Plexser Privacy Policy
DRAFT for review by a lawyer. Not legal advice. Text in [square brackets] must be completed or confirmed before use.
1. Who we are and what this policy covers
Plexser, LLC, a Texas limited liability company ("Plexser", "we", "us"), runs the Plexser Sizing web application at sizing.plexser.com, with its sign-in and billing pages. For the personal data described here, we decide why and how it is used, which makes us the "controller" under laws such as the GDPR.
This policy covers the application, sign-in and billing. Our marketing website (plexser.com) is run on Squarespace and has its own cookies and analytics, described in the notice on that site.
Contact: Plexser, LLC, [STREET ADDRESS - TO BE ADDED], [CITY, STATE, ZIP - TO BE ADDED], USA. E-mail: [email protected].
2. What personal data we collect
- Account data. Your e-mail address, your name if you give it, your password (stored only as a one-way hash in our sign-in system, never in readable form), and whether your e-mail is verified.
- Plan and billing data. Which plan you have, trial dates, and subscription status. Card payments are handled by Stripe, so we do not see or store your full card number. We receive from Stripe a customer reference, the plan and the payment status.
- Your content. The projects, inputs and results you create in the application, and files you import or export.
- Technical and log data. IP address, browser type, the time and pages of requests, and error logs. We use these to run, secure and fix the Service.
- Messages. What you send to our support address.
We do not knowingly collect sensitive categories of data such as health, political or religious information, and ask you not to put it into the Service.
3. Why we use it, and our legal bases
| What we do | Data used | Legal basis (GDPR) |
|---|---|---|
| Create and run your account and the Service | Account data, your content | Contract |
| Start and end the free trial, charge and manage subscriptions | Account, plan and billing data | Contract |
| Keep the Service secure, prevent abuse and fraud, fix errors | Technical and log data | Legitimate interests |
| Answer support requests | Account data, messages | Contract and legitimate interests |
| Send service e-mails (verification, password reset, receipts, notices) | E-mail address | Contract |
| Keep tax and accounting records, respond to legal requests | Billing data | Legal obligation |
We do not sell your personal data and we do not share it for advertising. We do not use your project content to train AI models. [Confirm, including for the AI Assistant.]
If we ever need your consent for something, we will ask you first, and you can withdraw it at any time.
4. Who we share it with
We use these service providers ("processors") to run the Service. They may use the data only on our instructions, except Stripe, which also has its own legal duties as a payment company.
| Provider | What it does | Data it receives |
|---|---|---|
| Hetzner Online GmbH (Germany) | Hosts the servers and databases | All data of the Service, stored on its servers |
| Stripe, Inc. | Takes payments, manages subscriptions | Name, e-mail, payment details, plan |
| Google LLC (Google Workspace) | Sends verification, password and receipt e-mails | E-mail address, message content |
| [AI provider, if and when the AI Assistant uses one outside our servers] | Powers the AI Assistant | The text you send to the assistant |
We may also share data where the law requires it, to protect rights and safety, or in a sale or reorganisation of the business (the new owner must keep to this policy).
5. Where your data is stored, and transfers
The Service runs on servers in Germany, operated by Hetzner. Plexser is based in the United States, and our customers are around the world, so personal data is accessed from the United States and can be sent to other countries where our providers work (for example Stripe in the United States).
When data of people in the European Economic Area, the United Kingdom or Switzerland goes to a country without an equivalent level of protection, we rely on safeguards such as the European Commission's Standard Contractual Clauses, or a provider's certification under the EU-US Data Privacy Framework. [Lawyer: confirm the transfer mechanism and sign data processing terms with each provider.]
6. Cookies
The application and sign-in pages use only the cookies they need to work: they keep you signed in, protect the sign-in process against forgery, and remember your session. These do not track you across other sites, and we do not use advertising or analytics cookies in the application. You can block cookies in your browser, but then you cannot sign in.
The marketing website at plexser.com is separate and is run on Squarespace. Its cookie notice explains what it uses.
7. How long we keep data
| Data | How long |
|---|---|
| Account data | While your account is open, then deleted within 30 days of closing, unless the law requires us to keep it |
| Your projects and content | While your account is open, then deleted within 30 days of closing |
| Billing and tax records | 7 years, as tax and accounting rules require |
| Server and security logs | 90 days |
| Backups | Removed on their normal cycle, up to 35 days after deletion |
| Support messages | 2 years after the last message |
8. Security
We protect personal data with measures that fit the risk, including encrypted connections (HTTPS) for all traffic, one-way hashed passwords with a minimum-strength policy, e-mail verification of accounts, access limited to the people who need it, separate roles for administrators, secrets kept out of the application code, regular backups, and logging of administrative actions. No system is completely secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.
9. Your rights
Depending on where you live, you may have the right to:
- know what data we hold about you and get a copy of it;
- have wrong data corrected;
- have your data deleted;
- limit or object to some uses, including uses based on legitimate interests;
- receive your data in a portable format;
- withdraw consent you gave us;
- not be discriminated against for using these rights (California and other US states).
These rights come from laws such as the GDPR and UK GDPR, the California Consumer Privacy Act, and the Texas Data Privacy and Security Act. [Lawyer: confirm which laws apply to Plexser.]
How to use them. E-mail [email protected]. We may need to check who you are, and we will answer within the time the law sets (normally one month in the EU and UK, 45 days in California and Texas). Account settings let you delete projects yourself.
Complaints. If you are not happy with our answer, you can complain to your data protection authority. In the EU and UK this is the authority of the country where you live or work. In the United States you can also contact your state attorney general.
10. Children
The Service is for professional use by adults. It is not meant for anyone under 18, and we do not knowingly collect data from children. If you think a child has given us personal data, tell us and we will delete it.
11. Changes and contact
We may update this policy. For a material change we will e-mail you or show a notice in the Service before it takes effect. The date of the latest version is at the end of this page.
Contact: Plexser, LLC, [STREET ADDRESS - TO BE ADDED], [CITY, STATE, ZIP - TO BE ADDED], USA. [email protected].
EU / UK representative: [Name and address, if one is appointed. A company without an office in the EU or UK that serves people there often needs one under the GDPR and UK GDPR. Lawyer: confirm.]
Effective date: November 1, 2026.