# Privacy policy

> **Draft — not yet reviewed by a lawyer.**

Last changed: 2026-10-13. Words in [square brackets] are still to be filled in.

This policy explains how [Plainsend's legal entity and ABN] ("Plainsend", "we") handles personal information. We
follow the Australian Privacy Principles in the Privacy Act 1988 and, for people in the EU or UK, the GDPR.

There are two kinds of personal information here:

1. **About our customers and visitors** (you, using this site or the console). We decide how it's used: this policy
   covers it.
2. **About our customers' contacts** (the people our customers email). Our customer decides how it's used, and we
   process it on their behalf under the [data processing agreement](https://plainsend.app/legal/dpa.md). If you received an email sent
   through Plainsend, the sender's privacy policy applies; every marketing email has an unsubscribe link.

## What we collect

| What | When | Why |
|---|---|---|
| Name, email, company, what you use today, renewal month, message | You fill in the "talk to us" form | To reply to you |
| Name, email, organisation, role | You sign up or are invited (through WorkOS) | To give you an account |
| Billing details | You pay (through Stripe; we never see full card numbers) | To bill you |
| What you do in the console and API (the activity log) | You use Plainsend | Security, audit and support |
| Country of a form submission (from Cloudflare) | You use the form | To spot abuse |

This site sets no tracking cookies and uses no analytics or advertising scripts. The form may use Cloudflare
Turnstile to check you're not a bot.

We don't sell personal information, and we don't use our customers' contact data for our own marketing.

## Where it is stored, and who helps us

Personal information is stored in Sydney, Australia (Neon Postgres and Amazon SES, both in AWS ap-southeast-2) and
on Cloudflare's network. Sign-in is handled by WorkOS and payments by Stripe, both of which may process information
in the United States. The full list is on the [security page](https://plainsend.app/security.md#sub-processors).

## How long we keep it

- Form messages: for [24 months] after our last contact with you, then deleted.
- Account information: while your account is open, and for [30 days] after, then deleted, except invoices and other
  records the law requires us to keep.
- Unsubscribe records: kept for as long as needed to make sure the person isn't emailed again.

## Your rights

You can ask to see the personal information we hold about you, correct it, or delete it. If you're in the EU or UK
you can also object to processing, restrict it, or ask for a copy in a portable format. Use the
[contact form](https://plainsend.app/switch.md#talk); we'll reply within 30 days.

If you're unhappy with how we handled your information, tell us first. You can also complain to the Office of the
Australian Information Commissioner ([oaic.gov.au](https://www.oaic.gov.au)) or your local regulator.

## Changes

If we change this policy in a way that matters, we'll say so on this page and, for customers, by email or in the
console.

## Contact

[Privacy contact to be confirmed.] Until then, use the [contact form](https://plainsend.app/switch.md#talk).