Privacy Policy

Last updated: November 5, 2026

This Privacy Policy explains what personal data Plerdy processes, why, for how long, who receives it and what rights you have.

1. Who we are

Plerdy is operated by Andrii Chornyi, individual entrepreneur (FOP), Ukraine ("Plerdy", "we").
Contact for all privacy questions: [email protected]

2. Our two roles

Whose data	Examples	Plerdy's role
Clients: people and companies with a Plerdy account, and their team members	name, email, billing	Controller: this policy applies
Visitors: people who visit a client's website with the Plerdy code	clicks, pages, session recordings, popup form entries	Processor: the client (website owner) decides and is responsible under its own privacy policy

If you visited a website that uses Plerdy, please contact the owner of that website first. We will help them answer your request.

3. Data about clients

Data	Why	Legal basis
Name, email, password (stored as a hash), language, time zone, country; phone if you provide it; Google sign-in ID if you use it	to create and run your account	contract
Emails and access levels of team members you invite	to give your team access	contract, legitimate interest
Plan, order history, payment status received from our payment provider	billing, accounting and tax	contract, legal obligation
Sign-in times, registration IP address, one-time login codes, access tokens	to protect accounts and prevent abuse	legitimate interest
If you redeem an AppSumo code: the code, your email, the purchase and refund status received from AppSumo	to activate and manage your AppSumo package	contract
Support messages, notification settings	support and service messages	contract, legitimate interest
Newsletter subscription	product news	consent, which you can withdraw at any time

We do not store payment card numbers. Payments are processed by Paddle.com, which acts as the merchant of record.

4. Data about visitors of clients' websites

When a client installs the Plerdy code, Plerdy collects on the client's behalf:

Technical data: country, browser, operating system, device type, screen size. The IP address is used only at the moment of the request, to determine the country and to apply the client's list of excluded IP addresses. It is not stored with clicks, scrolling, traffic data or session recordings.
Behaviour on the website: pages viewed, referrer and campaign tags, clicks, scrolling, mouse movement, time on page, page errors, purchases reported by the website (order ID, value, products).
Session recordings: a reconstruction of the page and the visitor's actions, not a video. Values typed into form fields are masked in the browser before sending; password, email, phone, name and address fields are always masked.
Form analytics: which fields were used and errors, not what was typed.
Popup forms and chat: what the visitor chooses to submit (for example name, email, phone, message). This data is delivered to the client, including to email-marketing or CRM services the client connects.
Visitor ID: a pseudonymous identifier generated from technical characteristics of the browser and kept in the browser's local storage, so that repeat visits to the same website are counted correctly. It is not used to follow people across different websites.

If the visitor's browser sends Global Privacy Control or Do Not Track, Plerdy does not collect data about that visitor (see Do Not Track). Clients can load the Plerdy code only after the visitor gives consent in the website's consent banner. Clients are responsible for informing visitors and obtaining consent where the law requires it.

We use visitor data only to provide the service to the client. We do not sell it, do not use it for our own purposes and do not combine data of different clients.

5. Cookies and browser storage

On clients' websites, the Plerdy code stores the visitor ID, traffic source and technical settings in the browser's local storage. It sets one cookie only when a Plerdy popup is shown, to remember that the visitor closed it (up to 60 days). Plerdy does not set advertising cookies.

On plerdy.com and in the Plerdy app, we use cookies needed to sign in and keep your session. With your consent, we also use analytics and advertising tools, including Plerdy itself, to understand how our website is used.

6. Who receives data

We share personal data only with service providers that help us run Plerdy, under contracts that oblige them to protect it:

hosting and data storage (Germany);
content delivery and protection against attacks;
payments, invoices and tax (Paddle);
AppSumo, if you bought an AppSumo package: to confirm the code and its refund status;
sending service emails and newsletters;
AI features, when the client uses them;
services the client connects, such as Google Search Console, Google Sheets, Telegram, Slack, email-marketing and CRM services.

The list of providers that process data of clients' website visitors is published in our Data Processing Agreement. We may also disclose data when required by law, to protect our rights, or to a successor in case of a sale or merger of the business, who will be bound by this policy.

7. International transfers

Plerdy is operated from Ukraine; our team may access data from Ukraine to provide support and maintain the service. Some providers are located outside the European Economic Area. For such transfers we use the European Commission's Standard Contractual Clauses or other safeguards required by law. Our Data Processing Agreement with Standard Contractual Clauses applies automatically to all clients, on every plan.

8. How long we keep data

Data	Retention
Client account	while the account is active. When you delete your account, your account data and all visitor data of your websites are deleted, except billing records we must keep by law.
Billing records	as long as tax and accounting law requires
Visitor data	deleted automatically after the data history period of the client's plan
Session recordings	for the period the client chooses in the settings
Chat messages	according to the client's chat settings

9. Security

We protect data as described in our Security Policy. If a security incident affects your data, we will inform you without undue delay.

10. Your rights

Depending on where you live, you have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format and withdraw consent at any time.

To use your rights, email [email protected]. We answer within one month. We may ask you to confirm your identity. Visitors of clients' websites should contact the website owner first.

You can also complain to the data protection authority in your country. In Ukraine, this is the Ukrainian Parliament Commissioner for Human Rights.

California residents: you have the right to know, delete and correct your personal information and not to be discriminated against for using these rights. Plerdy does not sell or share personal information for cross-context behavioural advertising.

Brazil (LGPD): you have the rights listed in Article 18 of Law 13.709/2018, which you can use as described above.