PanelLogic

Privacy Policy

PanelLogic and SawPilot · Effective 30 September 2026 · Operator: VECINU TECH S.R.L. · Strada Alexandru Golescu, Nr. 35, Focșani, Vrancea, Romania · J2026050831001 · CUI 55458944 · [email protected] · ANPC · SAL

What the apps store, and where

Everything you enter — parts, stock, materials and prices, settings, your company header, saved projects, imported cutting plans, checked parts and cuts — stays on your own phone, tablet or computer, in the private storage the system gives the app, which no other app can read.

None of it is sent to us. All of it is deleted when you uninstall the app or clear its data in the system settings.

On Android, backup is turned off (allowBackup="false"), so your work is not copied to Google's servers either.

Files you save yourself

When you tap save or share — the cutting plan as PDF, the labels, sheet.json for SawPilot, the project file — the app writes the file to your Downloads folder and opens the system's own share sheet. Where it goes from there is your choice. The apps never send your files anywhere on their own.

The label printer (SawPilot)

If you print labels, SawPilot sends the label straight to your printer — over your local Wi-Fi network, over Bluetooth, or down a USB cable. The label goes to that printer and nowhere else: it does not come to us and it does not go over the internet.

The only exception: if you choose "Print through the tablet", the label goes through the tablet's print window and the print app you pick there; what that app does with the label is up to it. It does not pass through us that way either.

Each of those roads needs something different from Android, and it is worth saying plainly. A printer on the network rides on the same internet permission as the licence, because Android has no separate permission for "the local network only". A Bluetooth printer needs a permission of its own, and Android asks you for it the first time: we ask only to connect to a printer you have already paired yourself, never to scan for devices around you, because scanning is what would drag your location in. A printer on a cable needs no permission in the package at all — Android asks you itself, with its own window, each time you plug one in.

Checking for a new version

The PanelLogic file you download for your computer asks this website, each time it starts and only when it is online, which version is the newest: it reads one small file holding a single number (/app/versiunea.json). The request carries nothing about you or your work. Like any page, it reaches Cloudflare with the IP address of your network, and we keep nothing from it. If a newer version exists, the program says so and offers a link to download it. The web version at /app/ asks nothing: it updates itself and tells you once that it did.

SawPilot, when you installed it from Google Play, asks Google Play at start-up whether a newer version exists, through Google's own in-app update library. Google receives what it needs for that — the app's version and details of the device — under Google's own rules, and nothing of your work. If you agree to update, the new version downloads from Google Play while you keep working, and SawPilot asks before it restarts to install it.

What we hold when you buy

Buying a licence creates an account. Here is everything we keep about you:

• Your e-mail address — it is your account, and it is where the licence letter and the sign-in codes go.
• What you bought and when, and the payment reference, so we can find your purchase if you write to us.
• Your machines: for each one you activate, a fingerprint (SHA-256) of an identifier the program makes up at random — sixteen characters, not read from the device — the name you gave it, what kind of machine it is (phone, tablet, computer), and the date it last checked in. The name is yours to choose — "the office computer" tells us as much as we need.
• When you ask for a sign-in code in order to buy inside the app: a fingerprint (SHA-256) of your e-mail address and one of the network you come from — your IP address, or with IPv6 the whole /64 block. Only the fingerprints are kept, never the address or the IP address itself, and only so that sign-in codes cannot be asked for without end.

Like any request over the internet, each of these reaches our server carrying the IP address of your network. We do not keep it, except as the fingerprint above.

We do not hold your name, your address, your card, or anything you draw or cut. We do not sell or share any of it, and there is no advertising and no profiling anywhere in this.

The legal basis is the contract between us: without an e-mail address there is nowhere to send a licence, and without the machine list a device limit cannot exist. The two-day fingerprints rest on our legitimate interest in not having our letter-sending abused.

Who else touches it

Five companies, each with a narrow job of its own, each under its own contract with us or its own rules:

• Stripe — takes the payment when you buy on this website, and issues the invoice. Your billing address and card go to them, not to us; we never see the card number. They tell us the e-mail address, the amount and whether it went through.
• Google — takes the payment when you buy inside the Android app, under Google's own rules. Google never tells us your address; we send Google the receipt and the product so that the payment can be checked, together with a fingerprint (SHA-256) of the account.
• Supabase — holds the account, the licence rows, the machine list, the licence log and the code-request fingerprints, in the European Union.
• Resend — carries our letters: the licence, the sign-in codes, and a note if a licence is withdrawn, as well as the letters we ourselves send you from support, and the note that the account's address has changed.
• Cloudflare — serves this website, and stands in front of our server as well: every call the apps and this site make to us passes through it, and so does the version question of the downloaded PanelLogic file; the IP address the paragraphs above speak of is the one Cloudflare reads and hands on.

How long

The account and the machine list stay until you delete the account; a machine not seen for 90 days gives up its place on its own. Sign-in codes are good for fifteen minutes and are then worthless. The fingerprints kept when a code is asked for stay two days, and the first code request after that deletes them.

Two things stay after the account is gone, because a sale has to be answerable for years. The record of the purchase — the paying address, the product, the amount paid, the order number — stays as long as the law requires an invoice to be kept, ten years in Romania. And the licence log stays: it says what happened and when — the account made, the licence given, a machine added or removed, the payment checked, the refund — carrying on every line the account's code, a string of letters and digits rather than your address, and, on the line for a machine you added, the name you gave that machine and the kind of system. Neither of the two is deleted on its own today.

This website

The site sets no cookies, runs no analytics, and loads nothing from anybody else — the typefaces are served from this site itself. The browser is told so as well: every page carries a content policy that allows nothing but this site and our own server. There is no consent banner because there is nothing to consent to. When you pay by card, our server hands your browser a Stripe checkout address and you leave this site for Stripe's own page; the card is typed there, never here.

The account page keeps your sign-in in your browser's own storage so you are not asked for a code on every visit. It stays in your browser, it is not a cookie, it is not sent anywhere but to us, and signing out removes it. The web version of PanelLogic at /app/ keeps your work the same way — in your browser, on your device, and nowhere else.

What is NOT in the apps

• No advertising, no tracking, no analytics, no social SDKs. Nothing you draw or cut is ever sent anywhere.
• No Google Analytics, no Firebase, in either app. PanelLogic carries one outside library and one only: Google's billing library, which is what lets you buy the full version inside the app. SawPilot is built with Flutter and carries, besides that same billing library and Google's in-app update library, three packages that hold nothing of yours and send nothing anywhere — two sets of icons, and the piece that lets it call its own cutting engine.
• On Google Play, PanelLogic shows three permissions, all of them "normal" ones Android grants by itself without asking you: internet (INTERNET), network state (ACCESS_NETWORK_STATE) and billing through Google Play (BILLING). The last two come with that billing library; we did not ask for them.
• SawPilot shows six: those same three; two for a Bluetooth printer — connecting to one you have already paired (BLUETOOTH_CONNECT) and its older twin for tablets on Android 11 and below (BLUETOOTH, declared with maxSdkVersion="30", so a newer tablet never asks for it); and one the app defines for its own parts to talk to each other (DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION), which no other app can ask for, because it is tied to our signature. Two things about that list. On a tablet running Android 12 or newer only five of the six are actually asked for, because of the maxSdkVersion above. And BLUETOOTH_CONNECT is not one of the "normal" ones: Android asks you for it, by the name "Nearby devices", the first time you choose a Bluetooth printer, and you can say no and keep printing over the network or a cable.
• No location, no contacts, no camera, no microphone, no storage permission — in either app. SawPilot deliberately does not ask to look for Bluetooth devices around it (BLUETOOTH_SCAN), because that permission brings your location with it; it offers you only the printers you have paired yourself, in the system settings. A printer on a USB cable needs no permission in the package at all: Android asks you itself, each time.
• No account at all in the free part, and nothing you type into it comes to us.

Children

These are workshop tools, not made for or aimed at children, and we do not knowingly hold data about any.

Your rights

Your account page shows the account — the address, what you bought and your machines — and you can delete the account yourself, at any time, without asking us: from that page, or from inside either program, where the button sits in the menu. That removes the account and its list of machines.

What deleting the account does not remove is what the two paragraphs above describe: the licence rows, which stay with us without an owner as the record of the sale — no longer tied to any account, and no longer able to activate any machine — and the licence log. If you want those erased as well, write to us and we will answer.

Under the GDPR you can also ask us to show you the data, correct it, erase it, hand it over in a readable file, or stop using it, and you can object to how we use it. Write to [email protected] and we will answer within a month. If you think we have got it wrong you can complain to the Romanian supervisory authority (ANSPDCP, dataprotection.ro) or to the one in the country you live in.

Changes

If we ever need to hold something more, this page will say so before we do, and the date at the top will change. The version before this one was dated 25 September 2026. If an app ever needs a new permission, it will be visible on Google Play before you install.

Contact

VECINU TECH S.R.L. · Strada Alexandru Golescu, Nr. 35, Focșani, Vrancea, Romania · J2026050831001 · CUI 55458944 · [email protected] · ANPC · SAL

[email protected] · Licence Terms