Pleons — collective leverage
Operated by Pleons LLC · Effective Date: September 4, 2026 · Version 2.1
This Privacy Policy explains how Pleons LLC (“Pleons,” “we,” “us”) collects, uses, and shares information when you use the Pleons website and app at pleons.com (the “Service”). By using the Service, you agree to this Policy. If you do not agree, please do not use the Service.
Pleons is built to collect as little as possible. We use an email address to create your account, your date of birth to confirm you are old enough, a public handle you choose, and the content you post (which is public by design). Push notifications are strictly opt-in. We do not run third-party advertising or analytics trackers, we do not collect your location, and we do not sell your personal information. You can delete your account and its data yourself from inside the app. The detail below explains the specifics and your rights.
Account information. When you sign up, we collect your email address and the password you set. Your password is hashed and managed by our authentication provider; we never see or store it in plain text.
Date of birth. When you sign up we ask for your date of birth to confirm you meet our minimum age of 16. It is stored with your account, is never shown publicly, and is used only for age verification and to comply with law.
Profile information. You choose a public handle that identifies you on the Service. We also store the date and version of the Terms you agreed to, and a record of each time you accept them.
Content you create. Campaigns (boycotts, buycotts, petitions), comments, pledges, and signatures you submit. This content is public and is associated with your handle. Please do not include sensitive personal information in content you post.
Safety choices. If you block another user, we store that block so we can hide their content from you. Blocks are private; the blocked user is not notified. Reports you file are stored with your account so moderators can act on them.
Push notification subscriptions (optional). If you turn on notifications, your browser or device gives us a push subscription — an anonymous delivery address plus encryption keys, not your phone number or email — which we store so we can notify you when someone pledges to or comments on your campaign. Turning notifications off, signing out, or deleting your account removes it.
Automatically collected technical data. Like virtually all online services, our infrastructure providers record technical information when you connect — such as your IP address, browser and device type, and timestamps — for security, abuse prevention, and reliability. We do not use this to build advertising profiles.
On-device storage. We store a small “last seen” timestamp in your browser’s local storage so we can show you a summary of what changed since your last visit. This stays on your device and is not used for tracking across sites.
To be clear, the Service does not use third-party advertising networks, does not embed third-party analytics or tracking pixels, does not collect precise geolocation, and does not process payment information. We do not knowingly collect information from children (see Section 9).
Where the GDPR or UK GDPR applies, we process personal data on these bases: performance of our contract with you (providing the Service); our legitimate interests (keeping the Service secure and functional, and preventing abuse); compliance with legal obligations; and your consent where required, which you may withdraw at any time.
Publicly. Your handle and the content you post are visible to anyone who uses the Service or follows a shared link. Treat anything you post as public.
Service providers (sub-processors). We share information with vendors that host and run the Service on our behalf, under contracts that limit their use of the data. Our sub-processors are Supabase, which provides our database, authentication, and backend hosting (and, in turn, relies on cloud infrastructure providers), and Vercel, which hosts the website and runs our server functions. Sending of account emails may involve an email-delivery provider, and push notifications are delivered through your browser or device vendor’s push service (such as Google, Apple, or Mozilla). The News tab shows headlines fetched from public news feeds; no information about you is sent to those sources.
Legal and safety. We may disclose information if required by law, subpoena, or legal process, or where we believe in good faith that disclosure is necessary to protect our rights, the safety of users or the public, or to investigate fraud or abuse.
Business transfers. If Pleons is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
No sale of personal information. We do not sell your personal information and do not share it for cross-context behavioral advertising.
We use only what is necessary to run the Service: a secure session token from our authentication provider to keep you logged in, and the local-storage value described in Section 2. We do not use advertising or cross-site tracking cookies, so the Service does not display a tracking-consent banner for those purposes. You can clear this data anytime through your browser settings, though doing so will sign you out.
We keep your account information for as long as your account is active. When you delete your account from your profile page, your account, campaigns, pledges, comments, blocks, and notification subscriptions are permanently deleted right away. Copies may persist briefly in routine backups, and we may retain limited records where required to comply with law, resolve disputes, or enforce our agreements. Reports and moderation records may be kept in de-identified form.
The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child under 16 has provided us personal information, contact us at privacy@pleons.com and we will delete it.
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of California (under the CCPA/CPRA) have rights to know, delete, correct, and to opt out of sale or sharing — and as noted, we do not sell or share personal information for advertising. You will not be discriminated against for exercising these rights.
To exercise any right, email us at privacy@pleons.com. We may need to verify your identity before acting. You can also delete your account yourself at any time: open your profile in the app and choose “Delete my account.” Notifications can be turned off from the bell icon or your device settings.
We rely on reputable infrastructure providers and use reasonable technical and organizational measures — such as encryption in transit, hashed passwords, and access controls — to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
We operate in the United States, and our providers may process and store information in the United States and other countries. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country. Where required, we rely on appropriate safeguards for such transfers.
We may update this Policy from time to time. We will revise the version number and effective date above and, for material changes, provide a more prominent notice. Your continued use of the Service after an update takes effect means you accept the revised Policy.
Privacy questions or data requests: privacy@pleons.com. General support: hello@pleons.com. Mail: Pleons LLC, 1420 Stavemill Rd, Powhatan, VA, 23139.