Privacy policy

Effective date: October 9, 2026.

Who we are

This website is operated by Sandra Videkic, doing business as Core Plan Studio, an independent web and app developer (“we”, “us”). Contact us about privacy through sandra@coreplan.studio.

Information we collect

Project questionnaire: your name, email, optional business name and phone, and your answers about your project (industry, goals, design preferences, required features, content, domain and hosting, deadlines and any notes you write).
Agreement signature: your typed signature, name, optional title, the time of signing, your IP address and browser user-agent, and a fingerprint of the agreement text. We keep these to prove the agreement was signed.
Payments: payments are processed by Square (cards, Apple Pay, Google Pay) on its own secure pages. We do not receive or store your full card number. We receive the payment status, amount, date and a transaction reference.
Contact messages: your name, email, topic and message.
Technical data: your IP address is used briefly to prevent abuse (rate limiting) and appears in our hosting provider’s security logs. We do not use advertising or tracking cookies.
Browser storage: your questionnaire draft and the private access key to your project are stored in your own browser so you can continue later. You can clear them at any time in your browser settings.

How we use it

To respond to your request, prepare your project summary, quote and agreement.
To perform the project, take payments, send receipts, reminders and project updates.
To keep records required for accounting, tax and legal purposes.
To protect the website against spam, fraud and abuse.

We do not sell your personal information, share it for cross-context behavioral advertising, or use it for automated decisions with legal effects.

We share information only with providers that help us run the service, under their own privacy terms:

Cloudflare — website hosting, database and security.
Square — payment processing.
Google (Gmail) — sending and receiving our project emails.
Cloudflare Turnstile — spam protection on forms, if enabled.

We may also disclose information if required by law or to protect our rights.

How long we keep it

Project requests that do not proceed: up to 2 years, then deleted.
Signed agreements, orders and payment records: 7 years after the project ends, for legal and tax purposes.
Contact messages: up to 2 years.
Rate-limiting data: deleted within a day.

Security

Data is encrypted in transit (HTTPS). Access to your project uses a private, unguessable link. Administrative access is restricted. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify you as required by law, including the Illinois Personal Information Protection Act.

Your choices and rights

You can ask us to access, correct or delete your personal information, or to stop sending non-essential emails, by contacting sandra@coreplan.studio. We may need to keep some records (such as signed agreements and payment records) where the law requires it. Depending on where you live, you may have additional rights under your state’s law; we will honor requests as those laws require.

Children

This website is for businesses and adults. It is not directed to children under 13, and we do not knowingly collect their information.

Changes

We will post any changes here with a new effective date. Material changes will be highlighted on this page.