1. Introduction

planCoo ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our service.

We strive to respect privacy laws relevant to our users, including principles from the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Data Controller

planCoo is the data controller for personal information processed through our service.

3. Information We Collect

3.1 Information You Provide

3.2 Information Collected Automatically

3.3 Information from Third Parties

3.4 Business Inquiries via Microsoft Marketplace

If you contact us through the Microsoft Azure Marketplace ("Contact me" / "Kontakt meg"), Microsoft forwards the following information to us on your behalf:

This data is transmitted to PlanCoo by Microsoft in accordance with Microsoft's Marketplace policies, which you accepted when submitting the contact form. PlanCoo processes this data as an independent Data Controller solely to respond to your inquiry.

4. Legal Basis for Processing

We process your data based on the following legal grounds:

5. How We Use Your Information

6. Data Sharing

6.1 Service Providers

We share data with trusted third parties who help us operate our service:

6.2 Legal Requirements

We may disclose information when required by law or to protect rights and safety.

6.3 Business Transfers

If we're involved in a merger or acquisition, your data may be transferred.

7. International Data Transfers

PlanCoo uses EU/EEA-based storage for primary application data and also relies on certain global/US-based services (platform delivery, security/abuse prevention, payments). This may involve processing and transfers outside the EU/EEA.

Current overview (factual, as currently configured):

Where relevant, international transfers are addressed through contractual safeguards (including the European Commission's Standard Contractual Clauses) and vendor documentation.

Microsoft Azure's compliance documentation is available at: https://docs.microsoft.com/en-us/compliance/regulatory/gdpr

8. Data Security

We implement reasonable security measures including:

9. Data Retention

We retain your personal data only as long as necessary to provide our service and fulfill the purposes outlined in this policy, unless longer retention is required by law.

9.1 Microsoft Marketplace Inquiry Data

Personal data received through the Microsoft Marketplace "Contact me" form is subject to the following retention limits:

| Status | Deleted after |
|---|---|
| No response / not followed up | 12 months |
| Active dialogue initiated | 24 months |
| Became a customer or formal relationship established | 36 months, or for the duration of the customer relationship + applicable statutory retention period |

You may request deletion of your inquiry data at any time by contacting us at [email protected]. We will process deletion requests within 30 days.

10. Your Rights

Depending on your location, you may have the right to:

To exercise any of these rights, including requesting a copy of your data (Data Portability), please contact us at [email protected]. We will process your request within 30 days.

10.1 California Residents

California residents have additional rights under the CCPA/CPRA. We do not sell personal information as defined by the CCPA.

11. Cookies and Tracking Technologies

We use necessary cookies and browser storage to ensure the website works correctly, protect sign-in and security flows, remember essential preferences, and support specific user-triggered integrations.

11.1 Types of Cookies We Use

- Examples: Firebase authentication/session handling, theme preference, editor recovery data, and security-related browser storage. - Examples: Google reCAPTCHA for abuse prevention, LemonSqueezy checkout, Google/Microsoft sign-in through Firebase, and optional LinkedIn sharing or account-linking flows.

We do not currently use optional analytics cookies or advertising cookies on the website.

11.2 Managing Consent

When you first visit our site, you will see a notice explaining our use of necessary cookies and browser storage. Because these technologies are required for core functionality and security, they cannot be switched off from the banner. You can still control cookies through your browser settings, but doing so may break login, checkout, or abuse-prevention features.

11.3 Third-Party Processors

We use the following third-party services which may process your data:

You can manage browser-level cookie behavior through your browser settings.

12. Children's Privacy

Our service is intended for professional and educational collaboration use, including school deployments where institutions may authorize student use under applicable law.

For school deployments involving minors, the school/organization (as Controller) is responsible for lawful basis, parental/guardian consent where required, and role/access configuration. We recommend data minimization (e.g., student IDs or pseudonyms where appropriate).

PlanCoo does not knowingly collect personal data directly from children outside an authorized school/organizational context.

13. Changes to This Policy

We may update this Privacy Policy. We'll notify you of significant changes through the service or via email.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights:

If you're unsatisfied with our response, you may contact the Norwegian Data Protection Authority (Datatilsynet).

Last updated: March 9, 2026