 6 months from creation date
• Pro Tier: Indefinitely while account is active

Payment Records: 7 years for tax and accounting compliance (when payment processing is implemented)

Analytics Data: 26 months (Google Analytics 4 default retention period)

Access Logs: 90 days for security and debugging

6.3 Data After Account Deletion

When you delete your account, we will:

• Immediately disable access to your account and data
• Delete your personal information within 90 days (except where retention is legally required)
• Anonymize analytics data so it cannot be linked back to you
• Retain payment records for 7 years as required by tax law (when applicable)

7. Third-Party Services

We use the following third-party services to operate CalculatorDesk. Each service has access to certain data as described below:

Supabase (Database & Auth)

• Purpose: User authentication, account management, calculation history storage
• Data Shared: Email, password hash, account data, calculation history
• Privacy Policy: supabase.com/privacy

Google Analytics 4

• Purpose: Website analytics, usage statistics, performance monitoring
• Data Shared: Page views, events, device info, anonymized IP addresses
• Privacy Policy: policies.google.com/privacy

Cookiebot

• Purpose: Cookie consent management, GDPR compliance
• Data Shared: Consent choices, cookie preferences
• Privacy Policy: cookiebot.com/privacy-policy

Vercel (Hosting)

• Purpose: Website hosting, content delivery, performance optimization
• Data Shared: IP addresses, page requests, technical logs
• Privacy Policy: vercel.com/legal/privacy-policy

8. Cookies and Tracking

CalculatorDesk uses cookies and similar tracking technologies. For complete details, please see our Cookie Policy.

8.1 Cookie Categories

• Strictly Necessary: Required for authentication and security (cannot be disabled)
• Functional: Remember your preferences and settings
• Analytics: Google Analytics 4 for usage statistics (requires consent)
• Preference: Dark mode, language, Cookiebot consent choices

8.2 Managing Cookies

You can control cookies through:

• Cookiebot Banner: Manage consent preferences via the cookie banner
• Browser Settings: Block or delete cookies through your browser preferences
• Opt-Out Tools: Use Google Analytics Opt-out Browser Add-on

Note: Disabling certain cookies may limit the functionality of our Service.

9. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), EU/EEA residents have the following rights:

Right to Access (Article 15)

Request a copy of all personal data we hold about you, including details about how we process it.

Right to Rectification (Article 16)

Correct inaccurate or incomplete personal information in your account settings or by contacting us.

Right to Erasure (Article 17)

Request deletion of your personal data ("right to be forgotten") when there is no compelling reason for continued processing.

Right to Restriction of Processing (Article 18)

Request that we limit how we use your data in certain circumstances (e.g., while disputing accuracy).

Right to Data Portability (Article 20)

Receive your data in a structured, machine-readable format (CSV or JSON) and transfer it to another service.

Right to Object (Article 21)

Object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent (Article 7)

Withdraw consent for data processing that relies on your consent, such as marketing emails or analytics cookies.

Right to Lodge a Complaint (Article 77)

File a complaint with your local data protection authority if you believe we have violated GDPR.

9.1 Exercising Your Rights

To exercise any of these rights:

1. Email us at privacy@calculatordesk.com with your request
2. Provide proof of identity (to prevent unauthorized access)
3. Specify which right you wish to exercise

We will respond to verified requests within 30 days as required by GDPR. If we need additional time, we will inform you of the reason and extension period.

10. Data Security

We implement industry-standard security measures to protect your personal data:

10.1 Technical Measures

• Encryption: HTTPS/TLS for all data transmission, encryption at rest for database storage
• Password Security: bcrypt hashing with salt for password storage
• Access Controls: Role-based access control (RBAC) and authentication tokens
• Secure APIs: JWT authentication for API requests
• Regular Updates: Security patches applied to all systems

10.2 Organizational Measures

• Limited access to personal data on a need-to-know basis
• Regular security audits and vulnerability assessments
• Data processing agreements with third-party providers
• Incident response procedures for data breaches

10.3 Data Breach Notification

In the unlikely event of a data breach affecting your personal data, we will:

• Notify the relevant supervisory authority within 72 hours (as required by GDPR)
• Inform affected users without undue delay if the breach poses a high risk
• Provide details about the breach, its impact, and mitigation steps

11. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA):

11.1 Transfer Mechanisms

We ensure adequate protection for international transfers through:

• Standard Contractual Clauses (SCCs): EU-approved contracts with service providers
• Adequacy Decisions: Transfers to countries deemed adequate by the EU Commission
• Privacy Shield (where applicable): For certain US service providers

11.2 Specific Transfers

Google Analytics (USA): Protected by Google's data processing terms and IP anonymization

Vercel (Global CDN): Data processed in the nearest edge location, with EU data residency options

12. Children's Privacy

CalculatorDesk is not intended for use by children under the age of 16 without parental consent (as required by GDPR).

• We do not knowingly collect personal data from children under 16
• If you are under 16, please obtain parental consent before using our Service
• Parents can request deletion of their child's data by contacting us

If we become aware that we have collected personal data from a child under 16 without parental consent, we will delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

• Material Changes: We will notify you by email or prominent notice on our website at least 30 days before changes take effect
• Non-Material Changes: Updated "Last Updated" date and posted to this page
• Your Rights: Continued use of our Service after changes constitutes acceptance; you may delete your account if you disagree

We encourage you to review this policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14.1 CalculatorDesk

• General Inquiries: legal@calculatordesk.com
• Privacy & Data Protection: privacy@calculatordesk.com
• Support: support@calculatordesk.com

Note: Please replace with your actual business contact details and registered address before going live.

14.2 Supervisory Authority

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with your local data protection authority:

EU Data Protection Authorities: Find your local authority

EU Alternative Dispute Resolution Platform: ec.europa.eu/consumers/odr

This Privacy Policy was last updated on December 28, 2024. By using CalculatorDesk, you acknowledge that you have read and understood this policy.