Privacy policy
What TruePlinth keeps about you and your clients, why, where it's stored, who else handles it, for how long, and how to see, correct or delete it.
Last changed October 21, 2026
In short
- We keep what the planner needs to work: your account, your designs and, for a business, its clients' details.
- We don't sell data, show advertising, or use tracking cookies.
- A business's work is seen only by its own people, and the database checks that on every request.
- You can see, correct, download or delete what we keep about you.
What we keep
| What | Why |
|---|---|
| Your name, email or username, role and language | To sign you in and show the app in your language |
| The devices signed in, and when | To keep an account to the devices allowed, and to sign one out |
| Projects, designs, quotes, price lists and settings | They are the work you do in the app |
| A business's clients: names, phones, emails and addresses | To put them on the business's projects and documents |
| A client's approval of a quote: their name, the time and their language | To record the approval for the business |
| A log of important actions (who changed what, and when) | Security, and to answer questions about an account |
| Demo requests: name, business, email, phone and message | To answer the request |
| Payments: what was bought, when and the amount (never card details) | To unlock what you paid for and keep accounts |
| Errors the app runs into: what went wrong, the page, the browser and, when you're signed in, your account; kept 30 days | To find and fix them |
A business's clients
When a business keeps its clients' details in TruePlinth, the business decides what to keep and why, and we handle those details on its behalf, only to run the app for it. A client who wants to see, correct or delete their details should ask the business; we'll help the business do it.
Where it's stored, and who handles it
- Supabase stores the data and runs the accounts, in its data centre in Ireland (the European Union).
- Cloudflare serves the website and the app's files from its network and, once it's switched on, counts visits to the website without cookies and without telling one visitor from another (Cloudflare Web Analytics).
- Paddle handles payments as our merchant of record; card details go to Paddle, never to us.
- Resend sends the app's emails, once email is switched on.
- GitHub keeps an encrypted copy of the database for seven days, as a backup.
Each of them handles data only to provide its service to us, under its own data protection terms.
How long we keep it
- An account's data, for as long as the account is open.
- After a business's license ends: read only for 30 days, then on hold; it is deleted when the business asks, or a year after the hold began.
- The automatic versions of a design: the latest 50.
- Backups: seven days.
- Demo requests: a year after they're answered.
- The emails the app sends, and the notices you've read: 90 days. A device that signed out: 30 days.
Your rights
You can ask to see what we keep about you, to correct it, to get a copy, or to delete it. Write to us through the contact details on the about page; we'll answer within 30 days. You can also complain to Israel's Privacy Protection Authority.
Security
Data travels encrypted. Passwords are stored by Supabase as one-way hashes, never as written. Each business's data is kept apart by the database's own rules, and those rules are tested automatically on every change we make. If something goes wrong that affects your data, we'll tell you, and the authority when the law requires it.
Changes
When this policy changes, the date at the top changes; for a change that matters, we'll tell account holders before it applies.