Legal & Policies

Ploba ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over it.

This policy applies to all users of the Ploba platform, including visitors, registered consumers, creators, and developers.

Account data: When you register, we collect your email address, name, and hashed password. Creators additionally provide an organization name, support email, GitHub URL, and billing details.

Usage data: We collect information about how you interact with the platform: pages visited, searches performed, apps subscribed to, and actions taken in the Creator Console.

Technical data: IP address, browser type, device type, operating system, and referrer URL collected automatically through server logs and session tokens.

Payment data: Billing address and transaction records. We do not store full payment card numbers — these are handled directly by our payment processor.

Communications: If you contact our support team, we retain the content of those communications.

We use your data to:

• Provide, operate, and improve the platform
• Process subscriptions, transactions, and credit wallet operations
• Send transactional emails (OTP codes, receipts, subscription alerts)
• Enforce our Terms of Service and Acceptable Use Policy
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Send platform updates and product announcements (you may opt out at any time)

We use cookies and similar technologies to maintain authenticated sessions, remember preferences, and analyze platform usage. See our Cookie Policy for full details and opt-out instructions.

We do not sell your personal data. We share data only in these circumstances:

• Service providers: Payment processors, email delivery services, and infrastructure providers who process data on our behalf under data processing agreements.
• Creators: When you subscribe to a tool, the Creator may receive your email and subscription status to provide support.
• Legal compliance: When required by law, court order, or to protect rights and safety.
• Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

We retain your account data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where retention is required for legal, tax, or fraud prevention purposes.

Transaction records and audit logs may be retained for up to 7 years in compliance with financial regulations.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Data portability — receive your data in a machine-readable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us via our contact page. We will respond within 30 days.

We protect your data using industry-standard measures: encrypted storage, TLS in transit, JWT session tokens with short expiry, multi-factor authentication, and rate limiting. For more detail, visit our Security page.

Ploba is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-platform notice at least 14 days before they take effect.

Questions about this policy? Reach us via the contact page.