Privacy Policy
Last updated: November 11, 2026
This policy explains what personal data [Company legal name] collects when you use PlanneryX, why, and the choices you have. [Company legal name] is the data controller.
Data we collect
- Account details: name, email address, password (stored encrypted by our login provider) or your Google account basics if you sign in with Google.
- Business profile: what you tell us during onboarding, such as your niche, offer, prices, ideal client and goals.
- Content: what you type or upload (product photos, logos, brand colors, screenshots, website addresses) and what PlanneryX generates for you.
- Leads: business contact details you add, import or save from search results, plus your notes.
- Billing: your plan, payment status and invoices. Card details are handled by Paddle; we never see or store them.
- Usage and device data: log data such as IP address, browser type, pages visited and errors, used for security and to keep the service working.
- Messages: anything you send us through our contact or Done-for-You forms or by email.
How we use it
- To provide PlanneryX: run your account, generate content, keep your credits and history (performance of our contract with you).
- To take payments and keep records (contract and legal obligations).
- To send service emails such as receipts, password resets and low-credit alerts (contract).
- To prevent fraud and abuse, and keep the service secure (legitimate interests).
- To understand and improve the product with analytics, only if you consent (consent).
- To send product news, only if you opt in. Every marketing email has an unsubscribe link (consent).
We do not sell your personal data, and we do not use your content to train AI models.
Who we share it with
We use trusted service providers who process data for us under contract:
| Supabase | Database, login and file storage |
|---|---|
| Vercel | Website hosting |
| Anthropic | AI text generation and image understanding |
| fal.ai | AI image and video generation |
| Paddle | Payments, tax and invoices (merchant of record) |
| Resend | Sending emails |
| Google sign-in and business search (Google Places) | |
| Upstash | Rate limiting to prevent abuse |
| Sentry | Error monitoring |
| PostHog | Product analytics, only if you accept analytics cookies |
We may also share data if the law requires it, or with a buyer if our business is sold (you would be told first).
International transfers
Our providers may process data in the United States and other countries. Where required, transfers are protected by safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep it
- Account data and content: while your account is open. When you delete your account, we delete it within 30 days, except backups which expire within a further 30 days.
- Billing records: as long as tax and accounting laws require (usually up to 7 years).
- Security logs: up to 90 days.
Your rights
Depending on where you live, you can ask to access, correct, delete or receive a copy of your personal data, object to or restrict how we use it, and withdraw consent at any time. You can export your data and delete your account yourself in Settings. For anything else, email [support@yourdomain.com]. You can also complain to your local data protection authority.
Cookies
We use essential cookies to keep you logged in, and analytics cookies only with your consent. See our Cookie Policy.
Security
We protect your data with encryption in transit, access controls on every database table and limited staff access. No system is perfectly secure, so please use a strong, unique password.
Children
PlanneryX is not for anyone under 18, and we don't knowingly collect their data.
Changes
If we make important changes to this policy, we'll tell you by email or in the app.
Contact
[Company legal name], registered in the British Virgin Islands. Email: [support@yourdomain.com]