Privacy Policy

This explains what Plenum (operated by Ventra Marketing LLC) collects, why, and what we do with it. Short version: we collect what it takes to run the product, we don’t sell anything to anyone, and your business data is yours.

What we collect

• Your account: names, work emails and passwords (stored only as a one-way hash) of the people on your team.
• Your business data: your company details, logo, customers, bids, invoices, notes and payment records — whatever you put in.
• Your customers’ activity on your links: when a bid or invoice link is opened (time, IP address and browser), and approvals or declines with the name they type. This is what powers “Opened” and approval records.
• Email delivery: whether emails we sent for you were delivered or bounced.
• Billing: handled by Stripe. We see your plan and payment status, not your full card number.
• Security logs: sign-in attempts, IP addresses and an audit history of changes, kept to protect accounts and money records.

How we use it

• To run Plenum: show you your data, send the emails you ask us to send, record payments.
• To keep accounts and money safe: detect abuse, investigate problems, and keep an accurate history.
• To support you when you write to us, and to email you about your account (receipts, security, important changes).

We don’t sell personal information, and we don’t use your customers’ information for our own marketing.

Who we share it with

Only the service providers that run Plenum, under contracts that limit them to doing that:

• Vercel (hosting) and Neon (database) — where the app and your data live, in the United States.
• Resend — sends emails.
• Stripe — Plenum billing, and online payments into your own Stripe account if you turn them on.
• An error-reporting service, when enabled, which receives technical details of crashes (we strip customer link tokens first).

We’ll also share information if the law requires it, and we’ll tell you unless we’re legally not allowed to.

How long we keep it

For as long as your account is open. After you close it, we delete it within 90 days, except records we must keep by law. Payment and audit records may be kept longer where required.

Your choices

You can see and edit your data in Plenum at any time, ask us for an export, or ask us to delete your account by emailing support. If you’re a customer of a business that uses Plenum, contact that business first — they control the data about you; we’ll help them honor your request.

Security

Data is encrypted in transit and at rest by our providers. Passwords are hashed, links to bids and invoices are long random tokens, and every change to money records is logged. No system is perfect; if we learn of a breach that affects you, we’ll tell you promptly.

Changes

If this policy changes in a way that matters, we’ll email account owners before it takes effect.

Questions: support@projectplenum.com