Privacy Policy
What we store, who else touches it, and how to get rid of it. Short, because there is not much of it.
In effect from September 1, 2026
1. The short version
2. What we collect
Your email address. It is how you sign in, since there is no password, and how we would reach you about the service.
Your designs. The rooms and layouts you save: dimensions, modules, and the notes and client name you type on the documents.
Your shop settings. Job defaults, price book, sheet stock, crown stock, back-panel method and printed-section choices.
Ordinary server logs. Our hosting and database providers record requests, including IP address, to run and protect the service.
Your subscription, but not your card. Paddle is the merchant of record for every plan: they take the payment and hold the billing details. We receive which plan you are on, whether it is active, and the identifiers needed to manage it. Card numbers never reach our servers.
We ask for no name, address or phone number. Anything you enter at checkout is given to Paddle, under their privacy notice.
3. What we do not do
No advertising or marketing pixels. No profiling, and no automated decisions about you. We do not sell, rent or share your personal information, and we do not use your designs to train anything or to promote the product. The only marketing email we send is the kind you ask for: the next clause.
We measure two things, and it is fairer to name them than to leave “no analytics” standing while doing it.
Page views, through Vercel Analytics. Which page was opened and which site you came from, if any. It sets no cookie, stores no identifier and does not follow you to other sites, so it counts visits rather than people. Vercel already hosts this site, so it is not a new company seeing your traffic; it is the one that serves every page to you already.
A short list of our own events. When a document is opened, when a starting layout is used, when a job is saved, when a checkout opens, and when the app crashes, we record the fact on our own server and nothing else: no identifier, no address, no session, and nothing that can be traced back to you. The list of event names is closed in the code, which is what keeps this auditable. A crash also sends its error message, so it can be fixed. These go to our own log, which is not a database and is overwritten as it fills.
4. Marketing email
The checkout carries a tick box, unticked by default, asking whether we may send you product updates. Tick it and we may write to you about new features and offers. Leave it and you will hear from us only about your own account: sign-in codes, receipts, and anything that affects a job you have saved.
Every marketing email carries an unsubscribe link and unsubscribing takes effect immediately. You can also tell us to stop through the Contact link at the foot of this page, and we will.
5. Storage in your own browser
The app keeps a copy of your work in your browser’s local storage so it loads instantly and keeps working if the network drops. That includes a recovery slot, the closet you are drawing, written a moment behind each edit. That slot is deliberately never uploaded: it is a crash guard for that one browser.
Clearing your browser data clears that copy. Signed in, your saved designs and settings come back from your account; signed out, they are gone. We use no advertising or tracking cookies.
6. Who else processes it
We use a small number of providers, each for one job:
- Supabase: database and sign-in. Your email, designs and settings are stored here.
- Vercel: hosting and delivery of the site.
- Resend: sends your sign-in code. Receives the address the code goes to.
- Cloudflare: DNS, and the check on the sign-in form that keeps bots from sending mail through it.
- Paddle: payments. Merchant of record for subscriptions: receives your email and billing details, and tells us only which plan you are on.
Each acts on our instructions and none receives your data for its own purposes. We may also disclose information where the law requires it.
7. Where it is held
Our providers operate in the United States and elsewhere, so your information may be processed outside your country, including outside Province of Ontario, Canada. We use providers that offer appropriate safeguards for such transfers.
8. How long we keep it
Your designs and settings stay until you delete them or delete your account. If an account goes unused for a long period we may remove it after telling you at its email address first.
9. Deleting everything
You can also delete individual designs at any time from the designer.
10. Your rights
Depending on where you live, you may have the right to access a copy of your information, correct it, delete it, restrict or object to its processing, or receive it in a portable form. The app covers most of this directly: your designs export to a file from the designer, and deletion is a button. For anything else, contact us and we will answer within a reasonable time and at no charge.
We do not sell personal information, and we have no financial incentive programs, so there is nothing to opt out of on that front.
11. Security
Data is transmitted over HTTPS and stored with per-account access rules enforced by the database itself, so one account cannot read another’s rows. There is no password to steal because there is no password. No system is perfectly secure, and we will tell affected users promptly if a breach occurs.
12. Children
This is business software for the building trade and is not directed at children. We do not knowingly collect information from anyone under 16.
13. Changes, and reaching us
If this policy changes we will update the date at the top, and tell you in the app or by email if the change is material. Ahmet Unal, carrying on business as ClosetRight is the controller of this information. Use the Contact link at the foot of this page for any privacy question or request.