Privacy Policy

This Privacy Policy describes how Plera ("we", "us", or "our") collects, uses, discloses, stores, and protects personal information when people use Plera, our sales strategy, lead discovery, enrichment, sequencing, outreach, analytics, billing, websites, integrations, and related services (the "Services").

1. Scope and Our Roles

Plera is a business-to-business SaaS platform used by customers to create sales plays and runs, discover and enrich leads, generate and review outreach sequences, connect sender accounts, send email or LinkedIn outreach, measure replies and analytics, and manage billing.

We process information in two main roles:

• Controller or business: We decide how to process account, workspace, billing, support, security, website, product usage, and service administration information.
• Processor or service provider: We process customer content, prospect or lead records, connected account data, outreach messages, replies, and campaign data on behalf of the customer that uses Plera, except where we need to process that information for security, fraud prevention, billing, legal compliance, service improvement, or other independent business purposes.

If you are a prospect or lead contacted through Plera by one of our customers, the customer is usually the organization that decides why your information is processed and contacted. You should contact that customer for questions about their outreach practices, unsubscribe requests, or suppression requests. We also provide controls and support to help customers honor suppression, deletion, and objection requests.

2. Information We Collect

Account, Authentication, and Workspace Information

We collect information needed to create, authenticate, secure, and administer accounts and workspaces, including:

• name, email address, password credentials or authentication identifiers;
• sign-in information if you use a third-party authentication provider;
• workspace or organization name, membership, roles, invitations, preferences, and onboarding status;
• session, device, IP address, user agent, authentication event, and security metadata.

Customer Content and Workflow Data

Customers and users may submit or generate information in the Services, including:

• play, run, campaign, strategy profile, sender, offer, proof, tone, and call-to-action information;
• search queries, lead source criteria, filters, notes, clues, enrichment instructions, and workspace blocklists;
• generated, edited, approved, rejected, scheduled, or sent sequence messages;
• delivery, reply, lead status, analytics, readiness, and operational event data.

Please do not submit sensitive personal information unless it is necessary for your lawful use of the Services and your agreement with us permits it.

Prospect, Lead, and Enrichment Information

Plera is designed for business lead discovery, enrichment, and outreach. Depending on how a customer uses the Services, we may process prospect and lead information that comes from public sources, provider-backed discovery and enrichment services, customer uploads or inputs, connected accounts, replies, and user edits. This may include:

• name, first name, last name, job title, employer, company, industry, and firmographic information;
• business email address, LinkedIn URL, LinkedIn identifier, website URL, and phone number where available;
• publicly available professional profile information, source URLs, search result snippets, enrichment data, confidence signals, and provider payloads;
• campaign membership, lead status, outcome, notes, events, outreach history, message content, replies, and suppression or blocklist status.

Publicly available or business contact information may still be personal information under some laws. We treat it according to this policy and the customer agreements that govern the relevant workspace.

Connected Sender Accounts and Integrations

When a user connects a sender or integration account, we and our integration providers may process information needed to connect, verify, operate, and disconnect that account. This may include:

• provider type, provider account identifier, account name, account email, connection status, and account metadata;
• authorization, delivery, thread, reply, and provider event information;
• information needed to send approved outreach through Gmail, Outlook, LinkedIn, or other supported channels.

Plera uses third-party integration services to connect and operate supported accounts. Those third-party platforms may also process information under their own terms and privacy policies.

Billing, Subscription, and Credit Information

We collect and process subscription, checkout, payment, credit ledger, and billing operations information, including:

• plan, subscription status, credit balance, credit transactions, operation identifiers, and billing metadata;
• payment email, checkout reference, payment processor customer and subscription identifiers, and payment confirmation records.

Payment card or bank details are processed by our payment processor. We do not intentionally store full card numbers in Plera.

Usage, Device, and Technical Information

We and our service providers collect technical information to operate, secure, troubleshoot, and improve the Services, including:

• IP address, browser type, device type, operating system, referring page, timestamps, request logs, route activity, and error logs;
• usage, security, delivery, support, and audit records;
• cookie and local storage data needed for authentication, session continuity, selected workspace or run scope, security, and product functionality.

Communications and Support

If you contact us, request support, respond to transactional emails, or participate in product or sales communications, we may collect your contact details and the contents of those communications.

3. How We Use Information

We use information to:

• provide, operate, maintain, secure, and debug the Services;
• create and authenticate accounts, manage workspaces, invite team members, and administer access controls;
• run lead discovery, enrichment, sequence generation, sending, replies, analytics, and billing workflows;
• connect, verify, operate, and disconnect third-party sender and integration accounts;
• generate, review, schedule, send, and track customer-approved outreach;
• process payments, subscriptions, credits, invoices, refunds, and billing support;
• send transactional emails, account notices, service updates, and support communications;
• enforce usage limits, prevent abuse, detect security incidents, maintain accurate records, and support auditability;
• improve the Services, including quality, reliability, workflows, and user experience;
• comply with legal obligations, enforce our agreements, and protect our rights, users, customers, prospects, providers, and the public.

4. AI, Automation, and Provider-Backed Processing

Plera uses AI, automation, and third-party service providers to help customers find and enrich leads, evaluate context, generate draft outreach, assess readiness, and support campaign operations. We may update the providers and technical methods used to deliver the Services over time.

Customers are responsible for reviewing and approving outreach before launch. Plera may generate draft content and recommendations, but the customer remains responsible for ensuring that its outreach is lawful, accurate, appropriate, and consistent with its own privacy and communications obligations.

We do not intentionally use customer content, prospect data, or outreach messages to build or sell unrelated third-party data products. We may use operational metadata, aggregated information, deidentified information, and limited examples where permitted by agreement or law to improve the Services.

5. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies for authentication, session management, security, workspace or run selection, preferences, and core product functionality. We may also use technical logs and request metadata for analytics, abuse prevention, debugging, and reliability.

If we add marketing analytics, advertising pixels, session replay, or cross-site tracking in a way that materially changes our privacy practices, we will update this policy and provide any legally required notices or choices.

Most browsers let you block or delete cookies. Blocking necessary cookies may prevent login, workspace access, or other core features from working correctly.

6. How We Disclose Information

We may disclose information to:

• Infrastructure and hosting providers, including services used for hosting, storage, logs, security, and operational processing.
• Authentication and communication providers, including services used for account authentication, transactional email, invitations, password reset, and verification messages.
• Discovery, enrichment, AI, and integration providers, including services used to discover and enrich leads, generate or evaluate content, connect sender accounts, send outreach, receive replies, and process provider events.
• Payment and billing providers, including services used to process checkout, subscriptions, payment verification, credits, and billing records.
• Customer workspace members, according to their permissions and roles inside the customer workspace.
• Professional advisors, such as lawyers, auditors, accountants, insurers, and security advisors.
• Authorities or third parties when legally required or necessary, including to comply with law, respond to lawful requests, protect rights and safety, prevent fraud or abuse, enforce agreements, or investigate security issues.
• Successors in a business transaction, such as a merger, financing, acquisition, reorganization, or sale of assets.
• Other parties with consent or at the direction of the customer or user.

We do not sell personal information in the ordinary meaning of exchanging it for money. We also do not intentionally share personal information for cross-context behavioral advertising. If that changes, we will update this policy and provide legally required opt-out controls.

7. Customer Responsibilities for Outreach and Prospect Data

Customers must use Plera lawfully. This includes responsibility for:

• having a valid legal basis or permission to process prospect and lead information;
• ensuring outreach complies with applicable privacy, anti-spam, electronic communications, direct marketing, platform, and professional conduct rules;
• honoring unsubscribe, objection, deletion, suppression, and do-not-contact requests;
• keeping uploaded, configured, or approved content accurate and appropriate;
• avoiding sensitive categories of personal information unless permitted by law and by the applicable customer agreement;
• ensuring connected sender accounts are authorized and used consistently with provider terms.

Plera includes operational controls intended to support compliant use, but customers remain responsible for their own campaign decisions and legal obligations.

8. Legal Bases Where Required

Where GDPR, UK GDPR, POPIA, or similar laws require a legal basis, we rely on one or more of the following:

• Contract: to provide the Services, authenticate users, manage workspaces, operate connected accounts, process payments, and provide support.
• Legitimate interests: to secure, improve, debug, measure, prevent abuse of, and operate the Services; to process business contact and professional lead information; to send service communications; and to protect legal rights.
• Consent: where required for optional integrations, certain communications, or optional cookies or tracking.
• Legal obligation: to comply with tax, accounting, sanctions, regulatory, court, law enforcement, security, and other legal requirements.
• Customer instructions: where we process customer content, prospect data, outreach data, and connected account data as a processor or service provider.

9. International Transfers

We may process and store information in countries other than where you live or where your organization is established. Our service providers may be located in, or access information from, the United States, South Africa, the United Kingdom, the European Economic Area, and other jurisdictions.

Where required, we use appropriate transfer mechanisms such as contractual commitments, data processing agreements, standard contractual clauses, adequacy decisions, customer instructions, or other lawful safeguards.

10. Retention

We retain information for as long as needed to provide the Services, maintain accurate business and security records, comply with legal obligations, resolve disputes, enforce agreements, and support customer-directed workflows.

Typical retention depends on the type of information:

• account, workspace, authentication, and billing records are retained while the account or workspace is active and for a reasonable period afterward;
• customer content, lead data, sequence data, connected account data, and campaign records are retained according to the customer agreement, workspace settings, deletion requests, and operational backup practices;
• technical, provider, usage, billing, security, and audit records are retained as needed for operations, billing, security, and legal compliance;
• deidentified or aggregated information may be retained for longer where it cannot reasonably identify an individual.

Deletion from active systems may not immediately remove information from backups, logs, provider systems, or records we must keep for legal, security, billing, or dispute-resolution reasons.

11. Security

We use technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These include access controls, authentication, secure credential handling, usage controls, logging, monitoring, and other safeguards appropriate to the nature of the Services.

No system is perfectly secure. Users are responsible for keeping credentials secure, limiting workspace access to authorized personnel, and promptly revoking accounts or integrations that should no longer have access.

12. Your Privacy Choices and Rights

Depending on where you live and how the information is processed, you may have rights to:

• access or know what personal information is processed;
• correct inaccurate information;
• delete information;
• object to, restrict, or opt out of certain processing;
• withdraw consent where processing is based on consent;
• request portability;
• appeal or complain about how a request was handled;
• opt out of sale, sharing, or targeted advertising where applicable;
• limit the use or disclosure of sensitive personal information where applicable.

To exercise rights for your Plera account or workspace information, contact us at info@plera.co. We may need to verify your identity and authority before fulfilling a request.

If your request relates to outreach you received from one of our customers, contact that customer first where possible. If you contact us, we may forward the request to the relevant customer, help identify the responsible workspace, suppress the relevant contact information where appropriate, or take other steps required by law or contract.

You may also have the right to complain to a data protection authority, including the Information Regulator in South Africa, a European supervisory authority, the UK Information Commissioner's Office, or a state privacy regulator where applicable.

13. California Privacy Notice

This section applies to California residents where the California Consumer Privacy Act, as amended, applies.

In the preceding 12 months, we may have collected the categories of personal information described in Section 2, including identifiers, commercial information, internet or electronic network activity information, professional or employment-related information, inferences or derived information, and sensitive personal information only where required for account security, payment, authentication, or customer-directed processing.

We collect, use, and disclose those categories for the purposes described in Sections 3 and 6. We do not knowingly sell personal information for money or share personal information for cross-context behavioral advertising based on the current implementation. We do not knowingly sell or share personal information of minors.

California residents may request to know, access, delete, correct, opt out of sale or sharing where applicable, limit certain sensitive personal information uses where applicable, and be free from discrimination for exercising privacy rights. Contact us at info@plera.co.

14. South Africa POPIA Notice

Where the Protection of Personal Information Act, 2013 ("POPIA") applies, Plera determines the purpose and means of processing account, billing, security, website, and service administration information. For customer-controlled prospect, lead, outreach, and campaign data, the customer usually determines the purpose and means of processing and we act as an operator, unless we determine the processing purpose independently.

You may request access, correction, deletion, objection, or restriction where POPIA provides those rights. You may also complain to the Information Regulator if you believe your personal information has been processed unlawfully.

15. Children's Privacy

The Services are intended for business users and are not directed to children. We do not knowingly collect personal information from children under 13, or under a higher age where applicable law requires. If you believe a child provided personal information to us, contact us at info@plera.co.

16. Third-Party Services and Links

The Services may connect to third-party websites, platforms, OAuth providers, payment pages, sender accounts, enrichment providers, AI providers, and social or professional networks. Their privacy practices are governed by their own policies. We are not responsible for third-party services that are not controlled by us.

17. Changes to This Policy

We may update this policy from time to time. If changes are material, we will take reasonable steps to notify users or customers as required by law or contract. The "Last updated" date shows when this policy was last revised.

18. Contact Us

• Privacy contact: info@plera.co
• Security contact: info@plera.co