Privacy Policy
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
2. Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.
How do we collect your data?
Your data is collected when you provide it to us. This may include, for example, your email address that you enter in a registration form.
Other data is automatically collected by IT systems when you visit the website. This is primarily technical data (e.g., internet browser, operating system, or time of page access).
3. Local Data Storage
grafcet.io stores your created GRAFCET diagrams locally in your browser. This data is only stored locally in your browser and is not transmitted to us. You can remove this data at any time by clearing your browser cache.
4. User Accounts and Authentication
To use Pro features, you can create a user account with your email address and password. Authentication is handled via Supabase Auth.
Supabase is hosted on EU servers (Frankfurt, Germany).
Data stored: email address, hashed password, profile data, and license status.
You can delete your account at any time by contacting us at hi@grafcet.io.
5. Cloud Storage (Pro)
As a Pro user, your GRAFCET diagrams are stored in Supabase on EU servers.
Your stored diagrams are only accessible to you as an authenticated user.
After your license expires, cloud data is retained for 90 days and then automatically deleted.
You can delete your cloud data at any time.
6. Payment Processing
Payments are processed by Lemon Squeezy (Lemon Squeezy Inc.) acting as Merchant of Record.
We only receive from Lemon Squeezy: email address, transaction ID, and payment status.
We do not receive or store credit card data or other payment information.
Lemon Squeezy privacy policy: https://www.lemonsqueezy.com/privacy
7. Email Communication
Transactional emails (e.g., license key delivery, account notifications) are sent via Brevo (formerly Sendinblue).
Only your email address is shared with Brevo.
Marketing emails are only sent with your explicit consent.
8. Cookies and Local Storage
This website uses only essential cookies (authentication session).
LocalStorage is used to save GRAFCET diagrams and editor settings.
No third-party tracking cookies are used.
PostHog is used for anonymous usage analytics. You can opt out at any time.
9. Your Rights
Under the GDPR, you have the following rights:
- Right to information (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to deletion (Art. 17 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
Contact: hi@grafcet.io
10. Last Updated
This privacy policy is currently valid as of March 2026.