Last updated: 31 October 2026
This policy explains how Strategic Planning Software (SPS) uses personal information when you visit the website, create an account, use planning tools or contact support.
SPS is operated by Manuel Fernandes, who is the data controller responsible for the personal information described in this policy. For privacy questions or requests, email [email protected].
If you choose Google sign-in, Google provides your Google account identifier, name and verified email address. We use these to identify you, create your account or link an existing account with the same verified email. We store the Google account identifier with your SPS account. We do not store Google access or refresh tokens, and this sign-in integration does not request access to Gmail, Google Drive or your contacts.
You can manage SPS access in your Google account connections. Removing that connection does not automatically delete your SPS account or planning content; contact us to request deletion.
We use account and planning information to provide the service you request, manage access, save your work, process purchases and respond to support requests. Where data protection law requires a legal basis, these activities are carried out to perform our contract with you or take steps at your request before a contract.
We use technical and usage information for our legitimate interests in securing the service, preventing misuse and diagnosing faults. We process records when needed to meet legal obligations. Optional analytics relies on your consent, which you can withdraw through Cookie settings in the footer.
Other users with access to a shared project can see its content. Only include information you are authorized to share, and consider project access before entering personal or confidential material.
Hosting, email and technical service providers process information needed to operate SPS. When you use AI features, relevant project context, instructions and research queries are sent to the configured AI and search providers to produce the requested results. Their processing is subject to their own terms and privacy policies; contact us for details of the providers used for your account.
Google processes sign-in information and, if you consent, analytics information under Google's privacy policy.
Information may also be disclosed where required by law or necessary to investigate misuse and protect the service or others' rights. Service providers may process information outside your country, including outside the European Economic Area. Contact us for information about the providers, processing locations and transfer safeguards applicable to your account.
We do not use your project content, AI instructions or AI outputs to train AI models. AI requests sent through OpenRouter enable Zero Data Retention (ZDR) routing and exclude model providers that collect request data for training.
These controls apply to model inference under OpenRouter's ZDR policy, including its safety and legally required retention exceptions. ZDR does not mean that no information is stored anywhere: SPS retains saved project content and operational records as described in this policy, and diagnostic logging may record AI requests and responses when enabled. Separate search services follow their own retention policies.
Account and project information is retained while needed to provide the service. Payment, usage, security and support records may need to be retained after account closure to meet legal obligations, resolve disputes or investigate misuse. Retention depends on the purpose and applicable requirements; contact us to request deletion or information about a particular record.
Passwords are stored as hashes. Account permissions and session controls restrict access, but no online system can guarantee absolute security. Keep your credentials private and avoid including unnecessary personal information in planning content or support messages.
You can update account details through your profile and change optional cookie consent through Cookie settings. Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing of your personal information. You can withdraw consent where processing is based on consent; withdrawal does not affect processing already carried out lawfully.
Email [email protected] to exercise these rights. We may need to verify your identity before acting on a request. You may also complain to your local data protection authority; the European Data Protection Board provides a list of European supervisory authorities.
We may update this policy as the service changes. The date above identifies this version. For privacy questions, account deletion or information about data processing, contact Manuel Fernandes at [email protected].