Privacy Policy

Last updated October 3, 2026

This Privacy Policy explains how Plura Inc. ("Plura", "we") collects, uses and protects personal information when you visit our website or use our Service. It is written to meet Canada's PIPEDA and US state privacy laws such as the CCPA/CPRA.

1. Information we collect

• Account information: name, email address, password (stored hashed), business name, and the people you invite to your team.
• Billing information: your plan, invoices and the last digits and expiry of your card. Full card numbers are entered on Stripe's secure page and never reach our servers.
• Domain registration details: the owner contact details registries require when you buy a domain, shared with our registrar partner.
• Store content and data: products, pages, settings, and your stores' orders and customer records.
• Usage and device data: log data such as IP address, browser type, pages visited and error reports, used to run, secure and improve the Service.

2. How we use it

• To provide, maintain and secure the Service, and to process payments and domain registrations.
• To send you service messages: sign-in and verification codes, receipts, trial and renewal reminders, and security notices.
• To provide support and respond to your requests.
• To prevent fraud and abuse, and to meet legal obligations.
• To send product news, only where you have agreed. You can unsubscribe at any time.

We do not sell your personal information and do not share it for cross-context behavioural advertising.

3. Your customers' information

Your stores collect your customers' details (such as names, addresses and orders) on your behalf. For that information you are the business responsible for it (the "controller"), and we act as your service provider, processing it only to run your stores. Your customers should contact you about it; we will help you respond to their requests.

4. Who we share it with

We share information only with service providers that help us run the Service, under contracts that protect it:

• Payment processing (Stripe), and payment providers you connect to your stores.
• Domain registration (our registrar partner).
• Hosting, email delivery, error monitoring and bot protection providers.

We may also disclose information when required by law, or to protect the rights and safety of our users and the Service, or as part of a merger or sale of our business, in which case this policy continues to apply.

5. Where it is stored

Information may be stored and processed in Canada, the United States or other countries where our providers operate. When it is, it may be accessible to authorities in those countries under their laws.

6. How long we keep it

We keep account information while your account is open and for a reasonable period after, to meet legal, tax and accounting obligations and to resolve disputes. When you close your account, store data is deleted after 30 days unless we must keep it longer by law.

7. Security

We protect information with encryption in transit (HTTPS), encryption of sensitive settings such as API keys, access controls, optional two-factor sign-in and regular backups. No system is perfectly secure; we will notify you and the relevant authorities of breaches as the law requires.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to withdraw consent, and to opt out of certain processing. California residents have the right to know, delete and correct, and to not be discriminated against for using these rights. To make a request, email support@example.com; we will verify your identity and respond within the time the law requires. You may also complain to your privacy regulator, such as the Office of the Privacy Commissioner of Canada.

9. Cookies

We use cookies that are needed to keep you signed in, remember your cart and protect forms. We do not use advertising cookies on our website.

10. Children

The Service is for businesses and is not directed at children under 16. We do not knowingly collect their information.

11. Changes and contact

We may update this policy and will post the new version here, with notice for significant changes. Questions or requests: Plura Inc., support@example.com.