Your information. How we handle it.

PLYNTUM is operated by Nikoloz Somkhishvili, a sole proprietor registered in Georgia. He determines how information collected through plyntum.com is used. Contact info@plyntum.com for privacy questions, requests about your information or the operator’s postal details. This notice covers the marketing website. Account information, Google sign-in, customer workspaces and application activity are covered by the application privacy policy .

Preparing a request keeps its details on the page. When you send it, the website stores your email, company, team size, selected priority, optional notes and selected package in its separate database. The request also has a reference, language, submission time, handling status and a matching value used to prevent duplicates. We use the details to respond and arrange the next step you requested. The website passes the request through Resend, our email-delivery provider, for follow-up. A stored receipt confirms website acceptance; it does not confirm inbox delivery or book a meeting. Sending a request does not subscribe you to marketing messages.

Scan answers, optional business context and progress are saved in this browser; the report is calculated here. They are not automatically attached to a demo request or sent as measurement data. Do not put sensitive information into optional notes. Open email draft uses your chosen email application; you decide whether to send. Any information you send separately is received through that service. Copies, downloads and printed reports remain under your control.

Measurement starts only after you allow it. To help improve the scan and demo-request process, it records predefined interactions and steps, time, language, a broad screen-size category, the entry path, and event and flow identifiers. It excludes scan answers, scores, business figures and free text from event fields. If measurement is enabled when you submit a demo request, the submission event can be linked to that request through its reference. These identifiers are pseudonymous and can still be associated with a request; they do not make the records anonymous.

You can use the scan and submit a request if you decline measurement. Change your choice with Measurement preferences at the bottom of every page. Declining immediately stops this browser from sending new optional events and requests deletion of events associated with its available flow identifiers. If server cleanup fails, the controls offer a retry and retain the identifiers needed for it. Removal cannot be guaranteed for records whose identifiers are no longer available in this browser. Withdrawing permission does not invalidate earlier lawful processing.

The website is hosted with Hetzner Online GmbH. Contact requests and optional analytics use an isolated SQLite database for the website, separate from customer workspace data. Resend provides email transport for inquiry notifications. Access is limited to authorized operations; the public website does not expose a visitor-readable list of requests or analytics records. To limit abuse, the website records an hourly hash of the network address, a counter and its expiry. Those rate-limit records do not contain the raw address. Infrastructure and email providers also process the network and delivery information needed to operate their services. Following an application, Google or Paddle link takes you into that service’s data-handling scope.

The website database keeps contact requests for 30 days and optional analytics events for 90 days. Flow records expire 90 days after creation or, following withdrawal, 90 days after revocation. Rate-limit records expire after roughly one to two hours. A daily retention-cleanup task removes expired database records. Expiry is applied by that cleanup rather than guaranteeing deletion at the exact expiry time. Website database backups are retained for seven days. Email correspondence, infrastructure logs and backups are separate records; deleting a website database entry does not erase those copies or files you have downloaded. Contact us to request deletion of information relating to your inquiry across the records we control. Records needed to meet a legal obligation or resolve a dispute may be retained for that purpose.

The saved scan has no automatic expiry set by the website. The measurement choice is valid for 180 days. Flow storage uses the browser session. Pending withdrawal identifiers have up to 90-day retry validity and are removed from the queue after confirmed server cleanup. Browser storage gives the details. Clear saved scan removes local assessment state; it does not delete a submitted request, server measurement or an exported copy. Use Measurement preferences before clearing browser data if you want to request cleanup of the flow identifiers still available.

To ask for access, correction, deletion, restriction, portability or to object where applicable, email info@plyntum.com . Include your request reference if available. We may need enough information to locate the record and verify that the request concerns you. You can withdraw optional analytics permission in the website settings without losing access to the scan or contact form. You may also complain to the competent supervisory authority or a court. In Georgia, information is available through the State Audit Office’s personal-data protection portal . Business Scan results do not make employment, credit or other legally significant decisions about you.

We use inquiry details to respond to your request and take steps you ask for before a possible service agreement. Where you contact us for an organization, our legitimate interest is handling that business inquiry. Optional website analytics relies on your consent. Service security and proportionate abuse prevention support our legitimate interest in keeping the website available. We may also process information to meet a legal obligation. These purposes do not authorize unrelated advertising or the sale of your information.

When you allow measurement, the website also loads Google Tag Manager, which runs Google Analytics 4 in Consent Mode. Nothing from Google loads before you allow it, or at all when your browser sends Global Privacy Control or Do Not Track. Google Analytics sets first-party cookies named _ga and _ga_<id> for up to two years to tell visits apart, and receives the page address, the referring page and a general device and browser description. It does not store IP addresses. The same scan and form exclusions apply: no answers, scores, figures or typed text are sent. Google processes this data for us under Google’s data processing terms and may process it outside Georgia. Turning measurement off stops the tags on the next page and switches analytics storage to denied; you can delete existing _ga cookies in your browser settings.