We collect the following information when you use PlainSec:
Account information: email address, name, avatar, and profile details you provide through email registration or Google sign-in via Clerk.
Preferences: language, timezone, focus areas, region, and vendor selections you configure in your profile.
Usage data: cookieless web analytics such as pages visited, briefing engagement, and email link attribution. When you use MCP, we also collect authorization outcomes, OAuth client identifiers, MCP client name and version hints, tool names, success or error outcomes, and durations. MCP analytics uses pseudonymous user and connection keys and does not include tokens, prompts, tool inputs, or returned content.
How We Use Your Information
We use your information to:
Publish the cybersecurity briefing on the web and deliver it by email at 7:00, Monday to Friday.
Personalize briefing content based on your industry and technology preferences.
Send service-related communications such as briefing delivery and account notifications.
Cookies
PlainSec uses essential cookies for authentication session management (via Clerk) and theme preferences. PostHog web analytics runs without persistent browser storage and honors browser Do Not Track. We do not use third-party advertising or tracking cookies.
Third-Party Services
We use the following third-party services to operate PlainSec:
Clerk: authentication and user account management.
Brevo: email delivery for daily briefings.
Cloudflare: web hosting, CDN, and DDoS protection.
PostHog: cookieless web analytics and pseudonymous MCP usage analytics.
Stripe: subscription billing and payment processing for PlainSec Pro.
Data Retention
We retain your account data for as long as your account is active. Usage analytics and briefing delivery logs are retained for up to 90 days. You may request deletion of your account and associated data, including analytics linked to your pseudonymous MCP key, at any time by contacting us.
Your Rights
You have the right to:
Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and personal data.
Unsubscribe from email briefings at any time via the unsubscribe link in each email.
Object to or request restriction of non-essential usage analytics associated with your account.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Service after changes constitutes acceptance.
Contact
For privacy-related questions, contact us at privacy@plainsec.com.