Legal
Privacy policy
PlaneBase LLC — effective July 1st 2026
The short version — We collect only what we need to run the marketplace. We never sell your data. Payment details go directly to Stripe and never touch our servers. You can request deletion of your data at any time by emailing planebaseapp@gmail.com.
Introduction
PlaneBase LLC ("PlaneBase", "we", "us", or "our") is committed to protecting your privacy. This policy explains what personal data we collect, how we use it, who we share it with, and your rights regarding your information.
PlaneBase is operated by PlaneBase LLC, a New York limited liability company. We are registered with the UK Information Commissioner's Office (ICO) as a data controller. Our ICO registration number is available on request.
If you have questions about this policy or how we handle your data, contact us at planebaseapp@gmail.com.
Information we collect
We collect the following categories of personal data:
Account information — your name, email address, username, profile photo, and any other details you provide when creating or updating your account.
Transaction data — order details, item prices, shipping addresses, and payment method type. We do not store your card number or full payment details — these are handled entirely by Stripe.
Seller information — business name, country, seller type, bio, Stripe Connect account status, shipping templates, and any other information provided during seller onboarding.
Usage data — pages visited, listings viewed, searches performed, auction activity, and device and browser information collected automatically when you use the platform.
Communications — messages sent through the PlaneBase messaging system between buyers and sellers.
Tax and identity information — for sellers, we collect tax identification numbers, date of birth, and address as required by law for DAC7 and equivalent digital platform reporting obligations.
Listing content — photos, descriptions, and other content you upload when creating listings.
How we use your information
We use your personal data for the following purposes:
To operate the marketplace and process transactions between buyers and sellers.
To communicate with you about orders, listings, disputes, and platform updates.
To verify seller identities and process Stripe Connect onboarding.
To detect and prevent fraud, abuse, and policy violations.
To improve the platform and personalise your experience.
To comply with legal obligations including tax reporting, anti-money laundering requirements, and data protection law.
To report seller transaction data to relevant tax authorities as required by DAC7 and equivalent regulations in the UK, Canada, and Australia.
The legal bases we rely on under GDPR and UK GDPR are: performance of a contract (processing your orders), compliance with a legal obligation (tax reporting, anti-money laundering), and our legitimate interests (fraud prevention, platform improvement).
Who we share your information with
We do not sell your personal data. We share information only in the following circumstances:
With sellers — buyers' names and shipping addresses are shared with the relevant seller to fulfil orders. Buyers' usernames and profile information are visible to sellers in the messaging and order system.
With buyers — sellers' store names, profile information, and review history are publicly visible. Sellers' personal details beyond their store profile are not shared with buyers.
With Stripe — payment processing requires sharing relevant transaction data with Stripe, Inc. Stripe's privacy policy governs how they handle this data and is available at stripe.com/privacy.
With Supabase — PlaneBase uses Supabase for data storage and database infrastructure. Data is stored on Supabase servers in accordance with their data processing agreement.
With Base44 — PlaneBase is built on Base44 platform infrastructure. Base44 processes data as a data processor on our behalf.
With tax authorities — we are legally required to report seller transaction data to EU member state tax authorities under DAC7, to HMRC in the United Kingdom, to the CRA in Canada, and to the ATO in Australia. This includes seller names, addresses, tax identification numbers, and transaction totals.
As required by law — we will disclose information if required by a court order, legal process, or applicable law, or where necessary to protect the rights and safety of PlaneBase, our users, or the public.
Data security
We implement industry-standard security measures to protect your personal data including encrypted connections (HTTPS), access controls, and regular security reviews.
Payment information is handled entirely by Stripe and is never stored on PlaneBase servers. Stripe is PCI DSS Level 1 certified — the highest level of payment security certification available.
No system is completely secure. If you believe your account has been compromised contact us immediately at planebaseapp@gmail.com.
Your rights
Depending on your location you have the following rights regarding your personal data:
Right of access — you can request a copy of the personal data we hold about you.
Right to rectification — you can request correction of inaccurate or incomplete data.
Right to erasure — you can request deletion of your account and associated personal data, subject to our legal retention obligations.
Right to restriction — you can request that we limit how we process your data in certain circumstances.
Right to data portability — you can request your data in a structured, machine-readable format.
Right to object — you can object to certain uses of your data including direct marketing.
To exercise any of these rights contact us at planebaseapp@gmail.com. We will respond within 30 days.
If you are based in the UK you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk. If you are based in the EU you may lodge a complaint with your local data protection authority.
Data retention
We retain your personal data for as long as your account is active. If you close your account we retain certain data for up to 7 years to comply with tax reporting obligations, financial regulations, and dispute resolution requirements.
Transaction records are retained for a minimum of 6 years in accordance with US tax law and applicable regulations in other jurisdictions.
You may request deletion of your account and personal data at any time by emailing planebaseapp@gmail.com. Where retention is required by law we will inform you of the specific obligation and the data affected.
International data transfers
PlaneBase LLC is based in the United States. By using the platform you understand that your personal data may be transferred to and processed in the United States and other countries where our service providers operate.
For users in the EU and UK we rely on Standard Contractual Clauses and other appropriate safeguards to ensure your data is protected when transferred outside your region in accordance with GDPR and UK GDPR requirements.
Children's privacy
PlaneBase is not intended for users under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a child under 18 has created an account please contact us at planebaseapp@gmail.com and we will delete the account and associated data promptly.
Changes to this policy
We may update this privacy policy periodically to reflect changes in our practices, legal requirements, or platform features. We will notify registered users of significant changes by email or a notice on the platform at least 14 days before the changes take effect.
The date at the bottom of this page shows when the policy was last updated. Continued use of PlaneBase after changes take effect constitutes acceptance of the updated policy.
PlaneBase LLC
planebaseapp@gmail.com · planebaseapp.com
Last updated: July 2026