Privacy Policy

PRIVACY POLICY – WOOD CUTTING PLAN

Controller: Salem Solutions, trading as Nerd in the Woods
Website: woodcuttingplan.com
Email: [email protected]
Chamber of Commerce number: 74941747
Established in: Vleuten, the Netherlands

Last updated: 17 September 2026

1. About this Privacy Policy

This Privacy Policy explains how Salem Solutions, trading as Nerd in the Woods (“we”, “us” or “our”), processes personal data when you visit woodcuttingplan.com, create or use a Wood Cutting Plan account, purchase paid access or digital content, contact us, or otherwise use our services.

We process personal data in accordance with the General Data Protection Regulation ("GDPR"), the Dutch GDPR Implementation Act and other applicable privacy laws.

This Privacy Policy should be read together with our General Terms and Conditions. Our cookie policy is included in section 15.

2. Who is responsible for your personal data?

The controller responsible for the processing described in this Privacy Policy is:

Salem Solutions, trading as Nerd in the Woods
Vleuten, the Netherlands
Chamber of Commerce no. 74941747
Email: [email protected]
Website: woodcuttingplan.com

Questions about privacy or the use of your personal data can be sent to the email address above.

3. Whose personal data do we process?

We may process personal data relating to:

• visitors to our Website;

• registered Users;

• Free Plan Users;

• Paid Plan subscribers;

• purchasers of Digital Content;

• Business Users and their contact persons;

• people who contact us for support or other enquiries.

4. What personal data do we collect?

The information we collect depends on how you use Wood Cutting Plan.

4.1 Account information

When you create or use an Account, we may process:

• email address;

• account identifier;

• authentication information;

• account status;

• subscription or plan information;

• account creation date;

• date and time of successful authenticated logins;

• account settings and preferences.

Wood Cutting Plan uses passwordless authentication. We do not use or store passwords for Wood Cutting Plan Accounts.

Authentication is performed using magic links sent to the email address associated with the Account.

To provide and secure this functionality, we may process authentication-related information such as:

• temporary login tokens;

• session identifiers;

• authentication timestamps;

• login status;

• security and authentication logs.

Temporary authentication tokens are retained only for as long as reasonably necessary to provide and secure the authentication process.

4.2 Project and User Content

When you use Wood Cutting Plan, you may enter or create information such as:

• project names;

• timber or material dimensions;

• required pieces and quantities;

• stock information;

• tags and labels;

• kerf settings;

• Cutting Plans;

• shopping lists;

• project structure;

• other information you choose to store in your Account.

This information is primarily used to provide the functionality requested by you.

Project information will normally not constitute sensitive personal data. Users should not enter unnecessary personal or sensitive information into project fields.

4.3 Payment and transaction information

If you purchase a Subscription or Digital Content, we may process:

• name or business name where required;

• billing information;

• country or tax location;

• VAT information where applicable;

• purchased product or Subscription;

• transaction amount;

• payment status;

• transaction identifier;

• invoice information.

Payments may be processed by an external payment service provider.

We do not need to receive or store complete payment-card details where those details are handled directly by the payment provider.

4.4 Communications and support

If you contact us, we may process:

• your name or email address;

• the contents of your message;

• attachments you voluntarily provide;

• support history;

• information reasonably necessary to investigate or resolve your request.

4.5 Technical and security information

When you access Wood Cutting Plan, we may automatically process technical information necessary to operate and secure the Service, such as:

• IP address;

• date and time of access;

• browser and device information;

• operating system;

• session and authentication information;

• successful and failed authentication events;

• security events;

• error and diagnostic information;

• server and application logs.

We use this information for security, fraud prevention, troubleshooting and reliable operation of the Service.

4.6 Cookies and similar technologies

We process technical information and, with your consent, visitor identifiers and website usage information through cookies and similar technologies. Our cookie policy is included in section 15.

5. How do we obtain your personal data?

We obtain personal data:

• directly from you when you create an Account;

• when you enter information into Wood Cutting Plan;

• when you purchase a Subscription or Digital Content;

• when you contact us;

• automatically when you use the Website or Service;

• from payment, authentication or other service providers where necessary to operate the Service or complete a transaction.

6. Why do we use your personal data and what is our legal basis?

We only process personal data where we have a valid legal basis under the GDPR.

6.1 Providing Wood Cutting Plan

We process account information, project information and related technical information to:

• create and maintain your Account;

• authenticate you using passwordless magic links;

• save and retrieve projects;

• generate Cutting Plans and other Generated Output;

• provide Free Plan or Paid Plan functionality;

• manage Subscriptions;

• provide purchased Digital Content;

• respond to requests relating to the Service.

Legal basis: performance of a contract or taking steps at your request before entering into a contract.

6.2 Payments and administration

We process transaction and billing information to:

• process payments;

• issue invoices;

• administer Subscriptions;

• maintain financial records;

• comply with tax and accounting obligations.

Legal basis: performance of a contract and compliance with legal obligations.

6.3 Security and fraud prevention

We process technical information, authentication information and logs to:

• protect Accounts;

• detect unauthorised access;

• prevent misuse;

• detect suspicious or fraudulent authentication attempts;

• investigate security incidents;

• maintain the integrity and availability of the Service.

Legal basis: our legitimate interests in securing and operating the Service and, where applicable, compliance with legal obligations.

6.4 Customer support

We use information provided in support requests to investigate and respond to questions, complaints and technical issues.

Legal basis: performance of a contract where the request relates to your use of the Service, or our legitimate interest in providing customer support.

6.5 Improving the Service

We may use aggregated or anonymised information to:

• identify technical problems;

• measure performance;

• understand how features are used;

• improve the usability and functionality of Wood Cutting Plan.

Where possible, this analysis is performed using information that cannot reasonably be linked to an identifiable individual.

Private User Content is not used to train public or third-party generative artificial intelligence models unless you have expressly agreed to such use.

Where we use optional Google Analytics or HighLevel/LeadConnector visitor analytics, the legal basis for processing personal data is your consent under Article 6(1)(a) GDPR. This processing may take place before the resulting reports are aggregated. You may withdraw your consent through “Cookie settings” at any time.

6.6 Legal claims and compliance

We may process information where reasonably necessary to:

• comply with applicable law;

• respond to lawful requests from authorities;

• establish, exercise or defend legal claims;

• enforce our Terms and protect our rights.

Legal basis: compliance with a legal obligation or our legitimate interests in protecting our legal rights.

6.7 Marketing communications

If we send optional marketing communications, we will only do so where permitted by applicable law.

Where consent is required, you may withdraw that consent at any time.

You may unsubscribe from marketing emails using the unsubscribe option provided in the message or by contacting us.

Service-related communications, such as magic-link emails, security notices, payment messages, inactivity warnings or changes affecting your Account, are not marketing communications.

7. How long do we keep your personal data?

We do not retain personal data longer than necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

7.1 Active Accounts

Account information and User Content are normally retained while your Account remains active.

A downgrade from a Paid Plan to the Free Plan does not automatically delete your Account or User Content.

If your Account exceeds Free Plan limits after a downgrade, existing content may remain available on a read-only basis in accordance with our General Terms and Conditions.

7.2 Inactive Accounts

An Account is considered inactive when there has been no successful authenticated login for 12 consecutive months.

A successful authenticated login resets this 12-month inactivity period.

Activities such as:

• opening an email;

• opening a magic-link email without successfully authenticating;

• visiting a publicly accessible Website page;

• receiving an automated message;

do not count as account activity.

After 12 months without a successful authenticated login, we will send a warning to the email address associated with the Account.

The warning will explain that the Account and associated User Content are scheduled for deletion unless the User successfully authenticates and logs into the Account within 30 days.

If the User successfully authenticates and logs in during this 30-day period, the scheduled deletion will be cancelled and the inactivity period will restart.

If no successful authenticated login occurs within the 30-day warning period, we may delete the Account and associated User Content.

7.3 Account deletion by the User

Users may request deletion of their Account and associated User Content using the account-deletion functionality available in their user profile.

After an Account deletion request, Account data and User Content will be deleted or anonymised unless we are required or permitted to retain specific information for another lawful purpose.

7.4 Financial and tax records

Certain transaction, invoice and accounting information must be retained because of statutory administration requirements.

Dutch tax rules generally require core business administration and invoices to be retained for 7 years. Certain records may be subject to a longer statutory retention period.

Deleting your Wood Cutting Plan Account therefore does not necessarily result in deletion of information that we must retain as part of our legally required financial administration.

7.5 Support and correspondence

Support requests and other correspondence are retained only for as long as reasonably necessary to resolve the request and for any legitimate follow-up, legal or evidentiary purpose.

7.6 Technical, authentication and security logs

Technical, authentication and security logs are retained for a limited period appropriate to their security, troubleshooting and fraud-prevention purpose, unless a longer period is reasonably necessary to investigate a security incident, abuse or legal issue.

Expired magic-link tokens and other temporary authentication data are not intentionally retained longer than necessary for authentication and security purposes.

7.7 Backups

Deleted data may remain temporarily in encrypted or otherwise protected backup systems until the relevant backups are overwritten according to our normal backup-retention cycle.

Backup copies are not restored for ordinary use after an Account has been deleted.

7.8 Cookies and analytics data

Cookie lifetimes are listed in our Cookie Policy. These lifetimes are separate from the retention of information collected through cookies. Google Analytics data is retained for 2 years, and HighLevel/LeadConnector visitor data is retained for 1 year.

8. Who do we share your personal data with?

We do not sell your personal data.

We may use third-party service providers where necessary to operate Wood Cutting Plan.

These may include providers of:

• cloud hosting and database infrastructure;

• passwordless authentication and magic-link delivery;

• payment processing;

• transactional email;

• customer support;

• security and error monitoring;

• analytics, where used;

• accounting or administration services.

These providers may process personal data only to the extent necessary for the relevant service and subject to applicable data-protection requirements.

Where a supplier acts as a processor on our behalf, we enter into the arrangements required by applicable data-protection law.

We may also disclose information:

• where required by law;

• in response to a valid request from a competent authority;

• where necessary to establish, exercise or defend legal claims;

• in connection with a merger, acquisition, restructuring or transfer of the Wood Cutting Plan business, subject to appropriate safeguards.

We do not share private User Content with other Users unless you deliberately use functionality that allows such sharing.

For website security and delivery, we use services supported by Cloudflare. With your consent, we use Google Analytics and HighLevel/LeadConnector to collect and analyse website visitor information, such as browser identifiers, pages visited and interactions.

9. International transfers

We aim to use providers and processing locations that offer appropriate protection for personal data.

Some service providers may process personal data outside the European Economic Area ("EEA").

Where personal data is transferred outside the EEA, we will ensure that a lawful transfer mechanism is used where required, such as:

• an adequacy decision adopted by the European Commission;

• Standard Contractual Clauses approved by the European Commission;

• another legally permitted transfer safeguard.

You may contact us if you would like more information about the safeguards applicable to a particular international transfer.

10. How do we protect your data?

We take appropriate technical and organisational measures designed to protect personal data against:

• unauthorised access;

• accidental loss;

• alteration;

• disclosure;

• destruction;

• misuse.

Measures may include, where appropriate:

• encrypted communications;

• passwordless authentication using time-limited or otherwise restricted login links;

• secure session management;

• access controls;

• restricted administrative access;

• backups;

• logging and monitoring;

• security updates;

• appropriate safeguards used by our infrastructure providers.

No internet-based system can be guaranteed to be completely secure. We therefore assess and maintain security measures appropriate to the nature of the Service and the risks involved.

11. Automated decision-making

Wood Cutting Plan automatically performs calculations and generates Cutting Plans based on information and preferences entered by the User.

These calculations are part of the functionality requested by the User.

We do not use personal data to make solely automated decisions that produce legal effects or similarly significant effects on individuals within the meaning of Article 22 GDPR, unless we specifically inform you otherwise.

12. Your privacy rights

Depending on the circumstances, the GDPR gives you the following rights.

Right of access

You may ask whether we process personal data about you and request access to that information.

Right to rectification

You may ask us to correct personal data that is inaccurate or incomplete.

Right to erasure

You may request deletion of your personal data where the legal requirements for deletion are met.

You may also delete your Wood Cutting Plan Account through your user profile.

The right to erasure does not apply where we are legally required or otherwise lawfully entitled to retain particular information.

Right to restriction of processing

In certain circumstances, you may ask us to restrict the processing of your personal data.

Right to data portability

Where processing is based on consent or a contract and is carried out by automated means, you may have the right to receive personal data you provided to us in a structured, commonly used and machine-readable format and, where technically feasible, have it transferred to another organisation.

Right to object

Where we process personal data on the basis of legitimate interests, you may object to that processing for reasons relating to your particular situation.

You may object to direct marketing at any time.

Right to withdraw consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Right to complain

If you believe we have processed your personal data unlawfully, you have the right to submit a complaint to the competent supervisory authority.

In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

You may also contact us first so that we can investigate your concern.

13. How can you exercise your rights?

You may submit a privacy request by contacting:

[email protected]

Please describe your request sufficiently clearly so that we can determine which data and right it concerns.

We may ask for information reasonably necessary to verify your identity. We will not request more identification information than necessary for this purpose.

We will respond within the period required by applicable data-protection law. In most cases this is within one month of receiving the request.

Where permitted by law, this period may be extended for complex or numerous requests, in which case we will inform you.

14. Children

Wood Cutting Plan is not directed at children.

We do not knowingly seek to collect personal data from children below the age at which they may lawfully use the Service or provide any required consent without parental authorisation.

If we become aware that personal data from a child has been collected in circumstances where parental authorisation was legally required, we will take appropriate steps to address this.

If you believe that a child has provided personal data to us in such circumstances, please contact us at [email protected].

15. Cookie policy

We use cookies and similar technologies on woodcuttingplan.com to secure the Website and, with your consent, understand how visitors use it.

Strictly necessary cookies

Cookies needed for authentication, maintaining a secure session and providing requested functionality may be used without consent where permitted by law.

We use Cloudflare security cookies, including __cf_bm, to detect bots and protect the Website and its supporting services against malicious traffic. These cookies may be set on woodcuttingplan.com, leadconnectorhq.com, images.leadconnectorhq.com and filesafe.space.

Where these cookies are strictly necessary, consent is not required. Related personal-data processing is based on our legitimate interest in maintaining a secure and reliable Website.

Analytics cookies

With your consent, we use:

• msgsndr_id — used by HighLevel/LeadConnector to identify visitors and track website activity; cookie lifetime: one year.

• _ga — used by Google Analytics to distinguish visitors; cookie lifetime: two years.

• _ga_* — used by Google Analytics to maintain session state; cookie lifetime: two years.

These technologies may process browser identifiers, pages visited, interactions and technical browser or device information. We use this information to understand website usage and improve the Website. The legal basis for this personal-data processing is your consent.

Your choices

Optional analytics cookies are only used after you consent. You can refuse them and continue using the Website’s core functionality.

You can change your preferences or withdraw consent at any time through “Cookie settings” on the Website. Withdrawal does not affect the lawfulness of processing before withdrawal.

Cookie settings provide the individual cookie domains and lifetimes. Cookie lifetimes are separate from the retention periods of information collected through cookies.

16. Changes to this Privacy Policy

We may update this Privacy Policy where necessary, for example because:

• Wood Cutting Plan changes;

• we use new service providers;

• our processing activities change;

• applicable law changes.

The current version will always be made available on the Website.

Where a change materially affects how we use your personal data, we will provide additional notice where appropriate or legally required.

The date of the most recent revision is shown at the beginning of this Privacy Policy.

17. Contact

If you have questions about this Privacy Policy or the processing of your personal data, please contact:

Salem Solutions, trading as Nerd in the Woods
Vleuten, the Netherlands
Chamber of Commerce no. 74941747
Email: [email protected]
Website: woodcuttingplan.com