Privacy Policy

Last updated 16 August 2026

PLYX holds the running record of your business. That is about as sensitive as business software gets, so this page says plainly what we collect, where it goes, and what we will never do with it.

The short version: your business data is yours, we do not sell it, we do not advertise against it, no AI provider trains on it, and you can export or delete it whenever you like.

1.Who we are

PLYX is business operations software. You put your customers, products, quotes, orders and invoices into it, and you ask questions about them.

For the information you put in, you are the one who decides what it is for. We hold it and process it on your instructions, and we do not use it for our own purposes. If your customers or staff appear in your records, you are the one answerable to them for it, and this policy describes what we do underneath.

Questions, requests, or a complaint: [email protected].

2.What we collect

Your account

Your name, your email address, and a password. Passwords are hashed by our authentication provider and are never visible to us.

Your business records

Everything you enter or import: customers, contacts, products, quotes, orders, invoices, payments, ledger entries, and any sections you or the AI create.

Files you upload

Spreadsheets you drop into setup. Read the next section, because how these are handled is unusual and it matters.

A record of changes

Every change made to your data, who made it, when, and the before and after state. This is what makes anything in PLYX reversible. It is a feature, not surveillance, and it is visible to you in the app.

What PLYX remembers

Facts about how your business works that help the AI answer you. These are only ever kept after you approve them, and you can read and delete all of them in Settings.

Usage measurements

For each AI request: your business, the model used, token counts, how long it took, and whether it succeeded. We use this to keep the service working and to understand cost. It does not include the content of your question.

Basic web analytics

When someone opens the app we record the country your browser reports and the browser version. We do not store IP addresses, and there are no third-party advertising or tracking scripts anywhere in PLYX.

Connected accounts

If you connect an email, calendar or spreadsheet account, we store the access tokens that let PLYX act on your behalf. They live in a table that no browser key can read, and you can disconnect at any time.

3.How your spreadsheets are handled

When you drop a file into setup, it is read in your browser. It is not uploaded anywhere at that moment.

To design your system, we send the AI the shape of each file: the column names, what type each column looks like, how many rows there are, and a sample of up to eight rows so it can tell a phone number from an order number. The rest of your rows are never sent to the AI, at any point.

Your full rows leave your browser only when you press Build, and they go to your own database, not to an AI provider.

4.How the AI uses your data

When you ask PLYX a question, it looks things up as you. It can only see what your own account can see, and the question, the relevant records and your business’s structure are sent to our AI provider to produce the answer.

Three things are worth knowing:

We send every request with retention switched off, so your business data is not stored by the AI provider after the answer comes back.
We use commercial API tiers, which do not train models on data submitted through them. We do not permit training on your business data.
The AI cannot change your data on its own. It proposes a change and a person confirms it, and everything it does is recorded and reversible.

5.Who else touches your data

We keep this list short on purpose, and we will update this page before adding to it.

Supabase

Database, accounts and file storage.

Cloudflare

Serving the app and running its interface layer.

OpenAI

Answering your questions and designing your system. Retention off, no training.

Google

An alternative AI provider, used as a fallback. Same terms.

Google or Microsoft

Only if you choose to connect an email, calendar or spreadsheet account, and only for what that connection does.

We do not sell your data. We do not share it for advertising. We do not give it to anyone else except where the law requires it, and we will tell you if that happens unless we are forbidden from doing so.

6.Where it is kept, and for how long

Your data is stored on managed infrastructure in North America and is encrypted in transit and at rest.

We keep it for as long as your business has an account with us. When you close your account we delete your business records within 30 days, and backups holding copies of them roll off within a further 90 days. Usage measurements and the record of changes may be kept longer in a form that no longer identifies individuals.

You can export your records to CSV from any list in the app, at any time, without asking us.

7.Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or ask us to stop processing it. Write to [email protected] and we will answer within 30 days.

Depending on where you live you may also have the right to complain to a data protection authority. In Canada that is the Office of the Privacy Commissioner; in the UK, the Information Commissioner’s Office; in the EU, your national authority.

Most of what you would want to do you can do yourself: read and delete what PLYX remembers, see every change ever made, undo them, export your records, and remove people from your team, all in Settings.

8.Cookies

PLYX sets cookies to keep you signed in, and nothing else. There are no advertising cookies, no analytics cookies and no third-party trackers, so there is no cookie banner to dismiss.

9.Children

PLYX is for businesses. It is not intended for anyone under 16 and we do not knowingly collect their information.

10.Changes to this policy

If we change how we handle your data we will update this page and change the date at the top. If the change is significant we will tell you in the app or by email before it takes effect.