Privacy Policy

Your account. Your name, email address and studio name, and the preferences you set. You sign in with a code we email you, so we never store a password. If you sign in with Google, we receive your name, email address and profile picture from Google.

Your studio. What you create and keep in Plya: projects, tasks, notes, contacts and organizations, leads and outreach, invoices, expenses and time, files, canvases, your conversations with Ash and what Ash remembers for you. This often includes information about other people, such as your clients and contacts. We process it on your behalf, to run the Service for you.

Emails you log. When you forward or BCC an email to your studio's logging address, we keep its subject, about its first 500 characters, its date and whether it was sent or received, on the contacts it was with. We don't keep the rest of the email or its attachments. Everyone in your studio can see what's logged. If you add other addresses you send from, we keep them with your account in that studio and email each one a code to confirm it's yours.

Billing. Stripe handles your card details. We receive your plan, your subscription status and the billing details Stripe shares with us, such as your name and country. We never see or store your full card number.

Usage and devices. When you use the Service, our systems log your IP address, browser, pages visited, times and errors. We record how the Service is used, such as which features are opened, to make it better. Inside the app, session recordings hide all text, inputs, images and canvases, so they show where people click without showing your work. On our marketing pages, recordings show the page as you see it.

Questions on our help pages. When you ask the support chat on our help pages a question, we keep the question, the pages it used and whether it answered, for up to 180 days, to improve our help pages. We don't keep your IP address or link the question to your account.

Where you came from. If you arrive from a link with a referral or campaign tag, we save it with your account when you sign up, so we know which channels bring people to Plya.

Cookies. We use cookies to keep you signed in, which the Service needs to work. We also use analytics cookies and local storage through PostHog to count visits and understand how the Service is used. We don't use advertising cookies or cross-site trackers.

We use information to:

• Run, secure and improve the Service;
• Sign you in and protect your account;
• Charge for your plan and manage your subscription;
• Send emails the Service needs, such as sign-in codes, receipts, plan and billing notices, and the invoices you send to your clients;
• Send occasional product news, which you can unsubscribe from in any email;
• Answer your questions and support requests;
• Prevent fraud and abuse, and meet our legal obligations.

We don't:

• Sell or rent your personal information or your content;
• Use your information for advertising, ad targeting or data brokering;
• Use your content to train, fine-tune or improve AI models.

When you ask Ash something, the parts of your studio it needs to answer are sent to our AI provider, Anthropic, to produce a reply. To help Ash find things in your studio, short pieces of your content are also sent to Voyage AI to build a search index. Both process this data only to provide the Service, under terms that don't allow them to train their models on it.

You can see and remove what Ash remembers for you in Settings → Ash.

AI apps. If you connect Plya to an AI app such as Claude or ChatGPT, that app can read your studio and add or change records when you ask it to. It can't delete records, send invoices or record payments. What the app reads from Plya, and what you ask it, is handled under that app's own terms and privacy policy. We keep a note of which tool the app used and when, never what you asked or what came back. You can disconnect an app in Settings → Integrations at any time.

Calendar feed. If you subscribe to your Plya calendar feed, your calendar app fetches your dates and their titles from a private link. Anyone with the link can see them, so reset it in Settings → Integrations if it's shared by mistake.

Shopify. If you add the Plya app to your Shopify store, Plya keeps the store's access to publish your works there, sealed so it can't be read from a database copy. When an order is paid, Plya reads which of your works sold, how many, the price, the order number and the date, and records them as a sale in your studio. It never reads or keeps a customer's name, email, phone or address. Uninstalling the app deletes Plya's access to your store; Shopify then asks Plya to delete the store's data, and it does.

Square. If you connect Square, its access is kept by Nango, our connections provider, and Plya uses it to stock your works at the location you choose. When an order is paid there, Plya reads which of your works sold, how many, the price, the tax, the order number and the date, and records them as a sale in your studio. It never reads or keeps a customer's name, email, phone, card or receipt. Disconnecting, in Plya or in Square, deletes Plya's access.

Etsy. If you connect your Etsy shop, our provider Nango keeps Plya's access to it, so Plya can publish your works there. Plya reads your shop's name and its listing profiles, and, when an order is paid, which of your works sold, how many, the price, the order number and the date, and records them as a sale in your studio. It never reads or keeps a buyer's name, email or address, and when you import an Etsy orders file, its buyer columns are ignored. Disconnecting deletes Plya's access to your shop.

We share information with the companies that help us run the Service, under contracts that protect it. Each one gets only what it needs:

• Supabase: database, sign-in and file storage, in the United States;
• Vercel: hosting the website and app;
• Stripe: subscription payments, and card payments on the invoices you send;
• Resend: sending email, and receiving the emails you log;
• PostHog: product analytics and session recordings, in the United States;
• Sentry: error reports, with personal details removed where we can;
• Anthropic: the AI model behind Ash;
• Voyage AI: search for Ash;
• Nango: keeping the access to the shops you connect, such as Square and Etsy.

Beyond our service providers, we share information only:

• When you direct it, for example when you send an invoice to a client, who then sees the invoice and its pay page;
• When we believe in good faith that the law requires it, or to protect the rights, property or safety of Plya, the people who use it or the public;
• In a merger, acquisition or sale of assets. We'll tell you before your information moves, and you'll be able to export or delete it first.

If you sign in with Google, we request only the basic scopes (openid, email and profile) to confirm who you are and show your name and picture in Plya. We don't access your Gmail, Calendar, Drive or contacts.

Plya's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We don't use Google user data for advertising, we don't sell or transfer it except as needed to run the Service or required by law, and we don't use it to train AI models.

You can remove Plya's access at any time from your Google account at myaccount.google.com/permissions.

Your data is stored in the United States. It's encrypted in transit over HTTPS and encrypted at rest. Each studio's data is kept separate from every other studio's by access rules in the database itself.

No system is perfectly secure. If we learn of a breach that affects your information, we'll tell you without undue delay and as the law requires.

We keep your information while your account exists. A studio whose paid plan has ended moves to the Basic plan and keeps its data.

• Export your data from Settings → Data at any time, in standard formats.
• Delete your account by asking from Settings → Account. We'll confirm by email, then delete your account and studio from our active systems within 30 days. Backups roll off on their normal schedule after that.
• Ask us to delete specific information by emailing hello@plya.app. We'll reply within 30 days.

We keep billing records for as long as tax and accounting law requires. We may keep aggregate statistics that can't be tied back to you.

Depending on where you live, laws such as the GDPR in the EU and UK and the CCPA in California may give you the right to access, correct, export, restrict or delete your personal information, and to object to how we use it. To use any of these rights, email hello@plya.app. We won't treat you differently for using them.

If you're in the EU or UK and feel we haven't handled a concern well, you can complain to your local data protection authority.

Plya is for people 16 and older. We don't knowingly collect information from anyone younger. If you think a child has given us information, email hello@plya.app and we'll delete it.

Plya is run from the United States. If you use it from elsewhere, your information is transferred to and processed in the United States. Where the law requires it, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses.

If we make a material change, we'll update the effective date above and tell you in the app or by email before it applies.

Privacy questions and requests: hello@plya.app, Perennial Design Studio LLC, Brooklyn, NY 11213, USA.