Plotzy, Inc. Privacy Policy

Last Updated: October 17, 2025

1. Introduction

Plotzy, Inc. (“Plotzy,” “we,” “us,” or “our”) is committed to protecting your privacy and maintaining the highest standards of data protection in accordance with applicable laws, including the Gramm-Leach-Bliley Act (GLBA), the California Consumer Privacy Act (CCPA/CPRA), and other relevant U.S. federal and state privacy regulations.

This Privacy Policy explains how we collect, use, disclose, and protect information when you:

Visit our website at https://plotzy.ai or any subdomains (the “Site”);
Access or use the Plotzy Platform, individual Enterprise Portals, or related software services (collectively, the “Platform”);
Engage with us as an enterprise subscriber, customer, or authorized user (collectively, “Subscribers”); or
Sign up for self-service tools or products made available directly through our website.

By using our Site or Platform, you consent to this Privacy Policy and our Terms of Use and agree to the collection, storage, use, and disclosure of your information as described herein.

2. Scope

This Privacy Policy applies to:

Enterprise Subscribers and their Authorized Users (e.g., CRFS or similar clients under a Platform Subscription Agreement);
Individual self-service users who access or purchase Plotzy software directly; and
Visitors who browse our public websites.

It does not apply to third-party applications or data sources integrated with Plotzy’s systems (such as APIs or third-party data providers). Those third parties have their own privacy policies, which we encourage you to review.

3. Information We Collect

We collect both Personal Information and Non-Personal Information as defined in applicable privacy laws.

a. Personal Information

“Personal Information” means information that identifies or can reasonably identify an individual, including:

Name, email address, and contact details;
Company name, role, and business contact information;
Usernames, passwords, and account credentials;
Device identifiers and IP addresses;
Geolocation and browser data (for security or fraud detection);
Billing and payment details (for self-service subscriptions); and
Information processed on behalf of enterprise Subscribers (e.g., job, client, or contact data).

For enterprise users, Personal Information may include data uploaded or accessed through the Platform (collectively, “Subscriber Data”).

b. Non-Personal Information

We also collect aggregated or de-identified data such as usage statistics, performance metrics, analytics logs, and browsing patterns that do not identify you personally.

c. Cookies and Tracking

We use cookies, web beacons, and similar technologies to enhance user experience, remember preferences, and analyze Site performance. You can control cookie settings through your browser or by visiting our Cookie Notice.

4. How We Use Information

Plotzy processes information for the following Business Purposes, as defined in our Data Protection Agreement:

Service Delivery: To operate, maintain, and provide access to the Platform and its features.
Account Management: To create and manage user accounts, authenticate logins, and provide customer support.
Improvement & Research: To enhance platform performance, develop new features, and improve data accuracy.
Security & Compliance: To detect, prevent, and investigate security incidents, fraud, and misuse.
Communications: To send administrative messages, service notifications, or updates.
Marketing (Opt-In): To inform you of product updates or new offerings consistent with your marketing preferences.
Legal & Regulatory: To comply with applicable laws, subpoenas, and lawful requests.

Plotzy does not sell, rent, or share Personal Information for advertising purposes, nor does it engage in cross-context behavioral advertising.

5. Information Sharing and Disclosure

We may share information in the following circumstances:

With Service Providers: Trusted vendors under contract who assist in hosting, data processing, analytics, or customer support, bound by strict confidentiality and data protection terms.
With Enterprise Subscribers: For authorized users operating under an enterprise account, Personal Information (such as usage or audit logs) may be shared with the Subscriber’s administrators.
Legal Requirements: When required by law, subpoena, or court order, or to protect our rights, safety, or users.
Business Transactions: In connection with a merger, acquisition, or sale of assets, subject to continuity of protection under this Privacy Policy.
Anonymized or Aggregated Data: Plotzy may use de-identified, aggregated data for analytics, benchmarking, and platform improvement.

6. Data Retention

We retain Personal Information only for as long as necessary to fulfill the purposes described in this Policy or as required by law, regulation, or contract. Enterprise Subscriber Data is retained according to the applicable Platform Subscription Agreement or incorporated Data Protection Agreement (Exhibit C of that Agreement). When data is no longer required, it is securely deleted or anonymized.

7. Security

We implement technical and organizational measures designed to protect information from unauthorized access, disclosure, or destruction. These include:

Encryption (TLS 1.3 or higher) in transit and at rest;
Multi-factor authentication and secure access controls;
Regular security testing, vulnerability scanning, and code reviews;
Disaster recovery and data backup systems; and
Confidentiality obligations for all employees and subcontractors.

Despite our efforts, no system is fully secure, and users acknowledge the inherent risks of transmitting information over the Internet.

8. Children’s Privacy

Our Site and Platform are not directed to anyone under 13 years old. We do not knowingly collect personal data from children. If we discover such data has been collected, it will be promptly deleted.

9. International Data Processing

Plotzy stores and processes all data within the United States of America. We do not transfer Personal Information outside the U.S. without prior notice and consent, as governed by our Data Protection Agreement.

10. Your Rights

Depending on your jurisdiction (including under CCPA/CPRA, GDPR, or other data protection laws), you may have the right to:

Access the personal data we hold about you;
Request correction or deletion of inaccurate or unnecessary data;
Opt out of marketing communications;
Restrict or object to certain processing activities;
Receive a portable copy of your information; and
Lodge a complaint with a supervisory authority.

Enterprise users should direct data access or deletion requests first to their organization’s administrator, who will coordinate with Plotzy as required.

To exercise your rights, contact us at our Support Email. We may veri fy your identity before fulfilling certain requests.

11. Your Choices

Emails: You can unsubscribe from marketing communications using the “unsubscribe” link in our emails.
Cookies: Adjust browser settings or visit our Cookie Notice.
Enterprise Accounts: If you access Plotzy through a Subscriber, contact your organization’s administrator to update or remove your account.

12. Third-Party Links

Our Site and Platform may contain links to external websites or APIs. Plotzy is not responsible for the privacy practices of those third parties, and this Policy does not apply to their services.

13. Updates to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or by posting a notice on our website. Updates take effect upon posting unless otherwise specified.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Plotzy, Inc.