⚠️ Plen is in open beta. Things may change or break. Full launch expected January 2027. Questions or want to help test? info@plen.work

Plen - Privacy Policy

Version: 2.7 · Last updated: 17 October 2026

This Privacy Policy explains what personal data Wilb collects when you visit plen.work or use Plen, why we collect it, how long we keep it, and what rights you have under the General Data Protection Regulation (GDPR / AVG).

It should be read together with our Terms & Conditions. Where the two overlap, this Policy governs questions about personal data.

1. Who is responsible for your data

The data controller for the personal data described in this Policy is:

In this Policy, “we”, “us” and “our” mean Wilb.

2. The short version

In short: if you use Plen in your browser, the plannings you create are stored on our servers in the EU (Frankfurt) so they're there when you sign in from anywhere, along with your email address, subscription status, and any plannings you've shared. You can see everything, download your plannings, and delete everything from within Plen. We use no tracking and no analytics. We never sell or share your data, show ads, or use your plannings, files, or messages to train AI, ours or anyone else's. (The legacy desktop app still runs entirely on your computer and sends nothing unless you use its online features.)

3. Where your plannings live

Plannings stored in Plen live in our EU database so we can show them back to you; we do not read, analyse, or use their contents for anything other than providing the service, and no one else has access, except the people you invite to a planning, who see that planning. Plannings on your own computer (legacy desktop) never reach us at all unless you share them.

4. What we never do

We never sell or share your data, show ads, or use your plannings, files, or messages to train AI, ours or anyone else's. Section 7 lists the service providers that help us run Plen and what each one does.

5. What we collect, why, and on what legal basis

5.1 Data we process for Plen

When you use Plen we process: your email address (your account identifier, for sign-in codes and service emails), your subscription status (from Paddle; we never see payment details), your signed-in devices and browser sessions (so you stay signed in and can sign out remotely), the plannings you create in Plen (stored so you can open them from any device, until you delete them), the plannings you choose to share (a share link is stored as the generated HTML page with its settings; a try link as a copy of the planning's data, which opens in Plen for anyone with the link), your logo if you upload one (stored privately as a processed image, and shown on your share pages and their lock screen), your display name if you set one (shown on your share pages, their lock screen and your try links), and the email addresses of the people you invite to a planning (see 5.4). Your logo and display name are removed when you delete all your online data or your account. Server logs (IP address, request time) are kept briefly for security and troubleshooting.

The legacy desktop app without those online features processes no personal data and sends nothing to us.

5.2 Tax and accounting records

As a Dutch business we are legally required to keep records relating to our sales.

5.3 Website visits

The Site is static and informational. It sets no tracking cookies and runs no third-party analytics (see our Cookie Policy). Our hosting provider may process limited technical server logs (such as IP address and request time) as a normal part of serving and securing a website; these are not used to identify or profile you.

5.4 Sharing a planning with other people

When you invite someone to a planning, we store their email address and the planning's name with the invitation, and send them one email saying who invited them. The email contains nothing that opens the planning: they accept inside Plen, signed in with that address. Everyone in a shared planning sees the planning, each other's display name (or email address when no name is set) and who has it open right now. They see nothing else about anyone's account: not other plannings, not subscriptions, not devices. People you invite can make their own copy while the planning is shared with them; a copy is theirs and stays theirs. If you remove someone, delete the planning or your subscription ends, they can no longer open it, and we send no email about it. If you delete a shared planning, the people you shared it with keep only its name on their list, marked as no longer shared, until they remove it. If you delete all your data or your account, that name is removed too.

5.5 Connecting Plen to Claude or ChatGPT

If you connect Plen to your own Claude (made by Anthropic) or ChatGPT (made by OpenAI), you approve it on a Plen page with your email address and a sign-in code. That app can then read, create and edit your plannings when you ask it to, and nothing else: not your share links, your account, your subscription or your billing. What it reads is sent to the app's maker (Anthropic or OpenAI) under your own agreement with them; Plen sends your plannings to no AI provider itself and holds no AI keys of its own. We store the connection as one of your signed-in devices ("Claude, connected app" or "ChatGPT, connected app"), with its keys stored only in a one-way scrambled form (hashed); it ends after 60 days without use, and you can revoke it at any time in Plen under Dashboard, Devices. Its edits are checked by Plen's own rules before they are saved. A connected app sees only plannings you own, never plannings shared with you. How to connect Plen to Claude.

6. When you email us

If you email us, for example to ask a question or report a problem, we receive your email address and your message. We use them only to help you, we share them with no one, and we keep them for as long as your matter or the law requires. The legal basis is our legitimate interest in answering correspondence (Article 6(1)(f) GDPR).

7. Who helps us process this data

We use a small number of service providers, each bound by data processing agreements:

Paddle (merchant of record): handles checkout, payment, VAT, and invoices; Paddle is an independent controller for payment data. Supabase: our database and file storage, hosted in the EU (Frankfurt, Germany). Vercel: hosts the website and the server functions that power Plen. Resend: sends our service emails (sign-in codes, subscription notices, invitations to a shared planning). Anthropic and OpenAI are not our service providers: if you connect Plen to Claude or ChatGPT, you share your plannings with that app yourself, under your agreement with its maker (see 5.5). We do not sell or share your data with anyone else, and we use no analytics or advertising services.

8. How long we keep things

Sign-in codes expire after 10 minutes and are then useless; their records are deleted within about a day. Signed-in device records last until you sign that device out or delete your data, and are removed automatically after about 200 days without use. Shared plannings stay online while your subscription is active; after a subscription ends they remain stored for up to 90 days (so resubscribing can restore your links), then are permanently deleted. Plannings you create in the browser are kept while your account exists. Deleting a planning moves it to the trash; it is permanently erased 30 days later. “Delete all my online data” in Plen removes every planning, every shared page, every link record, and your signed-in sessions immediately. If your subscription ends, your plannings remain yours: you can still open, download, and delete them; only creating and saving new work requires an active subscription. If you delete your account, everything we store is removed immediately. Records of your payments (invoices, transactions) are kept by Paddle, our merchant of record, for their legal and tax obligations.

You have the usual GDPR rights (access, correction, deletion, objection, portability). For anything that button doesn't cover, email info@plen.work.

9. Your rights under the GDPR

You have the right to:

To exercise any of these rights, email us at info@plen.work. We will respond within one month. We will not charge a fee unless a request is manifestly unfounded or excessive.

You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the supervisory authority in your country of residence.

10. Cookies and analytics

The Site uses no tracking, analytics or advertising cookies. Two strictly functional mechanisms exist (the short-lived cookie that unlocks a password-protected share link, and the sign-in token that keeps you signed in to Plen), described in our Cookie Policy. Because they are strictly necessary for features you explicitly use, no consent is required under Article 11.7a of the Dutch Telecommunications Act.

11. Children

Plen is a productivity tool intended for general and professional use. It is not directed at children, and we do not knowingly collect personal data from children.

12. Changes to this Policy

We may update this Policy from time to time. We will publish the current version at plen.work with a clear effective date. Material changes affecting how we use your personal data will be reflected in the version and date shown above.

13. Contact

For any question about this Policy or your personal data, email us at info@plen.work.

Wilb · KvK 64118908 · Amsterdam, the Netherlands