Privacy Policy

Effective Date: 24 March 2026

Planalyze is a service operated by Quasar Pacific Consulting Limited ("we", "us", "our"). We are committed to protecting your personal information and handling it in accordance with the New Zealand Privacy Act 2020, and, where applicable, the Australian Privacy Act 1988 and the EU General Data Protection Regulation (GDPR).

This Privacy Policy explains what information we collect, why we collect it, how we use and store it, and your rights in relation to it. By using Planalyze at https://planalyze.digital, you agree to the practices described in this policy.

1. Who We Are

Legal entity: Quasar Pacific Consulting Limited, registered in New Zealand.

Product/service: Planalyze — a cloud-based visual modeling and portfolio management platform.

Contact: info@planalyze.digital

2. Information We Collect

2.1 Account Information

When you create a Planalyze account, we collect and store the following:

  • Email address — used to identify your account and send service communications. This is provided by you directly (for email/password sign-up) or received from Google (for Google Sign-In).
  • Name and surname — provided by you when you set up your profile, used to personalize your account display.
  • Account role — your role within your organization's Planalyze account (e.g. administrator, user, viewer).

When you sign in using Google OAuth, we also receive your Google profile picture. We do not store your profile picture — it is displayed directly from Google's servers during your session only.

We do not request access to your Google Calendar, Gmail, Google Drive, or any other Google service. We only request the minimum scopes necessary to identify you (email and basic profile).

2.2 Information You Provide

This includes any content you create within Planalyze, such as portfolios, models, metamodels, diagrams, and other modeling artifacts.

2.3 Usage and Technical Data

Our servers automatically log basic request information as part of normal operation. This may include timestamps, request paths, and error information. This data is used solely for diagnosing issues and maintaining the service. We do not use third-party analytics or tracking services.

2.4 Cookies and Similar Technologies

Planalyze does not use cookies. We use your browser's localStorage solely to remember the last page you visited in Planalyze, so that you can be redirected back to it after signing in. No personal information is stored in localStorage, and this data never leaves your device.

3. How We Use Your Information

We use the information we collect to:

  • Create and manage your account
  • Provide and improve the Planalyze service
  • Respond to support requests and inquiries
  • Send important service notices (e.g. security updates, policy changes)
  • Send transactional emails (e.g. account invitations)
  • Comply with our legal obligations

We do not use your data for advertising purposes, and we do not sell your personal information to third parties.

4. Google API Services User Data Policy

Planalyze's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only use Google user data to provide or improve the Planalyze service.
  • We do not transfer Google user data to third parties except as necessary to provide the service, as required by law, or with your explicit consent.
  • We do not use Google user data for advertising.
  • We do not allow humans to read your Google user data unless you have given us explicit permission, it is necessary for security purposes, or we are required to do so by law.

5. Data Storage and Security

Your data is stored on infrastructure provided by Google Cloud Platform (GCP) for application hosting and MongoDB Atlas for database storage. Both services operate data centers in the Sydney, Australia region. We take reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction.

These measures include:

  • Encrypted data transmission (HTTPS/TLS)
  • Secure authentication via Firebase Authentication (supporting both email/password and Google OAuth)
  • Access controls limiting who can view your data
  • Account-level data isolation ensuring your data is not accessible to other accounts

No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as necessary to provide the service. If you close your account, we will delete or anonymize your personal information within a reasonable timeframe, unless we are required to retain it by law.

7. Sharing Your Information

We do not sell, rent, or trade your personal information. We may share your information with:

  • Service providers who assist us in operating the platform (e.g. cloud hosting, email delivery), who are bound by confidentiality obligations.
  • Law enforcement or regulatory authorities, where required by applicable law.
  • A successor entity in the event of a merger, acquisition, or sale of assets — in which case we will notify you.

8. International Data Transfers

Planalyze is operated from New Zealand and uses cloud infrastructure based in Sydney, Australia — specifically Google Cloud Platform for application hosting and MongoDB Atlas for database storage. Your data is stored and processed in Australia. Both Google and MongoDB maintain comprehensive data security programs and are subject to appropriate data protection safeguards. We take steps to ensure that any international transfers of your data are handled responsibly and in accordance with applicable privacy law.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: request a copy of the personal information we hold about you.
  • Correction: request that we correct inaccurate or incomplete information.
  • Deletion: request that we delete your personal information (subject to legal obligations).
  • Objection / Restriction: object to or request restriction of certain processing.
  • Portability: request your data in a structured, machine-readable format. Planalyze provides a built-in data export feature that allows you to download your content at any time.

To exercise any of these rights, please contact us at info@planalyze.digital. We will respond within a reasonable timeframe and no later than required by applicable law.

10. Children's Privacy

Planalyze is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at info@planalyze.digital and we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by prominently displaying a notice in the application. Your continued use of Planalyze after any changes constitutes your acceptance of the updated policy.

The current version of this policy is always available at https://planalyze.digital/privacy.

12. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our handling of your personal information, please contact us:

Quasar Pacific Consulting Limited
Email: info@planalyze.digital
Website: https://planalyze.digital

If you are located in New Zealand and are not satisfied with our response, you may contact the Office of the Privacy Commissioner at www.privacy.org.nz.