Privacy Policy

When you use Ply, we collect the following categories of personal data:

• Account information: name, email address, and password (stored as a cryptographic hash — we never store plaintext passwords).
• Profile data: bio, profile image, social links, and other information you choose to add to your public profile.
• Pattern uploads: files, images, descriptions, and metadata associated with patterns you publish.
• Payment data: processed and stored by Stripe. We do not store your full card number, bank account details, or Stripe credentials on our servers.
• Usage data: pages visited, features used, timestamps, browser type, device information, and IP address.
• Cookies: essential cookies only (see Section 5).

We use the data we collect to:

• Provide, maintain, and improve the Platform.
• Process payments and calculate revenue shares.
• Send transactional notifications (order confirmations, payout alerts, account updates).
• Respond to support requests.
• Analyse usage patterns to improve the user experience.
• Comply with legal obligations.

We do not use your data for targeted advertising. We do not sell your personal data.

Under the GDPR, we process your data based on the following legal grounds:

• Contract performance: processing necessary to provide the service you signed up for (account management, pattern hosting, payment processing).
• Legitimate interests: improving the Platform, preventing fraud, and ensuring security — balanced against your rights and freedoms.
• Legal obligations: retaining financial records as required by tax and accounting regulations.
• Consent: where required (e.g., optional marketing communications). You can withdraw consent at any time.

We share data only with the following third-party processors, and only to the extent necessary to operate the Platform:

• Stripe: payment processing and creator payouts.
• Cloudflare: hosting, CDN, and DDoS protection.

We do not sell, rent, or trade your personal data to any third party. We do not share data with advertisers.

Ply uses essential cookies only. These are strictly necessary for the Platform to function and include:

• Session cookie: keeps you logged in during your visit.
• Authentication token: verifies your identity on authenticated pages.
• Cookie consent: remembers your cookie preference.

We do not use tracking cookies, analytics cookies, or advertising cookies. No data is shared with ad networks.

Under the GDPR, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data ("right to be forgotten").
• Portability: receive your data in a structured, commonly used, machine-readable format.
• Object: object to processing based on legitimate interests.

To exercise any of these rights, contact privacy@plycraft.co. We will respond within 30 days.

• Account data: retained while your account is active. Upon account deletion, all personal data is permanently deleted within 30 days.
• Payment records: retained for 7 years after the transaction date, as required by applicable tax and accounting regulations.
• Usage data: anonymised and aggregated after 12 months. Anonymised data is no longer personal data and may be retained indefinitely.

If you have any questions about this Privacy Policy or our data practices, contact us:

Ply Craft Ltd
Email: privacy@plycraft.co

If you are unsatisfied with our response, you have the right to lodge a complaint with a supervisory authority, in particular in the EU/EEA member state of your habitual residence or place of work.