Privacy Policy – MakersCorner

1. Introduction

MakersCorner ("we", "us", "our") is committed to protecting your privacy and complying with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African data protection laws.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit makerscorner.co.za and use our services, including the CutList Pro application at cutlist.makerscorner.co.za.

2. Information We Collect

2.1 Account Information

When you create an account on CutList Pro, we collect:

Email address
Display name (provided by you or derived from your email)
Authentication provider used (email/password or Google sign-in)
Account creation date

2.2 Usage and Analytics Data

When you use CutList Pro as an authenticated user, we automatically collect usage data to understand how the tool is used and to improve our services. This includes:

Cabinet configurations: type (base, upper, drawer), dimensions (width, height, depth), options selected (doors, back panel, shelves, edge banding)
Drawer configurations: number of drawers, runner type, cabinet width
Actions performed: cut list generation, CSV export, print actions, project save/load
Session information: referrer, screen width, browser user agent

Important: We do not track configuration data while you are not signed in. Usage analytics are only recorded for authenticated users at the point of export or print.

2.3 Feedback Data

If you choose to complete our optional feedback form after exporting a cut list, we collect:

What you are building the cut list for (e.g., kitchen, bedroom, garage)
How you discovered CutList Pro
Whether you would send a cut list directly to a supplier
Any free-text comments you provide about pain points

2.4 Project Data

If you save projects within CutList Pro, your cabinet configurations, drawer configurations, and custom items are stored in your account. This data is associated with your user account and accessible only to you.

2.5 Automatically Collected Information

When you visit our website, we may automatically collect:

IP address and approximate location
Browser type and version
Device information
Pages visited and time spent
Referring website addresses

2.6 Contact Form Data

When you use our contact form on the main website, we collect your name, email address, phone number, and the content of your inquiry.

3. How We Use Your Information

We use your personal information for the following lawful purposes under POPIA:

To provide, maintain, and improve CutList Pro and our services
To authenticate your identity and manage your account
To analyse usage patterns and understand what South African makers are building, in order to improve the tool and develop new features
To aggregate anonymised usage statistics (e.g., most popular cabinet widths, common configurations) for product development and potential supplier partnerships
To respond to your inquiries and provide customer support
To send service-related communications (e.g., account verification emails)
To comply with legal obligations
To detect, prevent, and address technical issues or fraud

We do not sell your personal information to third parties.

4. Legal Basis for Processing (POPIA)

Under POPIA, we process your personal information based on one or more of the following conditions:

Consent: You provide consent when creating an account and using our services
Contractual necessity: Processing is necessary to provide the services you have requested
Legitimate interest: We have a legitimate interest in understanding how our tool is used in order to improve it, provided this does not override your rights
Legal obligation: Processing is necessary to comply with applicable laws

5. Data Storage and Security

Your data is stored on Supabase, a cloud-hosted PostgreSQL database service. Supabase provides:

Encryption in transit (TLS/SSL)
Encryption at rest for stored data
Row-level security policies ensuring users can only access their own data
Regular security updates and monitoring

Authentication is handled through Supabase Auth, which supports industry-standard security practices including secure password hashing and OAuth 2.0 for Google sign-in.

While we implement appropriate technical and organisational measures to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:

Account information: Retained until you delete your account
Usage analytics data: Retained for up to 24 months, after which it is anonymised or deleted
Feedback responses: Retained indefinitely in anonymised/aggregated form for product development
Project data: Retained until you delete the project or your account

You may request deletion of your account and associated data at any time by contacting us.

7. Data Sharing and Third Parties

We may share your information in the following circumstances:

Service providers: We use Supabase (database hosting), Vercel (website hosting), and Google (OAuth authentication). These providers process data on our behalf under appropriate data processing agreements.
Aggregated data: We may share anonymised, aggregated usage statistics with potential business partners (e.g., board suppliers) that cannot be used to identify you personally.
Legal requirements: We may disclose your information if required by law, regulation, or legal process.

We will never share your individual project data, cabinet configurations, or personal contact details with third parties without your explicit consent.

8. Your Rights Under POPIA

As a data subject under POPIA, you have the right to:

Be notified when your personal information is collected
Request access to your personal information we hold
Request correction of inaccurate personal information
Request deletion of your personal information
Object to the processing of your personal information
Not be subject to automated decision-making that produces legal effects
Lodge a complaint with the Information Regulator

To exercise any of these rights, contact us at hello@makerscorner.co.za.
Information Regulator (South Africa): inforegulator.org.za

9. Cookies and Local Storage

CutList Pro uses the following browser storage mechanisms:

Supabase authentication tokens: Stored in browser local storage to keep you signed in between sessions
Session state: Temporarily stored in session storage to preserve your work during the sign-in process (e.g., if you sign in via Google OAuth, your cabinet configurations are preserved)
Feedback status: A flag in local storage records whether you have completed the feedback form, so you are not asked repeatedly
Terms acceptance: A flag in local storage records that you have accepted the terms of service

You can clear this data at any time through your browser settings. Clearing authentication tokens will require you to sign in again.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify registered users of material changes via email. The "Last Updated" date at the top of this policy indicates when it was last revised.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your POPIA rights, please contact us at:

Email: hello@makerscorner.co.za
Website: makerscorner.co.za