Privacy Policy

Effective date: 25 August 2026

This Privacy Policy explains how Michal Strnad (we, us, or the Provider) collects, uses, and shares personal data in connection with Planymatic (the Service), including www.planymatic.com, app.planymatic.com, and related API endpoints.

Use of the Service is also subject to our Terms of Service. If this Privacy Policy and the Terms conflict on data-protection disclosures, this Privacy Policy controls for those disclosures.

1. Who we are

The controller of account and website personal data is:

Name: Michal Strnad, a self-employed person (OSVČ) registered in the Czech Republic
Registered office: Zlatnická 82, Zlatníky-Hodkovice, 252 41, Czech Republic
Business ID (IČO): 07662491
VAT ID (DIČ): CZ0002170399
Email: contact@planymatic.com

We have not appointed a data protection officer. For privacy questions, use the email above.

2. Controller and processor

For account data we collect to operate the Service (for example your name, email, and authentication data), we are the controller.

For Customer Content that includes personal data of your Users or others (for example team-member names, invitation emails, work-item descriptions, and comments), you (the Customer) are typically the controller and we are the processor, acting on your instructions as set out in the Terms of Service and this Privacy Policy.

A separate data processing agreement may be published later. When published, it will form part of the contract for processor activities.

If we process your data only as a processor (for example because your employer invited you to a team), please contact that Customer first to exercise your rights.

3. What we collect and why

We collect the following categories of personal data.

Account and profile data. Name, email address, password (stored as a hash), email-verification status, and the time and version of Terms acceptance. We use this to create and manage your account, authenticate you, provide the Service, and contact you as described below (including marketing).

Customer Content. Work items, descriptions, comments, schedules, time budgets, team names, member names, and similar material you or your Users submit. We host and process this to provide the Service to the Customer.

Invitations. Name and email address of people a Customer invites to a team. We use this to send invitation emails and link the invitee to the team if they accept.

Security and operations data. Internet protocol (IP) address, request metadata, timestamps, and similar logs or traces generated when you use the Service (including Google Cloud Trace). We use this to operate, secure, debug, and prevent abuse of the Service.

Cookies and similar technologies. See Section 4.

Waitlist data. Email address submitted through the waitlist form on the website. We use this to notify you when early access is available and to send related product updates. By joining the waitlist you acknowledge this Privacy Policy. You can request removal at any time by emailing contact@planymatic.com.

Correspondence. Information you send us by email or otherwise when you contact us.

Marketing contact details. We use the name and email address on your account to send you news, product updates, tips, offers, and other marketing about Planymatic and related services. By creating an account and accepting this Privacy Policy and the Terms of Service, you agree that we may contact you for these purposes. You can opt out at any time (see below). We do not use invitation emails of people who have not created an account for our own marketing.

We do not collect payment-card data, date of birth, billing address, or social-network login data. We do not sell personal data.

Lawful bases

We process personal data only where we have a lawful basis under the GDPR:

Contract (Art. 6(1)(b)) — to provide the Service, manage accounts, and send transactional email (verification, password reset, invitations, service notices).
Consent (Art. 6(1)(a)) — for waitlist sign-ups, where you submit your email and acknowledge this Privacy Policy; we process it to contact you about early access and product updates until you ask us to stop.
Legitimate interests (Art. 6(1)(f)) — to keep the Service secure and reliable, prevent abuse, keep logs and traces, improve the Service using aggregated or anonymised information, and (as a B2B service) to tell existing Customers about Planymatic features, offers, and related products. You may object or opt out as described in Section 10.
Legal obligation (Art. 6(1)(c)) — where we must retain or disclose data (for example tax, accounting, or a binding request from an authority).
Consent (Art. 6(1)(a)) — for non-essential cookies, analytics, and marketing technologies after you consent; and for email marketing where you agree when you accept this Privacy Policy and the Terms. You may withdraw consent or opt out at any time without affecting processing that already took place. Transactional emails about your account will continue.

If you do not provide account data needed for the contract (name, email, password), you cannot use the Service.

4. Cookies, analytics, and marketing

What we use now

We currently use:

Essential cookies access_token and refresh_token — to keep you signed in. The Service cannot work without them.
Functional cookie sidebar_state — to remember whether the app sidebar is open. This is a first-party cookie and is not used for advertising.
Necessary cookie cookie_consent — to store your choice about analytics and marketing cookies.

These cookies do not require consent.

After you consent, we also use:

Google Tag Manager (GTM-MR7KNSVQ on www.planymatic.com, GTM-59G9FJC3 on app.planymatic.com) — to load and manage scripts, including analytics tags (and, later, marketing tags if we add them).
Google Analytics 4 — usage statistics (pages viewed, approximate location derived from IP, device and browser type, how you reached the site). Typical cookies include _ga and _ga_*.
Microsoft Clarity — session recordings, heatmaps, clicks, and scroll. May set cookies such as _clck and _clsk (and similar) and record how you interact with pages.

These analytics tools run only after you consent. They may set cookies or similar identifiers and collect device, IP, and browser data.

The current list, including cookies we use now and tools we may add, is in our Cookie Policy.

What we may use later

We may add marketing or advertising pixels — for example Meta, LinkedIn, or Google Ads — to measure campaigns and (where permitted) show relevant ads. These may set third-party cookies and track visits across websites. They are not enabled yet.

Where ePrivacy or GDPR require it (including in the EEA and the United Kingdom), analytics and marketing pixels and similar site technologies run only after you consent. You can withdraw that consent through Cookie settings on the site, or by contacting us. Essential cookies will continue to work.

Email marketing is separate: by accepting this Privacy Policy and the Terms you agree we may email the account address about Planymatic. Opt out using the unsubscribe link in those emails or by writing to contact@planymatic.com.

We share personal data with:

Google Cloud — application hosting, storage, content delivery, and operational tracing (region europe-west1, Belgium).
PlanetScale — database hosting. The database runs on Google Cloud in the same europe-west1 datacentre as the rest of the Service.
Brevo — transactional email and, when we send it, email marketing.
Google — Google Tag Manager and Google Analytics 4, after you consent to analytics.
Microsoft — Microsoft Clarity, after you consent to analytics.
Other Users of the same team, as determined by the Customer’s permissions.
Professional advisers and authorities when required to meet legal obligations or protect rights.
A successor if we transfer the business (including to an s.r.o. or other company), as described in the Terms of Service.

If we add marketing pixels later, we will also share relevant data with advertising or measurement partners loaded through Tag Manager.

We may create aggregated or anonymised data that no longer identifies you and use or share it to improve the Service.

We do not share personal data with third parties for their own independent marketing of unrelated products, except as described for advertising pixels after consent. We may use your account name and email ourselves (and through email providers such as Brevo) to market Planymatic as described in Section 3.

6. Where data is stored

Service data (accounts, Customer Content, logs) is hosted primarily in the European Union. The application runs on Google Cloud in region europe-west1 (Belgium). The database is hosted by PlanetScale on Google Cloud in that same datacentre. Brevo processes email in the EU.

Google (Tag Manager and Analytics 4) and Microsoft (Clarity) often process analytics data in the United States and other countries. Transfers outside the EEA rely on the vendor’s GDPR transfer tools, typically the European Commission’s standard contractual clauses or an equivalent mechanism. The same applies to advertising networks if we add marketing pixels later.

7. Retention

We keep personal data while your account is open and as needed to provide the Service.

After you delete your account, or after the contract ends, we delete or anonymise Customer Content and account data within 30 days, except where we must keep it longer by law (for example tax records of paid transactions) or in residual backups that are overwritten in the ordinary cycle.

Unused free accounts may be deleted after 12 months of inactivity, after notice to the account email, as described in the Terms.

Waitlist entries are kept until we contact you with an invitation or you request removal, whichever comes first. We delete waitlist emails within 30 days of either event.

Analytics data from Google Analytics 4 and Microsoft Clarity is kept according to each vendor’s settings and our Cookie Policy. Marketing-pixel data, if those tools are added later, will be kept the same way. We keep you on a marketing-email list until you opt out, your account is deleted, or we no longer need the address for that purpose.

8. Security

We use commercially reasonable administrative, technical, and organisational measures to protect personal data. No method of transmission or storage is completely secure. You should choose a strong password, keep credentials confidential, and control who you invite to a team.

9. Children

The Service is for people 18 years or older and is not offered to consumers. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it. Contact us if you believe a person under 18 has provided personal data.

10. Your rights

If we are the controller of your personal data, you may request:

access to your personal data and information about how we process it;
rectification of inaccurate or incomplete data;
erasure of your personal data (“right to be forgotten”);
restriction of processing;
portability of data you provided, in a machine-readable format;
objection to processing based on legitimate interests, including marketing emails;
withdrawal of consent where processing is based on consent, including opting out of marketing emails.

To exercise these rights, email contact@planymatic.com. We may need to verify your identity. We will respond within the time required by law. We may refuse a request only where the law allows (for example if it is unfounded, excessive, or would harm others’ rights).

You also have the right to lodge a complaint with a supervisory authority. For the Provider, that is:

Úřad pro ochranu osobních údajů (ÚOOÚ)
Pplk. Sochora 27, 170 00 Praha 7, Czech Republic
https://uoou.gov.cz

If you live in another EEA country or the United Kingdom, you may also complain to your local authority.

11. Changes

We may change this Privacy Policy. We will post the updated policy on this page and, for material changes, give at least 30 days’ notice by email to the account email and/or through the Service, unless a shorter period is required by law.

The Privacy Policy in effect when we collect information governs that collection, except where the law requires us to apply a newer version.

12. Contact

Questions about this Privacy Policy or our use of personal data:

Email: contact@planymatic.com
Address: Michal Strnad, Zlatnická 82, Zlatníky-Hodkovice, 252 41, Czech Republic