RGPD
B-PLAN is used by several companies in the sector, which may be competitors. Account isolation is an architecture decision, not an option.
Server in eu-north-1 (Stockholm) and database in the EU. No transfer of personal data outside the European Economic Area in normal operation.
Each account only sees the projects it created. There is no screen, report or feature that joins or compares project data across accounts. Every request is validated server-side against the authenticated owner.
Processed by EuPago (a Portuguese payment institution). Card data is entered on EuPago’s secure page and never passes through B-PLAN. Payment records kept for the tax period; unfinished attempts deleted after 90 days.
Access, rectification, erasure, portability and objection. On account closure, data is deleted or anonymised within 30 days, save legal retention obligations.
We do not use your data for targeted advertising, we do not run automated profiling with legal effects, and we do not sell personal data.