Privacy Policy

Privacy Policy

Last updated: August 11, 2026

This page is a technical draft and does not constitute legal advice. Before publishing it, replace the placeholders and have the final text reviewed by a qualified legal professional.

1. Data controller

PLANLISH is operated by [LEGAL COMPANY NAME], located at [REGISTERED ADDRESS]. For privacy requests, contact support@planlish.com.

2. Data we process

Depending on the features you use, we may process:

  • Account and profile data, such as your name, email address, profile image, language, and organization membership.
  • Authentication data required to sign you in and protect your account.
  • Social account identifiers, access tokens, granted permissions, and connection status.
  • Content you create, upload, schedule, or publish, including text, images, videos, links, and metadata.
  • Billing records, subscription state, and payment provider references. Full card details are handled by the selected payment provider and are not stored by PLANLISH.
  • Technical and security data, such as IP address, browser information, device information, logs, and error reports.
  • Product analytics data only after you provide analytics consent, where consent is required.
  • Messages and support requests you send to us.

3. Why we process data

We process data to:

  • Create and secure your account.
  • Connect the services you authorize.
  • Publish and schedule content on your behalf.
  • Provide file storage, background jobs, email delivery, billing, support, and abuse prevention.
  • Measure product reliability and improve the service, subject to your choices and applicable law.
  • Comply with legal obligations and enforce our agreements.

4. Legal bases

Depending on the context and applicable law, processing may be based on performance of a contract, consent, compliance with a legal obligation, or our legitimate interests in operating and securing the service.

5. Service providers and integrations

PLANLISH may send the minimum necessary data to providers selected for the deployment, including:

  • Hosting, database, object storage, background job, email, monitoring, analytics, and payment providers.
  • Social networks and content platforms you explicitly connect.
  • Google Drive, Canva, or media-library providers when you choose to use those features.
  • AI providers only when you configure and invoke the relevant feature. Bring-your-own-key credentials are used for the requested operation.

Each external provider processes data under its own terms and privacy policy. The actual provider list must be kept consistent with the production configuration.

6. International transfers

Some providers may process data outside your country. Where required, appropriate safeguards should be documented and implemented by [LEGAL COMPANY NAME].

7. Retention

We retain data only as long as necessary for the purposes described here, contractual commitments, security, dispute resolution, and legal obligations. Access tokens are removed when an integration is disconnected, subject to backups and provider-side retention. Specific retention periods must be defined in the production data-retention schedule.

8. Cookies and analytics

Essential cookies are used for authentication, security, language, and core application behavior. Optional marketing analytics scripts are not loaded until you accept analytics cookies. You can reopen analytics settings from the website footer and change your choice.

9. Security

We use technical and organizational safeguards designed to protect data, including access controls, encrypted transport, secret separation, validation of external callbacks, and audit or error logging where configured. No system can guarantee absolute security.

10. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may also withdraw consent without affecting prior lawful processing.

Submit requests to support@planlish.com. We may need to verify your identity before completing a request.

11. Account and integration deletion

You can disconnect external integrations from the application and delete your account from Settings → Account. Detailed instructions are available on the Data Deletion page.

12. Changes

We may update this policy when the service, providers, or legal requirements change. The updated date will be shown at the top of this page.