Privacy policy
Last changed: 2026-10-13. Words in [square brackets] are still to be filled in.
This policy explains how [Plainsend's legal entity and ABN] ("Plainsend", "we") handles personal information. We follow the Australian Privacy Principles in the Privacy Act 1988 and, for people in the EU or UK, the GDPR.
There are two kinds of personal information here:
- About our customers and visitors (you, using this site or the console). We decide how it's used: this policy covers it.
- About our customers' contacts (the people our customers email). Our customer decides how it's used, and we process it on their behalf under the data processing agreement. If you received an email sent through Plainsend, the sender's privacy policy applies; every marketing email has an unsubscribe link.
What we collect
| What | When | Why |
|---|---|---|
| Name, email, company, what you use today, renewal month, message | You fill in the "talk to us" form | To reply to you |
| Name, email, organisation, role | You sign up or are invited (through WorkOS) | To give you an account |
| Billing details | You pay (through Stripe; we never see full card numbers) | To bill you |
| What you do in the console and API (the activity log) | You use Plainsend | Security, audit and support |
| Country of a form submission (from Cloudflare) | You use the form | To spot abuse |
This site sets no tracking cookies and uses no analytics or advertising scripts. The form may use Cloudflare Turnstile to check you're not a bot.
We don't sell personal information, and we don't use our customers' contact data for our own marketing.
Where it is stored, and who helps us
Personal information is stored in Sydney, Australia (Neon Postgres and Amazon SES, both in AWS ap-southeast-2) and on Cloudflare's network. Sign-in is handled by WorkOS and payments by Stripe, both of which may process information in the United States. The full list is on the security page.
How long we keep it
- Form messages: for [24 months] after our last contact with you, then deleted.
- Account information: while your account is open, and for [30 days] after, then deleted, except invoices and other records the law requires us to keep.
- Unsubscribe records: kept for as long as needed to make sure the person isn't emailed again.
Your rights
You can ask to see the personal information we hold about you, correct it, or delete it. If you're in the EU or UK you can also object to processing, restrict it, or ask for a copy in a portable format. Use the contact form; we'll reply within 30 days.
If you're unhappy with how we handled your information, tell us first. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au) or your local regulator.
Changes
If we change this policy in a way that matters, we'll say so on this page and, for customers, by email or in the console.
Contact
[Privacy contact to be confirmed.] Until then, use the contact form.