Privacy notice
Version 2026-10-22 · applies to planova.si
1. Who is responsible
The data controller is Tan PHAN, an individual operating the Planova project. Postal address and telephone: see the legal notice.
Privacy contact: contact@planova.si.
2. What we process, why, and for how long
| Visiting the website (technical logs) | For every request, the web server records the IP address, date and time, requested address, response status and size, referring page and browser identification, to operate and secure the service — legal basis: legitimate interest in running a secure website. These logs are rotated daily and kept for approximately 15 days. The contents of forms (including email addresses) and of calculation requests are not written to these logs. The Planova application keeps its own log of the time, address, status and duration of each request; it contains no IP address and no personal data. To limit abuse, IP addresses are held in memory only, never written to disk, for up to 1 hour (Early Access) or 10 minutes (calculations). No cookies, no analytics or advertising trackers, and no browser storage are used by planova.si; all page resources are served from planova.si itself. |
|---|---|
| Silver and Standard Preview (demonstration only) | During the public Preview, the analysis and the forecast run only on the fictional Aurelia Sensors dataset, which contains no personal or company data. The server refuses any other financial data and uses its own copy of the dataset for every calculation; only the supported forecast assumptions you adjust (growth rates, salary and OPEX changes, tax rate) are taken from your request; the forecast year is fixed to 2026 and cannot be changed. The calculation workflows are configured not to save the content of requests or results. Results stay in your browser tab until you close or reload it. |
| AI-generated commentary | AI commentary is switched off on planova.si: the server sends no content to Google or to any other AI provider. Silver and Standard show only figures and explanations computed by the Planova engine. |
| Real company financial data | Not processed. Real company financial data can only be processed after a commercial agreement and authorized account activation; this notice will be updated before that becomes possible. Joining Planova Early Access does not authorize it. |
| Planova Early Access waiting list | Early Access registration, and the encrypted backup of the list described below, will only become operational after a separate activation and successful validation; until then, no Early Access registration email address is collected. Registration is optional; your email address is required only to receive Early Access communications. Early Access is free and uses synthetic demonstration data only. Registration creates no paid subscription, purchase, member account or payment obligation. If you join, we store your email address, the date of registration, the page you registered from (home page or Silver) and a record of your consent (date and version of this notice). No IP address, name or company is stored with your registration. Purpose: to send you updates about the Planova Early Access programme and the opening of Silver membership — nothing else (no newsletter, no other products). Legal basis: your consent; you can withdraw it at any time, without affecting processing done before. Kept for at most 12 months from registration — older registrations are deleted automatically every day — or less if you ask for deletion. The list is a file on the server that hosts planova.si, outside the public website, readable only by the server administrator account. To protect it against loss, an encrypted copy of the list is made daily on the same server and kept for 7 days; the key needed to read it is kept offline. When you ask for deletion, your address is also removed from these copies. Updates are sent individually from contact@planova.si, a mailbox hosted by Zoho Mail; every update states that you can unsubscribe at any time by replying “unsubscribe”, after which your address is deleted from the list. |
| Other marketing | Planova does not ask for or use consent for broader marketing (newsletters, offers, other products). If this is offered one day, it will be a separate, optional, unticked choice with its own consent record; refusing it will never affect your Early Access registration. |
3. Recipients and hosting
- Hosting: planova.si, the Planova engine and the data described above are hosted on a virtual private server provided by HOSTINGER INTERNATIONAL LIMITED. Server location: France (Paris area).
- Possible transfers outside the European Economic Area (hosting): Planova's VPS is hosted in France by Hostinger International Ltd. In providing its services, Hostinger may use sub-processors, including for technical support, which may involve access to personal data such as technical logs from outside the EEA. Hostinger's Data Processing Addendum provides for EU Standard Contractual Clauses where applicable to transfers to countries without an adequacy decision, or another valid transfer mechanism under Chapter V of the GDPR. For information about the applicable safeguards and how to obtain a copy, please contact contact@planova.si.
- Email: messages sent to or from contact@planova.si — including Early Access updates and privacy requests — are handled by the mailbox provider Zoho Mail, operated by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, the Netherlands.
- Transfers outside the European Economic Area (email): Zoho stores mailbox data in its data centres in the European Economic Area. Under the data processing addendum signed with Zoho Corporation B.V., Zoho group entities outside the EEA may access personal data on a need basis: entities in India for support and debugging, and entities in Dubai (United Arab Emirates) for support in the regional language. Personal data may also be transferred outside the EEA to Zoho's sub-processors and other third-party service providers, depending on the Zoho services used. Zoho has contractually undertaken to ensure that a valid basis of transfer, as required by the GDPR, is in place; the addendum does not specify the safeguard used for each transfer, and Planova has not independently verified each transfer mechanism. You can ask for more information at contact@planova.si.
- No payment provider, CRM, analytics or advertising service is used.
4. Your rights
You can ask for access to, correction or deletion of your data, or for the restriction of its processing; you can object to processing and withdraw your consent at any time. Where the processing is based on your consent, you can also receive the data you provided in a structured, commonly used and machine-readable format and have it transmitted to another controller (data portability). Under French law, you can also give instructions about what happens to your personal data after your death. Write to contact@planova.si from the email address concerned; if you write from another address, we may ask you to confirm from the registered address — only to make sure we act on the right person’s data. We reply within one month. You can also lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work; in France: the CNIL (Commission nationale de l’informatique et des libertés), 3 Place de Fontenoy, 75007 Paris, https://www.cnil.fr.
5. Automated decisions
Planova computes financial figures; it makes no decision about you and does no profiling.
6. Security
All traffic uses HTTPS. The waiting list is kept outside the public website, readable only by the server administrator account. Calculation and registration requests are limited per visitor.
7. Changes
If this notice changes in a way that affects the waiting list, registered subscribers are informed by email before the change applies, and new registrations are made under the new version. Where the law requires renewed consent — for example for a new purpose — it is asked for separately before any additional processing; your data is not used for that processing unless you give it, and silence is never treated as consent.