Privacy Policy

At Plenix, we take your privacy seriously. This Privacy Policy explains what information we collect when you use plenix.io and the related daily permit-email service (the “Service”), how we use it, and the choices you have. This Policy applies to all information collected through the Service.

We use the information we collect to:

• Deliver the Service (daily permit emails, account access)
• Process subscriptions and payments (via LemonSqueezy)
• Send transactional emails (welcome, trial-ending, account changes)
• Respond to support requests
• Analyze usage to improve the Service
• Comply with legal obligations

We do not sell your information, share it for marketing purposes, or use it to train AI models.

We share your information only with:

• LemonSqueezy (payment processor) — for billing
• Resend (email delivery) — for transactional and daily emails
• Neon (database host) — where your account data is stored
• Vercel (web hosting) — for serving the Service
• Google (if you use Google sign-in) — for authentication only

We may also share information:

• In response to legal process (subpoena, court order)
• To investigate security incidents or potential violations
• In connection with a business sale or merger

• Active account — data retained while your subscription is active
• Cancelled account — data retained for 30 days, then deleted
• Backups — retained up to 90 days for disaster recovery
• Email delivery logs — retained for 12 months

You have the right to:

• Access your personal information
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Opt out of non-essential emails
• Object to processing for specific purposes (subject to legitimate interest)

To exercise any of these rights, email contact@plenix.io. We respond within 30 days.

If you are in the EU/UK (GDPR) or California (CCPA), you may have additional rights under those laws. The same contact email applies.

Plenix is not directed to anyone under 18 years of age. We do not knowingly collect information from individuals under 18. If you believe we have collected such information, email contact@plenix.io and we will delete it.

We implement reasonable technical and organizational measures to protect your information:

• HTTPS/TLS encryption for all data in transit
• Encrypted database storage (Neon)
• Secure session management (Better Auth)
• Password hashing for authentication

No method of internet transmission is 100% secure. While we work to protect your information, we cannot guarantee absolute security.

Plenix is operated from Pakistan, with data infrastructure (Neon, Vercel, Resend) primarily in the United States. By using the Service, you consent to your information being transferred and processed in these regions.

We use only essential cookies necessary for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies that personally identify you. We may use Vercel’s built-in analytics for aggregate page-view counts only (no personal identification).

Plenix may include links to third-party sites (for example, source government permit portals). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies.

Plenix may update this Privacy Policy from time to time. Material changes will be notified via email at least 30 days before taking effect. The “Last updated” date at the top reflects the most recent change.

For questions about this Privacy Policy or to exercise your privacy rights:

• Email: contact@plenix.io
• Subject line: “Privacy”