Privacy Policy

When you create a Plexovia account, we collect:

• Your email address and password (or OAuth identity if you use Google Sign-In)
• Your company name (optional, provided during onboarding)
• Your monitoring preferences: NAICS codes, states, keywords, and set-aside designations
• Subscription and billing data managed through our payment processor (LemonSqueezy)

When you use the service, we may also collect usage data such as pages visited, features used, and session timestamps. We do not collect or store payment card information directly.

We use the information we collect to:

• Surface daily contract matches in your dashboard based on your monitoring profile
• Operate, maintain, and improve the Plexovia platform
• Process payments and manage your subscription
• Send transactional emails such as welcome messages, trial reminders, and billing notifications
• Respond to your support requests
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

Your data is stored in a Supabase PostgreSQL database hosted on AWS infrastructure. We use industry-standard encryption in transit (TLS) and at rest. Access to your data is restricted to authorized personnel only.

While we take security seriously, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

The NAICS codes, states, keywords, and set-aside preferences you provide are used exclusively to match government procurement opportunities on your behalf. This data is stored in your profile and can be updated or deleted at any time through the dashboard.

By creating an account, you consent to receiving transactional emails from Plexovia, including welcome messages, trial reminders, and billing notifications. Contract matches are delivered through your dashboard, not by email. You cannot opt out of critical account emails such as billing receipts and password resets.

We use the following third-party services to operate the platform:

• Supabase (authentication and database)
• LemonSqueezy (payment processing and subscription management)
• Resend (transactional email delivery)

Each of these providers has their own privacy policy governing data they process. We do not share your data beyond what is necessary to operate these integrations.

We use session cookies to maintain your authenticated state. We do not use advertising or tracking cookies. Browser local storage may be used to persist UI preferences.

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or to resolve disputes.

Depending on your location, you may have rights to access, correct, delete, or export your personal data. To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

Plexovia is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the platform. Your continued use of the service after changes become effective constitutes acceptance of the updated policy.

Questions about this Privacy Policy? Email us at [email protected].