Privacy Policy

1. Information We Collect

When you create a Plinth account, we collect your email address and a securely hashed version of your password. We also store the business data you enter — client records, invoice details, and related metadata — so the product can function.

2. How We Use Your Data

Your data is used exclusively to operate Plinth. We do not sell, rent, or share your personal information with third parties for advertising purposes. Analytics, if any, are aggregated and anonymized.

3. Data Storage and Security

All data is stored in encrypted databases with access restricted to authenticated sessions. Passwords are hashed with bcrypt before storage. Session tokens use signed JWTs with configurable expiration.

4. Your Rights

You may export or delete your data at any time by contacting us at hello@plinth.app. Account deletion removes all associated clients, invoices, and session data permanently.

5. Cookies

Plinth uses a single session cookie (moonshift_session) to maintain your authenticated state. No tracking cookies or third-party cookies are placed.

6. Changes to This Policy

We may update this policy as Plinth evolves. Significant changes will be communicated via email or an in-app notice.

7. Contact

For privacy-related inquiries, reach us at hello@plinth.app.