Privacy Policy

Turnella is the “data controller” for the purposes of the GDPR. If you have any question about this policy or want to exercise your rights, contact us at privacy@turnella.com.

We keep data collection to the minimum needed to run the service:

• Account data — if you create an account, your email address and a securely hashed password (handled by our authentication provider; we never see or store your password in plain text).
• Planning data you enter — the operational information you choose to put into the app: workstreams, historical volumes, forecasts, requirements, shift schedules, cost assumptions and scenarios. This is business planning data, not special-category personal data, and you control what you enter.
• Technical data — standard server logs (such as IP address and request time, used for security and reliability) and privacy-friendly, aggregated usage analytics that do not use cookies and do not track you across other websites.

The free calculators do not require an account and do not save your inputs to our servers — they run in your browser.

Turnella uses only strictly necessary cookies — specifically, the secure session cookie that keeps you signed in. These are exempt from consent requirements under the ePrivacy rules because the service cannot work without them.

Our usage analytics are cookieless and aggregated: they measure page views and general usage patterns without storing identifiers on your device or building a profile of you. Because of this, Turnella does not show a cookie-consent banner — there are no advertising, profiling or cross-site tracking cookies to consent to.

• To provide the service you asked for (GDPR Art. 6(1)(b), performance of a contract) — storing your plans, syncing them across your devices, and keeping you signed in.
• To keep the service secure and working (Art. 6(1)(f), legitimate interests) — server logs, abuse prevention, and aggregated analytics to understand and improve how the product is used.
• To comply with the law (Art. 6(1)(c)) — where we are legally required to retain or disclose information.

We use a small number of trusted sub-processors, each bound by data-processing terms. We do not sell your data and we do not share it with advertisers.

• Supabase — database and authentication (stores your account and the plans you save). See Supabase’s privacy policy.
• Vercel — application hosting and cookieless analytics. See Vercel’s privacy policy.

Our database is hosted in the European Economic Area (Frankfurt, Germany). Our application is served via Vercel’s global edge network, which may route requests through servers in other countries. Where data is processed outside the EEA, it is protected by appropriate safeguards recognised under the GDPR, such as Standard Contractual Clauses.

We keep your account and planning data for as long as your account is active, so the service works for you across devices. You can erase your data or your entire account at any time (see below); once deleted, it is removed from our live systems immediately and purged from routine backups within a short period.

Under the GDPR you have the right to:

• Access and portability — get a full copy of your data. Use Export my data (JSON) in your Account page.
• Erasure (“right to be forgotten”) — delete your planning data, or permanently delete your whole account and email, from the same Account page. Account deletion is immediate and irreversible: your cloud data is erased and your session is invalidated on all devices. Deletions propagate to your other signed-in devices the next time they sync, so deleted data is not restored from another device.
• Rectification — correct your data by editing it directly in the app.
• Restriction and objection — ask us to limit or stop certain processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any right that is not self-service, email privacy@turnella.com. You also have the right to lodge a complaint with your local data-protection authority (for example, the CNPD in Portugal, or the supervisory authority in your country).

Where Turnella offers optional AI-assisted insights, only aggregated, model-level metrics are sent to the AI provider to generate a summary. We do not send raw personal data, individual names, or contact records to third-party AI services.

Turnella is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16.

We may update this policy as the product evolves. When we do, we will revise the “last updated” date above, and for material changes we will make the update clear within the app.