Legal
Privacy Notice
Last updated: June 2, 2026.
Who We Are
This Privacy Notice is issued by ISEI Consulting, LLC dba Plainscope ("Plainscope", "we", "us"), a Hawaii limited liability company. Plainscope acts as the data controller for personal data collected through plainscope.ai and the Plainscope application.
Personal Data We Collect
Account data: name, email address, password hash, organization name. Service data: intake responses, control narratives, POA&M items, SSP drafts you create. Support data: messages you send to support@plainscope.ai. Usage data: pages visited, features used, session timestamps, IP address, browser and device identifiers. Cookies: essential session cookies and limited analytics cookies (see Cookies below).
Purposes and Legal Bases
We process personal data to: (a) create and operate your account and provide the Plainscope service — performance of contract; (b) secure the service and prevent fraud or abuse — legitimate interests; (c) provide customer support — performance of contract; (d) improve the product — legitimate interests; (e) send service notifications and, where you have opted in, marketing communications — consent or legitimate interests; (f) comply with legal obligations — legal obligation.
Data Sharing
We share personal data only with: (a) subprocessors that host and operate the service — Supabase (database and authentication, United States), Lovable AI Gateway (AI inference, United States), Resend (transactional email, United States); (b) Paddle.com Market Ltd., our Merchant of Record, which handles checkout, billing, subscription management, tax compliance, and invoicing for all paid plans; (c) professional advisers (legal, accounting) under confidentiality; (d) governmental authorities where required by law. We do not sell personal data.
International Transfers
Our infrastructure is located in the United States. If you access Plainscope from outside the United States, your personal data will be transferred to and processed in the United States.
Data Retention
We retain account and service data for as long as your account is active. On account or organization deletion, we delete or anonymize associated personal data within 30 days, except where retention is required by law (e.g., tax or accounting records held by Paddle). Audit logs are retained for the life of the account.
Your Rights
Subject to applicable law, you may request access to, correction of, deletion of, or a copy of your personal data; restrict or object to certain processing; and withdraw consent at any time. To exercise these rights, email privacy@plainscope.ai. We will respond within 30 days. You may also lodge a complaint with the data protection authority in your jurisdiction.
Security
We use appropriate technical and organizational measures including encryption in transit (TLS 1.3), encryption at rest (AES-256), Postgres Row-Level Security for tenant isolation, hashed passwords, and least-privilege access controls. See /security for details.
Cookies
We use essential cookies required to keep you signed in and to operate the service. We may use limited analytics cookies to understand aggregate usage. You can manage cookie preferences through your browser settings; disabling essential cookies will prevent the service from functioning.
Children
Plainscope is intended for use by business contractors and is not directed to children under 16. We do not knowingly collect personal data from children.
Changes to This Notice
We may update this Privacy Notice from time to time. Material changes will be notified by email or in-app notice at least 14 days before they take effect.
Contact
ISEI Consulting, LLC dba Plainscope, Honolulu, HI. Privacy inquiries: privacy@plainscope.ai. Security reports: security@plainscope.ai.