Privacy Policy

Last updated: 8 October 2026

This policy explains what personal data Virtuino Circuits (circuits.virtuino.com) processes and why. The controller is the Virtuino team, which operates the Service, support@virtuino.com. We keep things simple: we store what the Service needs and nothing more.

1. Using the Service without an account

You can draw and simulate without telling us who you are. Your current drawing and your settings are kept in your own browser (local storage) and never sent to us. Our web server keeps standard access logs (IP address, time, page requested, browser type) for security and troubleshooting, deleted after 30 days.

We use no advertising, no tracking cookies and no analytics services.

2. Account data

If you create an account we store:

your e-mail address (used to sign in, to send the activation link, password resets and important notices about your plan — no newsletters unless you ask),
an optional name,
your password, stored only as a one-way hash,
your plan, its dates and, for educators, your request for the educator price (the text you wrote is deleted once we decide),
dates of account creation and last sign-in.

If you sign in with Google, Google gives us your e-mail address and name; we store nothing else from your Google account.

Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR) and our legitimate interest in keeping accounts secure (Art. 6(1)(f)).

3. Your drawings

With Pro, the drawings you choose to save are stored in your account, including any images you placed in them. They are private; we access them only to solve a problem you report or where the law requires. Drawings may contain personal data if you type it in (for example a customer's name in a title block) — you decide what you put there. Cloud drawings are kept while your account exists and for 12 months after a Pro plan ends; you can delete them at any time.

4. Payments

Payments are handled by Paddle.com Market Ltd (United Kingdom / Ireland), our merchant of record. Paddle collects your payment details, billing address and tax information under its own privacy policy; we never see your card number. We store the Paddle customer and subscription identifiers, the transaction identifier, the amount, the tax and the plan, which we must keep for as long as accounting and tax law require.

5. Service providers

Google Cloud — hosting of the Service and its database, in a data centre in the European Union.
Resend — sending of our e-mails (activation, password reset, plan notices).
Paddle — payments, as above.
Cloudflare Turnstile — protection of the sign-in and registration forms against automated abuse; it may process your IP address and browser signals.
Google Sign-In — only if you choose to sign in with Google.

These providers process data on our behalf under data-processing agreements. Where data leaves the EU (Resend, Cloudflare, Google Sign-In), transfers rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

6. Schools and students

Under a school licence, the school creates student accounts with a username and password and no e-mail address. For those accounts the school is the controller and we process the data on its instructions. Students can also use the free version with no account at all.

7. How long we keep data

Account data: until you delete your account, or after 3 years without any sign-in (we e-mail you before deleting).
Drawings: as described in section 3.
Payment records: as long as accounting and tax law require.
Server logs: 30 days.

8. Your rights

You can ask us to access, correct, export or delete your data, to restrict or object to processing, and you can complain to the data protection authority of your country. To exercise your rights, write from your account e-mail to support@virtuino.com. Deleting your account removes your account data and drawings; payment records are kept as required by law.

9. Security

Connections are encrypted (HTTPS), passwords are stored as hashes, sign-in is protected against brute force, and the database is backed up. No system is perfectly secure; if a breach affects your data we will inform you as the law requires.

10. Changes

We may update this policy; the date at the top shows the latest version. For material changes we notify account holders by e-mail.