PQuant Oy ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, process, store, and protect personal data when you visit our website patakeoff.com (including its subdomains and release pages) or purchase, install, and use our Takeoff desktop application.
1. Data Controller
Company: PQuant Oy
Email: privacy@poitakeoff.com
Address: Helsinki, Finland
2. Core Principle: Local-First Privacy
The Takeoff desktop application (built on the Tauri framework) is designed around a local-first architecture. This means:
- No Cloud Storage of Project Files: All imported PDF blueprints, takeoff measurements, closed polygon area calculations, formulas, cost assemblies, SQLite databases, and user settings are stored locally on your device in self-contained project archives (
.ptko).
- No Access to Blueprints: We do not have access to, nor do we ever upload, copy, or transmit your blueprint drawings or measurements to our servers or any third-party cloud.
- Full Data Ownership: As the user, you retain complete and exclusive ownership and physical control of all your project files.
3. Information We Collect and Process
Although our desktop application is offline-first, some features require limited network communication or local data processing. We process information for the following specific purposes:
A. License Activation and Verification
When you purchase a license, the Takeoff desktop application must verify the key to activate the software. This involves:
- License Verification Network Request: The application connects securely to our licensing endpoint (
api.poitakeoff.com) to check the validity of your license key and download a cryptographically signed JSON Web Token (JWT) license state.
- Hardware Identity Hash: To prevent unauthorized copying and verify that license usage complies with your purchased tier, the application generates a cryptographic hardware hash locally based on hardware components (such as CPU or motherboard serial numbers). This hash is transmitted to our server during activation. It is hashed before transit, making it mathematically irreversible, and is used strictly to count the number of active devices linked to your license key.
B. Trial Period Evaluation
To support the free 30-day trial without requiring user registration or credit cards:
- A local, device-specific trial token is generated and signed with an HMAC signature. This token uses the local hardware identity hash and timestamps to track remaining trial days.
- This trial mechanism is entirely offline and device-local. No trial tracking details or hardware hashes are transmitted to our servers during the trial period.
C. Automatic Application Updates
The desktop application includes an automatic update checker to ensure you receive security patches and new features:
- The app periodically queries our release server (hosted on GitHub Pages or
patakeoff.com) to see if a newer version of the software is available.
- This request sends basic metadata, including your current application version and operating system architecture (e.g., Windows x64), to deliver the correct installer. No personal identifiers are transmitted.
D. Website Transactions and License Purchases
When you purchase a license on our website:
- Payment Processing: All transactions are securely processed by our third-party payment provider, Stripe Inc. We do not collect, process, or store your credit card numbers or financial credentials in our systems. Stripe handles this in compliance with PCI-DSS standards.
- Purchase Details: We collect your email address and basic transaction metadata to generate and deliver your activation code, issue receipts, and manage your license record.
E. Support and Direct Communication
If you contact us via email (e.g., for support or general inquiries), we process your email address, name, and the text contents of your message to assist you and resolve the inquiry.
4. Third-Party Data Processors
We do not sell, rent, or trade your personal data. We share information only with trusted processors necessary to deliver our services:
- Stripe Inc.: Payment processing.
- Resend / SendGrid: Email delivery services used to automatically dispatch license keys, invoices, and receipts.
- GitHub / Microsoft: Hosting of update binaries and release distribution.
5. Absence of Telemetry and Analytics
We believe in absolute workspace privacy. The Takeoff desktop application contains no telemetry, no behavior tracking, and no usage analytics. We do not track your clicks, mouse movements, active design hours, project names, or keystrokes inside the editor.
6. Cookies (Website Only)
Our marketing website uses cookies to store user preferences (such as your chosen language) and analyze basic site traffic. You can manage your choices at any time. For more information, please see our Cookie Policy. The desktop application itself does not use cookies.
7. GDPR Data Subject Rights
Under the European Union General Data Protection Regulation (GDPR), users have the following rights regarding their personal data:
- Access: The right to request copies of your personal data held by us.
- Rectification: The right to request corrections of inaccurate or incomplete data.
- Erasure: The right to request the deletion of your personal data under certain conditions ("right to be forgotten").
- Restriction & Objection: The right to limit or object to how we process your personal data.
- Data Portability: The right to request transfer of your data to another organization.
To exercise any of these rights, please contact us at privacy@poitakeoff.com. We will respond within 30 days.
8. Data Security
We use industry-standard technical and organizational security measures to protect your personal data. All network traffic to our website and license API is secured using HTTPS (SSL/TLS encryption). Local license state tokens are signed cryptographically to prevent tampering.
9. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our app features or regulatory obligations. The date of the last revision will always be displayed at the top of the page.