Legal
Privacy Policy
How we handle personal data on the Plain website.
Introduction
This Privacy Policy describes how Plain ("we", "us", or "our") collects, uses, and shares information about you when you use our services. Effective Date: 2026-01-01.
If you have questions about this policy, please contact us at hello@plain.jxd.dev.
Information We Collect
We collect the following categories of personal data for the purposes described below. Under GDPR Article 6, we rely on the lawful bases shown for each processing purpose:
| Category | Fields collected | Purpose | Lawful basis |
|---|---|---|---|
| Contact Information | Name, Email address | To respond to your enquiry and follow up about the matter you raised. | Legitimate interests (Article 6(1)(f)) |
| Waitlist Information | Email address, Current code host, Team size, Primary workflow pain point | To add you to the early-access waitlist, gauge demand, and tailor your onboarding when we launch. | Consent (Article 6(1)(a)) |
| Usage Data | Pages visited, Referrer, Browser type, Device type, IP address, Approximate location (country/region), Page performance metrics, Errors encountered | To understand how visitors use this website and improve its content and performance. | Legitimate interests (Article 6(1)(f)) |
Right to Withdraw Consent
Where we rely on your consent for any processing of your personal data, you have the right to withdraw that consent at any time by contacting us at hello@plain.jxd.dev. Withdrawing your consent does not affect the lawfulness of any processing we carried out before you withdrew it. Where consent is required to provide a particular feature or service, withdrawing it may mean we are no longer able to offer that feature or service.
Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you within the meaning of GDPR Article 22.
Data Retention
We retain your data for the following periods:
| Category | Retention period |
|---|---|
| Contact Information | 24 months from your last contact with us |
| Waitlist Information | Until you ask to be removed, or 24 months after launch, whichever is sooner |
| Usage Data | 12 months |
Whether You Are Required to Provide This Data
For each category of personal data we collect, we set out below whether you are required to provide it — by law, under our contract with you, or as a precondition to entering into a contract — or whether provision is voluntary, together with the consequences of failing to provide it.
| Category | Requirement | Consequences |
|---|---|---|
| Contact Information | Required to enter into a contract | We cannot respond to your enquiry without your contact details. |
| Waitlist Information | Voluntary | Joining the waitlist is optional — you can browse the site without submitting the form. The probe answers are optional; only your email address is required to join. |
| Usage Data | Voluntary | The site functions normally with site analytics disabled. |
Third-Party Services
We share data with the following third-party services:
| Service | Purpose | Privacy policy |
|---|---|---|
| Databuddy | Privacy-friendly, cookieless website analytics. Collects aggregate usage statistics only — no tracking cookies, and IP addresses are discarded after deriving approximate location. | View |
| Neon | Hosting the serverless database that stores waitlist signups. | View |
| Vercel | Hosting and deployment infrastructure | View |
| Google Fonts | Serving web fonts used in the site typography. | View |
Your Rights
You have the following rights regarding your personal data:
- Right to access your personal data
- Right to correct inaccurate data
- Right to request deletion of your data
- Right to receive your data in a portable format
- Right to restrict how we process your data
- Right to object to processing
UK Privacy Rights (UK-GDPR)
This section applies to individuals in the United Kingdom under the UK General Data Protection Regulation (UK-GDPR), as tailored by the Data Protection Act 2018.
Data Controller: JXD Ltd, 86-90 Paul Street, London, EC2A 4NE, United Kingdom
We have not appointed a Data Protection Officer. Our processing activities do not meet the thresholds in GDPR Article 37(1) that would require one. For any questions about this policy or how we handle your personal data, please use the contact details above.
The supervisory authority for data protection in the UK is the Information Commissioner's Office (ICO). If you believe we have not handled your data in accordance with UK data protection law, you have the right to lodge a complaint with the ICO at ico.org.uk/make-a-complaint.
If we transfer your personal data outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with the UK-GDPR, including the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses where applicable.
Contact Us
Contact us:
- Legal Name: JXD Ltd
- Address: 86-90 Paul Street, London, EC2A 4NE, United Kingdom
- Email: hello@plain.jxd.dev