Privacy policy.

Plainhand LLC, operating as PlainHand ("we," "us," or "our"), operates plainhand.com and related services (together, the "Services"). This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights you have.

This policy applies to personal information collected through the Services and through our offline interactions where we link them to the Services. It does not apply to third-party websites, apps, or services that we do not control, even if you access them through the Services. Those third parties have their own privacy practices.

If you do not agree with this policy, please do not use the Services.

Controller and contact details:

Plainhand LLC

hello@plainhand.com

We collect the following categories of personal information. The sources and purposes for each are listed in Sections 3 and 4.

A. Information you provide to us

• Account information, such as name, email address, phone number, username, password (stored in hashed form), and profile details.
• Payment and billing information, processed by our payment providers. We do not store full card numbers.
• Content you create or upload, such as messages, posts, photos, files, comments, reviews, and support requests.
• Communications with us, including support inquiries, feedback, and survey responses.
• Information you provide when you enter a contest, promotion, or research study.

B. Information collected automatically

• Device information, such as device identifiers, operating system, browser type, hardware model, language settings, and app version.
• Log information, such as IP address, access times, pages viewed, features used, crash reports, and referring URLs.
• Approximate location derived from IP address. Precise location only if you grant permission on your device.
• Usage analytics, such as interactions with features, session length, and error events.
• Cookies, pixels, SDKs, and similar technologies (see Section 5).

C. Information from other sources

• Information from third-party services you connect to your account, such as sign-in providers or other integrations, within the scope of the permissions you grant.
• Information from service providers, such as fraud-prevention, analytics, and identity-verification vendors.
• Information from publicly available sources and data brokers, where permitted by law.

D. Inferences

• We may draw inferences from the information above to personalize content, recommend features, detect fraud, and improve the Services.

We use personal information for the following purposes:

• Providing the Services, including creating and maintaining accounts, processing transactions, delivering features, and providing customer support.
• Security and fraud prevention, including detecting and preventing unauthorized access, abuse, spam, and illegal activity, and verifying identity.
• Communications, including transactional messages, account notifications, service updates, and, where you have agreed or where the law allows, marketing communications.
• Improving the Services, including debugging, testing, research, and developing new features.
• Personalization, including recommendations and tailored content, where permitted by law and subject to your choices.
• Analytics and measurement, to understand how the Services are used and how well features perform.
• Legal compliance, including responding to lawful requests, enforcing our Terms of Service, and protecting our rights, users, and the public.
• Business transactions, including a merger, acquisition, financing, or sale of assets.
• Any other purpose disclosed to you at the time of collection, with your consent where required.

We do not sell personal information for money. We share personal information only as described below.

• Service providers and processors. Companies that perform services for us under contracts that limit their use of the data, such as hosting, cloud storage, analytics, customer support, payment processing, communications delivery, and security.
• Affiliates. Companies under common ownership or control with us, who are bound by this policy.
• Business partners. Partners that you choose to interact with through the Services, such as integrations you enable. Their handling of your information is governed by their own policies.
• Legal and safety. Law enforcement, courts, regulators, or other parties when we believe disclosure is required by law, necessary to protect rights, safety, or property, or to investigate fraud or abuse.
• Business transfers. In connection with a merger, acquisition, bankruptcy, or sale of assets. We will notify you before your personal information becomes subject to a different privacy policy, where required by law.
• With your direction or consent. When you ask us to share information, or when you otherwise authorize it.
• Aggregated or de-identified information. We may share information that cannot reasonably be used to identify you, subject to our commitments under applicable law.

Sale and sharing for targeted advertising. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

We and our partners use cookies, local storage, pixels, software development kits (SDKs), and similar technologies to:

• keep you signed in and remember preferences (strictly necessary or functional);
• understand how the Services are used (analytics);
• measure and deliver advertising (advertising and targeting).

You can manage cookies in your browser settings. Where required by law, we will ask for your consent before using non-essential cookies. We honor Global Privacy Control signals as described in Section 6.

Mobile devices. On mobile devices, you can limit ad tracking and reset your advertising identifier through your device settings.

Depending on where you live, you may have some or all of the following rights. We respond to verifiable requests consistent with applicable law.

Rights available to most users (where applicable):

• Access: to know what personal information we hold about you and to receive a copy.
• Correction: to correct inaccurate personal information.
• Deletion: to request deletion of personal information we collected from you, subject to legal exceptions.
• Portability: to receive your personal information in a portable format.
• Opt-out of sale, sharing, and targeted advertising.
• Limit use of sensitive personal information, where applicable.
• Opt-out of profiling and automated decisions with legal or similarly significant effects, where applicable.
• Consent withdrawal, where processing is based on consent.
• Non-discrimination: we will not discriminate against you for exercising your rights.

How to exercise your rights:

• Email hello@plainhand.com.

We will verify your identity before acting on a request. We may ask you to confirm information already associated with your account. Authorized agents may submit requests on your behalf where permitted, and we may require proof of authorization.

Appeals. If we deny your request, you may appeal by emailing hello@plainhand.com with the subject "Privacy appeal." We will respond within the time required by law. If your appeal is denied, you may contact your state attorney general or other regulator, as described below.

Global Privacy Control (GPC). We honor Global Privacy Control and similar opt-out preference signals as a valid request to opt out of sale or sharing for the browser or device sending the signal, where required by law. If you use a browser that sends this signal, we will apply it to that browser. If you are signed in, we will also associate the request with your account where feasible.

Do Not Track. Some browsers send "Do Not Track" signals. Because there is no uniform standard, we do not currently respond to these signals, but we honor the opt-out preference signals described above.

State residents. Residents of states with comprehensive privacy laws have rights under those laws. Based on current law, roughly twenty states have comprehensive consumer privacy laws in effect in 2026, and we apply those that cover us. Each law has its own thresholds, exceptions, and consumer rights, and some require honoring universal opt-out signals.

California residents. California residents may request, once per calendar year, information about categories of personal information disclosed for business purposes in the prior 12 months.

We keep personal information for as long as necessary to provide the Services, fulfill the purposes described in this policy, and meet legal, accounting, and reporting obligations. We determine retention periods based on:

• the type of information and why we need it;
• the length of your account relationship with us;
• legal requirements, such as record-keeping or tax obligations;
• whether the information is needed to establish, exercise, or defend legal claims.

When we no longer need personal information, we delete it or de-identify it in accordance with our retention schedule. Backups may persist for a limited period before they are overwritten.

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, and alteration. These include encryption in transit, access controls, employee confidentiality obligations, logging and monitoring, and vendor due diligence.

No method of transmission or storage is completely secure. We cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. Please notify us immediately at hello@plainhand.com if you believe your account has been compromised.

Breach notification. If we discover a security breach affecting your personal information, we will notify you and regulators as required by applicable law.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. The Services are intended for users 18 and older. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it. If you believe a child has provided us information, contact hello@plainhand.com.

Parental rights. A parent or guardian may review, delete, or refuse further collection of a child's personal information by contacting hello@plainhand.com. We may need to verify that the requester is the child's parent or guardian.

State children's privacy laws. Some states impose additional requirements on services likely to be accessed by minors, including age-appropriate design requirements. We comply with those requirements where they apply.

Marketing emails. You can unsubscribe at any time using the link in our emails. Transactional and account-related messages will continue to be sent.

Marketing text messages. We send marketing text messages only if you opt in on a separate form that is clearly labeled for marketing. Consent to receive account or verification texts does not authorize marketing texts. Reply STOP to any message to opt out. Reply HELP for help. Message and data rates may apply. Message frequency varies.

Push notifications. You can disable push notifications in your device settings.

The Services may contain links to third-party websites and services, and may allow you to use third-party sign-in or payment services. Those third parties control their own practices. We are not responsible for their privacy practices. Please review their policies before providing personal information.

Our service providers may be located in other countries. Personal information may be processed and stored in those countries, which may have data protection laws different from those where you live. Where required, we use appropriate safeguards for these transfers.

We may update this policy from time to time. If we make material changes, we will notify you, such as by email or a notice on the site, before the changes take effect, where required. Changes that require new consent will not be applied to information already collected without your consent. Please review this policy periodically.

If you have questions about this policy or wish to exercise your rights, contact us at:

Plainhand LLC

hello@plainhand.com

If you are not satisfied with our response, you may have the right to lodge a complaint with your state attorney general, the Federal Trade Commission (www.ftc.gov), or, if applicable, your local data protection authority.