Privacy Policy

Free use: nothing is uploaded

Without an account, the designer runs entirely inside your browser. Names, job titles, email addresses, department structure and every export are produced on your own device. No chart content is transmitted to our servers, and we cannot read it even if we wanted to. Saving a chart writes it to your browser's local storage; clearing site data or using the delete button removes it immediately and permanently.

Paid access: what we store

When you purchase Pro Access, we store your email address, the licence key we issue, and a randomly generated device identifier so we can enforce the device limit and let you manage activations. We never receive or store card numbers. We do not store your chart content, names, or job titles on our servers.

What we collect, why, and the legal basis

• Email address — collected so we can deliver your licence key, send transactional messages such as purchase confirmations and device-activation notices, and respond to support requests. Legal basis: contract performance and, where applicable, legitimate interests in customer support and fraud prevention.
• Device identifier and device name — collected to enforce the per-key device limit and to power the Manage Devices page. Legal basis: contract performance.
• Billing/payment metadata — collected by our payment provider so your transaction can be processed and invoiced. Legal basis: contract performance and legal obligation (tax and accounting record keeping).
• Aggregate page-usage data — collected to understand which services are worth building. We do not sell data, do not run advertising trackers, and never feed chart contents into analytics or AI training. Legal basis: legitimate interests in service improvement.

Who we share personal data with

We share personal data only with the categories of recipients listed below. We do not sell personal data.

• Paddle.com, Inc. and Paddle Payments Limited ("Paddle") — our Merchant of Record and payment processor. Paddle processes your payment, billing, tax, subscription management, invoicing, and refund data so we can sell Pro Access to you. Paddle acts as an independent data controller for the personal data it collects directly during checkout; for the data we share with Paddle for transaction fulfilment, Paddle processes it as a processor/service provider on our behalf. You can read Paddle's privacy notice at paddle.com/legal/privacy.
• Hosting, analytics, and support-tooling providers — subprocessors that run the infrastructure and help us operate the Platform. They process data only as necessary to provide their services and are contractually bound to keep it confidential and secure.
• Professional advisers and authorities — lawyers, accountants, auditors, and regulators or government bodies where required by law.

Deleting your data

Deleting a chart issues a hard delete against the database row. We do not use soft-delete flags, hidden archives, or "recently deleted" recovery bins, so there is no orphaned copy left behind in the live system. Deleting your account removes your profile and every chart attached to it in the same operation.

One honest exception: encrypted operational backups. Backups exist so a hardware fault cannot destroy other customers' work. They are encrypted at rest, are not queryable by the application, and roll out of retention within 30 days — after which the deleted content is gone from every system we run.

Data retention

We keep your email address, licence key, and device-activation records for as long as you have active or recently expired Pro Access, plus a reasonable period afterwards to resolve disputes, enforce our terms, and meet legal/tax record-keeping obligations. When data is no longer needed for these purposes, we delete or anonymise it.

Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and hashed licence keys. Because free chart content never leaves your browser, its security is under your direct control.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, or to object to or withdraw consent for certain processing. We will action verified requests within 30 days. To exercise any of these rights, email support@tolocker369.com.

Cookies and similar technologies

We use only essential cookies required to operate the Platform and keep you signed in to your session. We do not use advertising or third-party marketing cookies.

Contact

For access, correction, deletion, or any other privacy requests, contact us and we will action them within 30 days. See also our trust overview.