Privacy Policy - DIY projects plans

Pshichenko Enterprises Inc.
Operating as Good DIY Plans

Effective Date: February 21, 2026 | Version 2.0

1. Introduction and Scope

This Privacy Policy (“Policy”) describes how Pshichenko Enterprises Inc., operating as Good DIY Plans (“Company,” “we,” “us,” or “our”), collects, uses, stores, shares, and protects personal information when you interact with any of our products, services, platforms, or applications. By using any of our services, you acknowledge that you have read, understood, and agree to the practices described in this Policy.

This Policy applies to the following services and platforms (collectively, “Services”):

– Website: gooddiyplans.com, including all pages and content hosted thereon
– Online Store: Our WooCommerce-powered store on gooddiyplans.com
– Etsy Shop: Our storefront at etsy.com/shop/GoodDIYplans
– Desktop Applications: Our desktop software, including the GoodDIYPlans Content Manager
– YouTube Channel: Our YouTube channel and associated content
– Downloadable Products: PDF building plans and digital products sold through any platform
– Email Communications: Any email sent to or from [email protected]

If you do not agree with this Policy, you must discontinue use of all Services immediately.

2. Information We Collect

2.1 Information You Provide Directly

When you interact with our Services, you may voluntarily provide us with the following personal information:

– Contact Information: Full name, email address, mailing or billing address, and telephone number
– Payment Information: Credit card numbers, billing addresses, and other payment details. We do not store your full credit card information on our servers. All payment processing is handled entirely by our third-party payment processors (see Section 4).
– Account Information: If you create an account on our website, your username and profile details
– Order Information: Products purchased, order dates, quantities, and transaction history
– Form Submissions: Any information you submit through contact forms on our website (processed by WPForms)
– User-Submitted Content: If you submit content through our website, the content itself along with your name, email address, and IP address
– Comments: If you leave a comment on our website, your name, email address, website URL (if provided), IP address, and browser user agent string
– Email Subscriptions: If you subscribe to our newsletter, your email address and the IP address and timestamp at the time of signup

2.2 Information Collected Automatically

When you visit our website, the following information may be collected automatically:

– Server Logs: Our hosting provider (HostGator) automatically records server access logs for every request to our website. These logs include your IP address, the date and time of your visit, the pages you accessed, your browser type and version, and your device’s user agent string. These logs are maintained for security, performance monitoring, and compliance with legal obligations.
– Google Analytics: We use Google Analytics to understand how visitors interact with our website. Google Analytics collects anonymized usage data including pages visited, session duration, traffic sources, and general geographic location. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout.
– Cookies and Similar Technologies: Information collected through cookies and similar technologies as described in Section 8 of this Policy.
– Spam Filtering: If you submit a comment on our website, your comment data (including name, email, IP address, user agent, and comment content) is automatically transmitted to Akismet (operated by Automattic Inc.) for spam evaluation. Learn more about how Akismet processes your data at https://akismet.com/privacy/.
– Bot Protection: We use Cloudflare Turnstile to verify that website visitors are human. Turnstile collects behavioral telemetry data including your IP address and browser characteristics. Turnstile does not deploy persistent tracking cookies. Learn more at https://www.cloudflare.com/privacypolicy/.

2.3 Information from Third-Party Platforms

When you purchase our products through third-party platforms, those platforms may share certain information with us:

– Etsy: When you purchase from our Etsy shop, Etsy provides us with your name, shipping address, email address, and order details for the purpose of order fulfillment. Our handling of Etsy buyer data is described in Section 6.
– Amazon: We participate in the Amazon Services LLC Associates Program. Amazon may provide us with aggregate, anonymized commission reports. We do not receive your personal purchase information from Amazon.
– YouTube / Google: If you interact with our YouTube channel, Google may provide us with aggregated analytics data. We do not receive personally identifiable information from YouTube unless you contact us directly.

3. How We Use Your Information

We use the information we collect for the following purposes:

– Order Fulfillment: To process and deliver your purchases, send order confirmations, and deliver digital plan files via email
– Payment Processing: To process payments securely through our third-party payment processors
– Communication: To respond to your inquiries, provide customer support, and send transactional emails such as order confirmations and delivery notifications
– Email Marketing: If you have voluntarily subscribed to our newsletter through our website, to send you information about new plans, products, or features. You may unsubscribe at any time using the link provided in every marketing email.
– Analytics and Improvement: To analyze usage patterns, diagnose technical issues, improve our website and products, and develop new features
– Security: To detect, prevent, and address fraud, spam, abuse, and technical issues
– Tax Compliance: To calculate and remit applicable sales taxes using automated tax services
– Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable government requests

We do not sell your personal information to third parties. We do not use your personal information for automated decision-making or profiling.

4. Third-Party Service Providers and Data Sharing

We share personal information only with third-party service providers who are necessary to operate our Services. Each provider receives only the minimum information required to perform its function. We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

4.1 Payment Processing

– WooPayments (powered by Stripe): Processes credit and debit card payments on our website. Your billing information and transaction details are transmitted directly to Stripe’s servers for processing. We do not store your credit card information. Privacy policy: https://stripe.com/privacy
– PayPal: Processes PayPal payments on our website through the WooCommerce PayPal Payments integration. When you pay via PayPal, your name, email, shipping address, and transaction amount are transmitted to PayPal. PayPal acts as an independent data controller for this information. Privacy policy: https://www.paypal.com/us/legalhub/privacy-full
– Etsy Payments: Processes payments for transactions on our Etsy shop. Privacy policy: https://www.etsy.com/legal/privacy/

4.2 Hosting and Infrastructure

– HostGator: Hosts our website on shared hosting servers. HostGator automatically collects server access logs (including IP addresses, timestamps, and pages accessed) for security and performance purposes. HostGator may disclose server log data to law enforcement upon receipt of a valid subpoena or court order.
– WordPress: Our website is built on the WordPress content management system. WordPress processes data related to user accounts, comments, and site functionality. WordPress sets functional cookies as described in Section 8.
– Cloudflare: Provides DNS and security services, including the Turnstile bot protection described in Section 2.2. Privacy policy: https://www.cloudflare.com/privacypolicy/

4.3 Email and Marketing

– Email Delivery: We use email services to send transactional emails such as order confirmations and plan delivery.
– Mailchimp (Intuit): If you voluntarily subscribe to our newsletter through our website, your email address and signup information are transmitted to Mailchimp for email marketing management. Mailchimp collects subscriber email addresses, IP addresses at time of signup, estimated geographic location, and email interaction data (open rates and link clicks) via tracking pixels. You may unsubscribe at any time. Privacy policy: https://www.intuit.com/privacy/statement/

4.4 Analytics and Advertising

– Google Analytics: Collects anonymized website usage data as described in Section 2.2. Privacy policy: https://policies.google.com/privacy
– Google for WooCommerce: We use this integration to synchronize our product catalog with Google Merchant Center for product listing purposes. Depending on configuration, this may include product data such as titles, descriptions, pricing, and availability. Privacy policy: https://policies.google.com/privacy

4.5 Spam and Security

– Akismet (Automattic): Filters comment spam as described in Section 2.2. Privacy policy: https://akismet.com/privacy/
– Cloudflare Turnstile: Bot protection as described in Section 2.2.

4.6 Tax Calculation

– WooCommerce Tax (Automattic): Customer shipping and billing addresses and cart contents are transmitted to Automattic’s servers in real time to calculate jurisdiction-specific tax rates. Privacy policy: https://automattic.com/privacy/

4.7 Media Optimization

– Imagify (WP Media): Images uploaded to our website may be transmitted to Imagify’s external servers for file size optimization. Images are temporarily stored on their servers (typically less than 24 hours) before being returned to our server and deleted from theirs. Privacy policy: https://imagify.io/privacy-policy/

5. Pinterest API Integration (Desktop Application)

This section specifically addresses how our GoodDIYPlans Content Manager desktop application interacts with the Pinterest API. This section is provided in compliance with Pinterest’s Developer Terms and API guidelines.

5.1 What the Application Does

The GoodDIYPlans Content Manager is a personal-use desktop application that connects to a Pinterest Business account via the Pinterest API to publish content (pins) to Pinterest. The application is used solely by the business owner to manage content publishing.

5.2 Pinterest Data We Access

When you connect a Pinterest account to the application, authorization is granted to access specific account information via secure authorization protocols. The application accesses:

– OAuth access tokens and refresh tokens, used to authorize API requests on your behalf
– Your Pinterest username and account ID, used to display connection status within the application
– Your Pinterest board names and board IDs, used to allow selection of which board to publish pins to
– The ability to create and publish pins to your selected board

5.3 How Pinterest Data Is Stored

Our application operates entirely locally on the user’s device. All Pinterest data is stored exclusively on the local computer where the application is installed:

– OAuth tokens, username, and board information are stored in the application’s local configuration directory
– No Pinterest data is transmitted to, stored on, or backed up to any external server, cloud service, database, or remote storage
– No Pinterest data is stored on gooddiyplans.com or any other online service

5.4 How Pinterest Data Is Used

Pinterest data is used exclusively to authenticate API requests, display connection status, retrieve your board list for publishing selection, and create and publish pins to your selected board.

We do not use Pinterest data for any other purpose. We do not sell, share, rent, or disclose your Pinterest data to any third party. We do not combine Pinterest account information with information from other users’ accounts or with information from other services. The only data transmission that occurs is between your local computer and Pinterest’s official API servers (api.pinterest.com).

5.5 Pinterest Data Retention

– Access Tokens: Retained locally until they expire (approximately 30 days) or until you disconnect your account, whichever occurs first
– Refresh Tokens: Retained locally until they expire (approximately 365 days) or until you disconnect your account, whichever occurs first
– Account and Board Information: Retained only while your account is connected
– Upon Disconnection: When you disconnect your Pinterest account from the application, all Pinterest-related data — including tokens, username, and board information — is permanently deleted from local storage

5.6 Revoking Pinterest Access

You can revoke the application’s access to your Pinterest account at any time:

– Within the Application: Click the “Disconnect” button. This immediately deletes all locally stored Pinterest data.
– Through Pinterest Directly: Visit https://www.pinterest.com/settings/apps/ to review and revoke access for any connected application.

If you revoke access through Pinterest’s settings, we recommend also disconnecting within the application to ensure all locally stored data is deleted.

5.7 Pinterest’s Privacy Policy

Your use of Pinterest is also governed by Pinterest’s own Privacy Policy, available at: https://policy.pinterest.com/en/privacy-policy

6. Etsy Marketplace Data

When you purchase our products through our Etsy storefront, Etsy provides us with specific information necessary to fulfill your order, including your name, email address, and shipping information. We act as an independent data controller for this information and process it strictly for order fulfillment, customer support, and compliance with tax and legal obligations.

We do not use Etsy buyer data for marketing purposes. We do not add Etsy buyers to our email newsletter or any third-party mailing list without your explicit, separate consent provided through an independent signup mechanism. Etsy buyer data is never combined with promotional mailing lists.

For information on how Etsy processes your personal data, please consult the Etsy Privacy Policy at https://www.etsy.com/legal/privacy/.

7. Affiliate Program and Amazon Associates

This website and our downloadable products participate in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.com. As an Amazon Associate, I earn from qualifying purchases.

When you click an Amazon affiliate link on our website or in our products, Amazon places a tracking cookie on your browser to attribute the sale to our site and calculate commissions. This tracking is governed by the Amazon Privacy Notice, available at https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ.

We receive only aggregate commission reports from Amazon. We do not receive your personal purchase information through the affiliate program.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. A cookie is a small text file stored on your device by your web browser.

8.1 Essential and Functional Cookies

These cookies are required for basic website functionality:

– WordPress Core Cookies: wordpress_test_cookie (tests if your browser accepts cookies, temporary), wordpress_logged_in_[hash] (authentication for logged-in users), wp-settings-[time] (customizes admin interface for logged-in users, up to 1 year)
– Comment Cookies: If you leave a comment, WordPress may store comment_author_[hash], comment_author_email_[hash], and comment_author_url_[hash] cookies to remember your details for future comments (approximately 347 days)
– WooCommerce Cookies: Shopping cart contents, session identifiers, and checkout preferences necessary for the store to function

8.2 Analytics Cookies

– Google Analytics: Uses cookies to collect anonymized data about how visitors use our website, including pages visited, session duration, and traffic sources. You can opt out at https://tools.google.com/dlpage/gaoptout.

8.3 Third-Party Cookies

Third-party services integrated with our website may set their own cookies:

– Payment processors (Stripe, PayPal) may set cookies during the checkout process
– Amazon Associates may place cookies when you click affiliate links
– Mailchimp may set cookies related to email signup forms
– Google services may set cookies for analytics and merchant center functions

These cookies are governed by the respective third party’s privacy and cookie policies.

8.4 Managing Cookies

You can manage or delete cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may impair the functionality of our website, including the ability to make purchases or leave comments.

9. Do Not Track (DNT) Disclosure

California law requires us to disclose how our website responds to web browser “Do Not Track” (DNT) signals. Because there is currently no universally recognized industry or legal standard for recognizing or honoring DNT signals, our website and third-party tracking partners do not respond to them at this time. Additionally, third parties such as analytics providers, affiliate networks, and payment processors may collect personal information about your online activities over time and across different websites when you use our services.

10. Data Security and Breach Notification

We implement reasonable, industry-standard administrative, physical, and technical safeguards intended to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (SSL/TLS) between your browser and our website, secure payment processing through PCI-DSS compliant processors, and restricted access to personal information on a need-to-know basis.

However, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

In the event of a data security incident that compromises your personal information as defined by applicable law, we will notify affected individuals and relevant regulatory authorities in accordance with our legal obligations. Specifically, pursuant to California Civil Code Section 1798.82, if a qualifying breach occurs, we will notify affected California residents within 30 calendar days of discovering the breach, subject to any delays requested by law enforcement to accommodate active investigations.

11. Data Retention

We retain personal information for the following periods:

– Transaction Records: Purchase history, order details, and related financial records are retained for a minimum of seven (7) years to comply with tax and accounting requirements
– Customer Communications: Emails and support requests are retained for the duration of the customer relationship plus three (3) years, or longer if required by law
– Website Analytics: Anonymized analytics data may be retained indefinitely for trend analysis
– Comments: Comment data (including associated IP addresses) is stored in our WordPress database indefinitely unless deletion is requested
– Newsletter Subscriptions: Subscriber data is retained in Mailchimp until you unsubscribe, at which point your data is handled according to Mailchimp’s retention practices
– Pinterest Data: Retained locally only while connected to the application; permanently deleted upon disconnection (see Section 5.5)
– Server Logs: HostGator server access logs are retained according to HostGator’s standard retention schedule
– Cookies: Retention periods vary by type. Session cookies expire when you close your browser. Persistent cookies expire according to their configured lifetime as described in Section 8.

You may request deletion of your personal information at any time by contacting us at [email protected]. We will process deletion requests within thirty (30) days, subject to any legal obligations that require us to retain certain information.

12. Sale and Sharing of Personal Information

We do not sell your personal information to third parties for monetary consideration. We do not share your personal information for the purposes of cross-context behavioral advertising. We utilize service providers solely to facilitate the operational functionality of our business (such as processing payments, delivering emails, filtering spam, and analyzing website traffic), and these providers are contractually restricted from retaining, using, or disclosing your personal information for any purpose other than performing the contracted services.

13. Your Rights and Choices

Depending on your jurisdiction, you may have some or all of the following rights regarding your personal information:

13.1 General Rights

– Right to Access: You may request a copy of the personal information we hold about you
– Right to Correction: You may request that we correct inaccurate or incomplete personal information
– Right to Deletion: You may request that we delete your personal information, subject to legal retention requirements
– Right to Portability: You may request a copy of your data in a commonly used, machine-readable format
– Right to Object: You may object to certain processing of your personal information, including marketing communications
– Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time

13.2 California Residents

While our business currently falls below the mandatory compliance thresholds of the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), we believe in transparent data practices and voluntarily extend the following commitments to California residents: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. You have the right to request access to, correction of, or deletion of your personal information. You will not be discriminated against for exercising your privacy rights.

13.3 European Economic Area (EEA) and United Kingdom Residents

If you are located in the EEA or UK, you possess specific rights under the General Data Protection Regulation (GDPR). We process your personal data under the lawful bases of contract performance (to fulfill your orders), consent (for marketing communications and non-essential cookies), and legitimate business interests (for security, fraud prevention, and service improvement).

You have the right to request access to, correction of, or deletion of your personal data. You have the right to data portability and the right to withdraw your consent for marketing communications or non-essential cookies at any time. You also have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us at [email protected].

13.4 Exercising Your Rights

To exercise any of your privacy rights, please contact us using the information provided in Section 18. We will respond to all legitimate requests within thirty (30) days (or such longer period as permitted by applicable law). We may need to verify your identity before processing your request.

14. Children’s Privacy

Our Services are not directed to, designed for, or intended for use by individuals under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. Our products involve power tools and physical construction activities that require adult judgment and responsibility.

If we learn that we have inadvertently collected personal information from a child under the applicable age, we will take immediate steps to delete that information. If you believe that a child has provided us with personal information, please contact us at [email protected].

15. International Data Transfers

Our Services are operated from the United States. If you are accessing our Services from outside the United States, please be aware that your personal information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate.

By using our Services, you consent to the transfer of your personal information to the United States and other jurisdictions that may have different data protection laws than your country of residence. We take reasonable steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it.

16. Links to Other Websites

Our website, PDF plans, and applications contain links to third-party websites and services, including Amazon.com, Etsy.com, YouTube.com, Pinterest.com, and others. We are not responsible for the privacy practices, content, or security of any third-party website or service. We encourage you to review the privacy policy of every website you visit.

The presence of a link to a third-party website does not imply endorsement of that website or its privacy practices.

17. Dispute Resolution

Any legal disputes arising from or relating to this Privacy Policy or our data processing practices shall be resolved in accordance with the binding arbitration provisions and class action waiver detailed comprehensively in our Terms of Service.

18. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Pshichenko Enterprises Inc.
Operating as Good DIY Plans
Contact: Vitaliy Pshichenko, Owner
Email: [email protected]
Website: gooddiyplans.com

We are committed to addressing your concerns in an efficient and transparent manner and will respond to all inquiries within thirty (30) days.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make changes, we will update the “Effective Date” and version number at the top of this Policy.

For material changes that significantly affect how we handle your personal information, we will make reasonable efforts to notify you by posting a prominent notice on our website. Your continued use of our Services after the effective date of a revised Policy constitutes your acceptance of the updated terms.

20. Consent

By using our website, purchasing our products, using our applications, or otherwise interacting with our Services, you hereby consent to this Privacy Policy and agree to its terms. If you do not consent to this Policy, you must discontinue use of all Services.

21. Accessibility

We strive to ensure that this Privacy Policy is accessible to all individuals, including those with disabilities, in compliance with applicable laws and regulations. If you have difficulty accessing this Policy, please contact us at [email protected] and we will provide the information in an alternative format.