Privacy Policy
This policy explains what WireMyPanel processes about you and why. The controller (owner of personal data under the Law of Ukraine “On Personal Data Protection”) is Dmytro Matvieiev, 10 Gnata Khotkevicha str., app. 99. Contact for any privacy question or request: i@wiremypanel.com.
1. What we process
Account
- Your email address (your sign-in identity) and, if you give one, a display name.
- Your password, stored only as a salted one-way hash. We never store or see the password itself, and it is never included in exports.
- When you joined, when you last signed in, when your email address was verified, and which Terms of Service version you accepted and when.
- Your access status: whether free launch access applies and, once subscriptions exist, until when a subscription is active.
Email verification and password reset
To verify an address, change it, or reset a password we email you a single-use link. Only a hash of the link's token is stored, with the address it was sent to and its expiry (24 hours for verification, 1 hour for password reset). We also email you when your password changes, when an email change is requested, or when someone tries to register with your address.
Your projects and uploads
Everything you create in WireMyPanel: project names, panels, DIN rails, equipment, terminal connections and wire routes, circuits, loads (including any manufacturer, model and power you enter), cables, electrical settings, installation records, revisions, and the photos and PDF files you upload. Your projects are visible only to your account, unless you create a passport link (below).
Passport links
If you create a project passport link (for example as a QR code), anyone who has the link can view that project's passport — its name, design, revision list and attached files — without signing in. A link is only created when you ask for it.
Security and rate-limit data
To prevent abuse we count recent sign-in, registration, password-reset and similar attempts per IP address, per email address and per account. The counters store only a one-way hash of the IP or address and expire within one hour at most.
Server logs
The application records errors needed to operate the service (for example a failed email delivery or an unreachable assistant service). The hosting infrastructure may record technical access logs, such as IP address, time and requested address. Access-log retention: [To be completed by the operator: access-log retention period].
2. The assistant
“Ask WireMyPanel” and Guided Design's description reading are optional. When the assistant is enabled on this service and you use it, your request is sent from our server to OpenAI (OpenAI Responses API) to generate the answer. What is sent:
- your question and the earlier messages of the same assistant conversation, or the description you typed into Guided Design;
- a compact summary of the relevant part of the open project: object names and designations, circuits and loads, calculated values, design-check findings, and relevant catalogue products.
The whole project document is not sent, and installation records, attachments, revisions, wire routes, your email address and your account details are never included. WireMyPanel does not store assistant conversations; they disappear when you close the project. OpenAI processes these requests under its own API terms. Requests may be processed in the United States (see section 7).
3. Why we process it (purposes and legal bases)
- Providing the service you signed up for — your account, sign-in, storing and showing your projects, files, exports, passport links and service emails. Basis: performance of our contract with you (the Terms of Service).
- Security and abuse prevention — rate limits, session protection, error logs. Basis: our legitimate interest in keeping the service and your data secure.
- The assistant — only when you use it, to answer your request. Basis: performance of our contract with you.
- Legal obligations — where the law requires us to keep or disclose information.
We don't sell your data, use it for advertising, or use your projects to train AI models.
5. Who processes data for us
- Hosting of the application, database and uploaded files: [To be completed by the operator: hosting provider and location].
- Delivery of account emails: [To be completed by the operator: email delivery provider].
- Assistant requests, when you use the assistant: OpenAI (section 2).
We don't share your data with anyone else except where required by law.
6. How long we keep it
- Account information and projects: until you delete them or your account.
- Records of emailed links: until your account is deleted. Unused links stop working when they expire.
- Sign-in sessions: until you sign out or they expire (14 days).
- Rate-limit counters: at most one hour.
- Access logs: [To be completed by the operator: access-log retention period].
- Backups: [To be completed by the operator: whether backups are made, and how long they are kept]. Deleted data can remain in a backup until that backup is overwritten or expires; it is not restored to the live service except to recover from a failure.
Deleting your account removes, from the live service, your account, your projects with their revisions and uploaded files, and your emailed-link records; your passport links stop working.
7. International transfers
Your data is stored where our hosting provider operates ([To be completed by the operator: hosting location]). If you use the assistant, requests are processed by OpenAI, which may process them in the United States. Where the law requires safeguards for such transfers, they are provided through the providers' data-processing terms (for example standard contractual clauses).
8. Your choices and rights
- Access and portability: download your account data and all your projects as JSON from Account, or any single project from your project list.
- Correction: change your name, email address and password in Account.
- Deletion: delete your account and all projects in Account.
Under the Law of Ukraine “On Personal Data Protection” you may also object to processing, ask us to restrict or stop it, and complain to the Ukrainian Parliament Commissioner for Human Rights. If you live elsewhere, you may also have rights under your local law, including complaining to your data-protection authority. To exercise any right, email i@wiremypanel.com from your account address; we may need to confirm it's you.
9. Security
Passwords are hashed, sessions use HttpOnly cookies sent only over HTTPS in production, requests that change data are protected against cross-site forgery, sign-in attempts are rate-limited, and every project request is checked against its owner. No system is perfectly secure; if a breach affects your data we will inform you as the law requires.
10. Children
WireMyPanel is not directed at children, and we don't knowingly process children's data.
11. Changes
When this policy changes, the new version and its effective date appear at the top of this page; we will tell you about material changes by email or in the application.