Privacy Policy

Pleat is operated by Umbrella Bridge LLC, a limited liability company incorporated in North Carolina. When we say “Pleat,” “we,” “us,” or “our,” we mean Pleat and its operating company.

This policy describes how we collect, use, and protect information when you use the Pleat web application and website at usepleat.com.

Information you provide

• Account information: name, email address, company or workroom name
• Business data: quotes, client information, project details, treatment specifications, pricing, and invoices you create in Pleat
• Payment information: processed entirely by Stripe. We never see, store, or have access to your credit card numbers.
• Communications: messages you send us through support or feedback channels

Information collected automatically

• Usage analytics: page views, feature usage, and performance metrics via Vercel Analytics and PostHog, which do not use third-party cookies
• Log data: IP address, browser type, device type, and timestamps
• Cookies: we use only essential first-party cookies for authentication (keeping you logged in) and preferences (such as light/dark mode). We do not use advertising or third-party tracking cookies.

• Provide, maintain, and improve the Pleat platform
• Process your quotes, calculations, and business data
• Process payments through Stripe
• Send transactional communications (quote notifications, invoices, account alerts)
• Respond to support requests and provide customer service
• Analyze aggregated, de-identified usage patterns to improve the product
• Comply with legal obligations and protect against fraud

We do not sell your personal information.

We share information only with the following service providers, solely to operate the Pleat platform:

• Stripe for payment processing
• Vercel for hosting and analytics
• Neon for database hosting
• PostHog for product analytics

We may also disclose information:

• When required by law, subpoena, or court order
• To protect the rights, safety, or property of Pleat, our users, or the public
• In connection with a merger, acquisition, or sale of assets (you would be notified)

We take the security of your data seriously and implement industry-standard protections:

• All data is encrypted in transit via TLS/HTTPS
• Data is encrypted at rest in our database infrastructure
• Multi-tenant data isolation ensures each organization's data is separated at the database level
• Authentication is enforced on every API request

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

• Account and business data: retained while your account is active. Upon account closure, your data is available for export for 30 days, then deleted within 30 additional days.
• Payment records: retained as required for tax and legal compliance (typically 7 years for financial records).
• Usage analytics: retained by our analytics providers in accordance with their retention policies.

Regardless of where you are located, you may:

• Access the personal information we hold about you
• Correct inaccurate information in your account
• Delete your account and associated data
• Export your data

To exercise any of these rights, contact us at the address below. We will respond within 45 days.

California residents

Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information.

EU/EEA residents

If you are located in the EU or EEA, you have additional rights under the General Data Protection Regulation (GDPR), including the right to restriction of processing, data portability, and the right to lodge a complaint with your local supervisory authority. Our lawful basis for processing is contract performance (providing the service you signed up for) and legitimate interest (security and product improvement).

Pleat is hosted in the United States. If you access Pleat from outside the US, your information is transferred to and processed in the US. By using Pleat, you consent to this transfer.

Pleat is a business-to-business service and is not directed to children under 13. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

In the event of a data breach affecting your personal information, we will notify affected users and applicable authorities in accordance with North Carolina law (N.C. Gen. Stat. 75-65) and other applicable state laws. Notification will be sent via email to the address on your account.

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Pleat application. Continued use of Pleat after changes constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your rights, contact us at:

Pleat
Email: privacy@usepleat.com