Plansemble Privacy Policy

Plansemble is operated by All The Rage Ventures, LLC, a New York limited liability company ("Plansemble," "we," "us," or "our").

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use Plansemble, including when you create or manage an Event, access an Event shared with you, use recipient features, subscribe to Event notifications, purchase Plansemble services, or contact us.

Plansemble's commercial Organizer offering is currently intended for users in the United States. Published recipient-facing Event pages may nevertheless be accessible outside the United States when an Organizer shares them.

By using Plansemble, you acknowledge the practices described in this Privacy Policy. When a person first activates Organizer functionality, Plansemble also asks that person to acknowledge the then-current Privacy Policy as part of Organizer setup.

1. What Plansemble Does

Plansemble is an event organization and communication service designed to help Organizers create a central source of information for an Event, including schedules, locations, instructions, responsibilities, checklists, reminders, and other planning information.

Plansemble allows Organizers to publish selected Event information for access by Recipients. Recipients may be able to view published Event information without creating a Plansemble account, and signed-in Recipients may use optional features such as follows, checklists, responsibility claims, and Event-email preferences.

Because publishing and sharing information is a core function of Plansemble, Organizers are responsible for deciding what information they include in an Event and for ensuring they have the right to publish or share that information.

2. Information We Collect

The information we collect depends on how you interact with Plansemble.

A. Account and Identity Information

If you create a Plansemble account, we may collect and maintain information such as:

your name or display name;

your current verified primary email address;

internal account identifiers;

authentication-related identifiers;

account status and preferences;

records showing Organizer activation, Terms acceptance or reacceptance, Privacy Policy acknowledgement, and the Organizer's 18-or-older affirmation;

limited pseudonymous identity information used to enforce one-time benefits or prevent abuse; and

information associated with your Plansemble subscription or commercial entitlements.

Plansemble currently uses Clerk to provide authentication and account-management infrastructure. Plansemble does not represent that it stores or manages your authentication password directly. Clerk may process information necessary to authenticate users and secure accounts.

For Organizer eligibility, Plansemble records an affirmative confirmation that the Organizer is at least 18 years old. We do not collect a date of birth, birth year, identity document, or age-verification-provider record for this purpose.

To enforce the lifetime one-Free-Event rule, Plansemble may retain a keyed pseudonymous identity fingerprint and a record of whether the benefit has been consumed. This is not a device fingerprint, does not contain the underlying verified email or social-identity value in plaintext, and is not used for advertising.

B. Event and Template Content

Organizers may provide information such as:

Event titles and descriptions;

dates and schedules;

locations;

directions;

instructions;

checklists;

responsibilities;

names or labels associated with responsibilities;

notes;

Template content;

links; and

other information entered by the Organizer.

We refer to this generally as "Event Content." Event Content is supplied by the Organizer. Plansemble does not determine what information an Organizer chooses to enter.

C. Information About Recipients and Participants

Depending on the features used for a particular Event, Plansemble may process limited information concerning people who receive or interact with Event information. This may include:

the Plansemble account associated with a signed-in Recipient;

Event follow state and Event-email subscription choices;

recipient-specific checklist, completion, or responsibility state;

a display name or verified email address used to identify a person who claims a responsibility to the Organizer;

a Recipient's choice to volunteer anonymously to other participants;

operational information needed to deliver requested email; and

other information a Recipient voluntarily provides through supported Plansemble features.

Plansemble is designed so that certain recipient-specific activity remains private from the Organizer and other Recipients. For example, personal checklist or completion state is not intended to become visible to the Organizer merely because a Recipient interacts with an Event.

For responsibility claims, the Organizer may see the claimant's display name or, when no display name is available, the claimant's verified email address so the Organizer can administer the assignment. Other participants see a claimant's name only when the Event's settings allow it, the claimant has not chosen "Volunteer anonymously," and applicable sign-in or Event-access controls are satisfied. A claimant's anonymity choice does not hide their identity from the Organizer responsible for the Event.

Following, claiming, or otherwise interacting with an Event does not automatically enroll a Recipient in email notifications. Event-email subscriptions require an affirmative opt-in.

D. Purchase and Subscription Information

Plansemble uses Paddle to process purchases. Paddle acts as the Merchant of Record for Plansemble transactions and collects payment, billing, and transaction information directly as necessary to complete purchases and fulfill its own legal and commercial responsibilities.

Plansemble does not collect or store complete payment-card numbers through the normal purchase process. We may receive and maintain information needed to provide and support your purchase, such as:

Paddle customer identifiers;

transaction identifiers;

subscription identifiers;

subscription status;

plan type;

purchase status;

Event Pass grants or usage;

complimentary or promotional entitlement information; and

commercial reconciliation records.

Paddle processes buyer information under its own privacy notice and legal obligations.

E. Communications With Plansemble

If you contact us for support, privacy matters, abuse reports, security concerns, billing assistance, or other inquiries, we may collect:

your name;

email address;

the contents of your communication;

attachments you provide;

account or Event information needed to investigate your request; and

records of our response.

F. Technical, Security, and Operational Information

When you access Plansemble, we and our infrastructure providers may automatically process technical information required to operate, secure, diagnose, measure, and maintain the service. This may include information such as:

IP address;

browser type;

operating system;

session or request identifiers;

pseudonymous browser, visitor, or session identifiers;

request timestamps;

page-load, performance, reliability, or basic usage measurements;

security events;

error or diagnostic information; and

interactions necessary to operate the application.

Some of these identifiers may distinguish one browser or session from another or help recognize a returning browser without directly identifying the person by name or email. Depending on context and applicable law, such identifiers and related technical information may still constitute personal information.

Plansemble does not use cross-site behavioral advertising and does not sell behavioral profiles of its users. Our current GA design does not rely on advertising analytics or cross-site tracking. Infrastructure and hosting providers may process ordinary request metadata and limited technical, performance, session, and usage information for hosting, security, reliability, abuse prevention, diagnostics, performance measurement, and basic aggregate usage measurement.

3. Published Event and Template Information

Plansemble is specifically designed to allow Organizers to publish Event information for other people to access. When an Organizer publishes Event Content, the Organizer is directing Plansemble to make that information available through the Event's sharing and access mechanisms.

Organizers should assume that information included in a published Event may be viewed by anyone who legitimately obtains access to the Event's recipient-facing sharing mechanism. A sharing link, PIN, or other access mechanism reduces casual access but should not be treated as a guarantee that Event information is confidential.

Template sharing is intentionally narrower. An anonymous Template-share page may describe the Template's general shape or offered structure, while saved location, contact, body content, owner information, and other full copied values are made available only through the authenticated copy/acceptance flow supported by Plansemble.

Organizers are responsible for:

deciding what information is appropriate to publish;

having appropriate rights or permission to share information about other people;

avoiding unnecessary disclosure of personal or confidential information; and

using appropriate judgment when an Event involves children or other potentially vulnerable individuals.

Plansemble does not routinely pre-screen Event Content before publication. We may investigate, restrict, block, or remove Event Content when reasonably necessary to respond to reports of abuse, privacy concerns, illegal activity, security issues, Terms violations, or legal obligations.

4. Sensitive Information

Plansemble is not designed or intended to serve as a repository for highly sensitive personal information. You should not use Plansemble to store or publish information such as:

Social Security numbers;

passwords or authentication credentials;

financial-account credentials;

complete payment-card information;

government identification numbers or images;

detailed medical records;

protected health information requiring specialized regulatory safeguards;

highly sensitive financial records; or

similarly sensitive information that is inappropriate for an event-planning and sharing service.

Organizers are responsible for ensuring that Event Content does not contain sensitive information that should not be disclosed to Event Recipients. Plansemble does not undertake to scan every field or piece of Event Content to detect potentially sensitive information before publication.

We nevertheless maintain reasonable safeguards for information processed by the service as required by applicable law.

5. How We Use Information

We may use personal information to:

create and administer Plansemble accounts;

authenticate users and protect accounts;

confirm Organizer eligibility and record legal acceptance or acknowledgement;

create, store, manage, and publish Events and Templates;

display Event information to intended Recipients;

maintain recipient interaction state;

send requested Event notifications and reminders;

process and support subscriptions, Event Passes, and other purchases;

provide customer support;

respond to privacy, abuse, legal, and security requests;

detect, investigate, and prevent misuse, fraud, security incidents, or Terms violations;

enforce one-time benefits and other commercial rules;

troubleshoot and improve the reliability of the service;

maintain operational, audit, commercial, enforcement, and legal records;

enforce our Terms of Service;

comply with applicable law and valid legal process; and

establish, exercise, or defend legal rights.

We may also use aggregated or de-identified information for legitimate operational, analytical, or product-improvement purposes where the information cannot reasonably be used to identify an individual.

6. Email Notifications and Communications

Plansemble may send service-related communications necessary to operate an account, administer a purchase, provide a requested service, communicate an enforcement or security matter, or deliver a legal notice. Recipients may also affirmatively subscribe to email notifications for a particular Event.

Plansemble currently uses Resend to deliver application email. For account-addressed and Event email to a signed-in user, Plansemble resolves the user's current verified primary email address through Clerk at send time. Plansemble does not use a secondary unverified email address as a fallback recipient.

Event-email preferences and transport suppression are separate. Turning Event email off reflects a preference not to receive those Event messages. A hard bounce or spam complaint may instead cause an address-level transport suppression that prevents Plansemble from attempting delivery to that address, including service email, until the suppression is appropriately resolved. A user may be offered a way to try or resume delivery after the underlying provider condition has been cleared. Missed Event email is not automatically sent later merely because delivery is resumed.

Plansemble does not use email-open or link-click tracking for Event notifications in the GA design. Event notification subscriptions are separate from marketing consent, and we do not automatically enroll Event Recipients in general Plansemble marketing communications merely because they access an Event or subscribe to Event notifications.

Recipients can unsubscribe from Event email through the mechanisms provided by Plansemble. Certain essential service or transactional messages may still be sent where necessary, subject to any address-level transport suppression that makes delivery inappropriate or unavailable.

7. How We Share Information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We may disclose information in the following circumstances.

A. With Event Recipients

We display Event Content according to the publishing and sharing choices made by the Organizer and the access controls associated with the Event.

B. With Service Providers

We use third-party companies to help operate Plansemble. These providers may support functions such as authentication and account management, email delivery, payment processing, hosting, infrastructure, storage, networking, security, performance measurement, monitoring, diagnostics, and other operational services.

Current material providers and provider categories include:

Clerk, for authentication and account-management services;

Resend, for application email delivery;

hosting and infrastructure providers used to deliver, secure, monitor, and operate Plansemble, including providers that support content delivery, performance measurement, and operational diagnostics; and

Paddle, which acts as Merchant of Record for Plansemble purchases.

C. For Legal, Security, or Enforcement Purposes

We may disclose information when reasonably necessary to:

comply with applicable law, regulation, subpoena, court order, or other valid legal process;

respond to lawful requests from governmental authorities;

protect the security or integrity of Plansemble;

investigate fraud, abuse, threats, or violations of our Terms;

protect the rights, property, or safety of Plansemble, our users, or others; or

establish, exercise, or defend legal claims.

D. Business Transactions

If All The Rage Ventures, LLC or Plansemble is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, information may be disclosed or transferred as part of that transaction, subject to applicable law.

8. Administrator and Support Access

Authorized Plansemble personnel may access limited account, Event, commercial, notification, enforcement, or technical information when reasonably necessary to provide support, investigate a reported problem, secure the service, investigate abuse, enforce our Terms, administer commercial entitlements, or comply with legal obligations.

Administrative access is intended to be limited according to role and purpose. Plansemble administrators are not intended to receive complete payment-card details through Plansemble administration tools. Recipient-private checklist or progress state is not intended to be exposed to Organizers or administrators merely for convenience where such access is not necessary for an authorized operational purpose.

Plansemble may maintain audit records relating to administrative access or administrative actions. Legal-hold controls are limited to authorized internal use and preserve only qualifying evidence; they are not intended to keep an otherwise deleted customer account active.

9. Cookies, Browser Storage, and Similar Technologies

Plansemble and its service providers may use cookies, browser storage, session technology, pseudonymous browser or session identifiers, or similar mechanisms to authenticate users, maintain sessions, remember application state or preferences, protect against fraud or security threats, measure reliability and performance, support diagnostics, understand basic aggregate usage, and operate core Plansemble functionality.

Examples in the GA design include Clerk authentication/session cookies, Paddle checkout-related browser artifacts, Organizer browser storage used for draft or autosave continuity, Recipient browser storage used for local interaction state, and limited hosting or infrastructure cookies or pseudonymous identifiers used for operational analytics, reliability, performance measurement, and diagnostics. These identifiers may distinguish a browser or session without directly identifying the person by name or email.

Plansemble does not currently use advertising cookies or cross-site behavioral advertising technologies. Plansemble does not use these hosting or infrastructure identifiers to build marketing profiles or for targeted advertising. Production infrastructure may still maintain ordinary security, request, performance, diagnostic, and aggregate usage records as described elsewhere in this Policy.

10. Children's Privacy

Plansemble is a general-audience service and is not directed to children under 13. Organizer functionality is intended only for adults age 18 or older.

Children may participate in activities or Events that adults organize using Plansemble. For example, an adult may use Plansemble to organize a family activity, youth organization Event, school-related activity, team activity, or similar Event.

Children under 13 should not independently create a Plansemble account or directly provide personal information to Plansemble for personalized participation. Where personalized interaction is needed for a child under 13, an appropriate parent or guardian should manage that interaction.

Recipient-only functionality may be available to users under 18 where permitted by law, but those users are not eligible to activate Organizer functionality. Plansemble does not collect date of birth as part of the Organizer age-confirmation process.

Organizers should not enter unnecessary personal or sensitive information about children into Event Content. If we learn that Plansemble has directly collected personal information from a child under 13 in circumstances inconsistent with this policy or applicable law, we may delete the information or take other appropriate action.

If you believe a child under 13 has directly provided personal information to Plansemble, contact us at privacy@plansemble.app.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the service, maintaining security, satisfying legal or accounting obligations, resolving disputes, enforcing agreements, and preserving evidence subject to a valid legal hold.

Our production retention framework is category-specific. In general:

active account, Event, Template, recipient, and subscription state is retained while needed to provide the applicable product functionality and is removed through the relevant account or Event lifecycle;

notification delivery and terminal-trigger diagnostics are ordinarily retained for about 90 days, subject to legal hold where applicable;

active email suppressions are retained while operationally necessary, while resolved suppression history is ordinarily retained for a longer limited period;

administrative audit and historical enforcement records are retained for limited periods appropriate to support, security, abuse-prevention, and legal needs, while current effective enforcement state may remain for as long as it governs account or Event behavior;

Organizer legal-acceptance records are retained while the account exists, and certain transaction, contractual, legal, audit, fraud-prevention, security, and enforcement records may be retained after account deletion for as long as reasonably necessary to satisfy applicable legal, accounting, dispute-resolution, security, fraud-prevention, or enforcement purposes. Information subject to a legal hold or similar preservation requirement may be retained for longer;

transaction, entitlement, tax, accounting, refund, chargeback, reconciliation, and other commercial provenance may be retained for longer periods where reasonably necessary for legal, accounting, or operational purposes;

the pseudonymous identity fingerprint and Free-Event-consumed flag used to enforce the lifetime one-Free-Event rule may be retained for as long as that lifetime benefit rule remains in effect; and

backups and infrastructure logs may persist for limited periods according to the production systems and service-provider retention cycles that apply to them.

A legal hold, active investigation, unresolved dispute, fraud or abuse investigation, security incident, or other legal requirement may require us to preserve specific evidence beyond an ordinary retention period. A legal hold does not necessarily prevent a user from deleting the active Plansemble account; instead, qualifying records may remain preserved in the backend for the applicable legal purpose.

12. Account and Event Deletion

Plansemble provides mechanisms for users to delete accounts or Event Content where supported by the service. Event and Template deletion is generally a hard lifecycle action rather than an archive or restore operation.

If a paid subscription is still set to renew, Plansemble may require the user to disable future renewal before account deletion so the subscription cannot continue generating new charges. Once the subscription is terminal or scheduled not to renew, account deletion may proceed even if a previously paid access period has not yet ended. Plansemble does not automatically cancel or refund a purchase merely because an account-deletion request is made.

Following valid account deletion, ordinary profile, Event, Template, publication, recipient-state, preference, and similar active-product records are removed or minimized according to the deletion cascade. Limited pseudonymous or legal/commercial records may remain where necessary for one-time-benefit enforcement, suppression safety, accounting, transaction reconciliation, fraud prevention, security, dispute resolution, legal compliance, acceptance provenance, or enforcement.

For example, Plansemble may retain a pseudonymous identity fingerprint so deleting and recreating an account does not reset the lifetime Free Event benefit. If deletion of the authentication-provider identity cannot be completed, a minimal account tombstone or provider linkage may be retained so the deleted account cannot simply reactivate while the provider-side issue is unresolved. Unnecessary plaintext identity information is not retained for that purpose.

Address-level email suppression may also survive account deletion in hashed form where needed to prevent Plansemble from sending to an address that has hard-bounced or complained. When account correlation is no longer necessary, that correlation is minimized rather than reconstructed from the address hash.

Deletion may not result in instantaneous removal from every system. Information may remain temporarily in backups until those backups age out, and information independently retained by a third-party provider under its own legal obligations remains subject to that provider's policies. Information that another person independently copied or retained before deletion may also remain outside Plansemble's control.

13. Your Privacy Choices and Rights

You may have rights concerning your personal information depending on the laws that apply to you and to Plansemble. Subject to applicable law and appropriate identity verification, you may be able to request that we provide information about personal information we maintain about you, correct inaccurate account information, delete certain personal information, explain how certain information is used or disclosed, or honor other rights provided by applicable law.

You may also manage certain information directly through Plansemble, such as account information, Event Content, notification preferences, follows, and supported recipient choices. Plansemble does not currently provide a comprehensive self-service privacy export covering every data category; privacy requests can be submitted through the contact below.

To submit a privacy request, contact privacy@plansemble.app. Because privacy@plansemble.app is a dedicated privacy contact address, requests sent there are routed for handling through Plansemble's Legal function.

We may need to verify your identity before fulfilling certain requests. We may decline or limit a request where permitted by law, including where information must be retained to comply with law, protect security, prevent fraud, preserve another person's rights, maintain a valid legal hold, or establish or defend legal claims.

14. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, alteration, loss, or disclosure. These safeguards may include authentication and access controls, restricted administrative access, security and operational monitoring, secure service-provider relationships, audit mechanisms, reasonable protection of stored and transmitted information, and procedures for responding to suspected security incidents.

No internet service or storage system can guarantee absolute security. Nothing in this Policy represents that Plansemble has completed a particular independent security certification, audit, or penetration test unless we expressly state that separately.

If you believe you have identified a security vulnerability affecting Plansemble, contact security@plansemble.app.

15. Data Breaches and Security Incidents

If we determine that a security incident involving personal information requires notification under applicable law, we will provide notifications as required.

16. Third-Party Websites and Services

Plansemble may contain links to third-party websites, maps, resources, or other services. We do not control the privacy practices of third parties merely because an Organizer includes a link to them or Plansemble provides access to them.

Your interaction with a third-party service is subject to that provider's own privacy policy and terms. Purchases processed by Paddle are also subject to Paddle's applicable buyer terms and privacy notice.

17. No Sale of Personal Information

Plansemble does not sell personal information for monetary consideration. Plansemble also does not currently share personal information for cross-context behavioral advertising.

If our practices materially change in the future, we will update this Privacy Policy and provide any notices or choices required by applicable law before applying materially different practices.

18. Marketing Communications

Plansemble may in the future offer users the opportunity to receive product news, announcements, or promotional communications. We will not treat access to an Event, participation in an Event, following an Event, claiming a responsibility, or subscription to Event notifications as automatic consent to receive general marketing communications.

Where marketing email is offered, users will be provided an appropriate method to unsubscribe.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Plansemble, changes to our service providers, changes to legal or regulatory requirements, or improvements to our privacy and security practices.

If we make material changes, we will provide notice in a manner appropriate to the nature of the change. Organizer activation includes acknowledgement of the then-current Privacy Policy, but later Privacy Policy updates do not automatically require a new acknowledgement unless applicable law, the nature of the change, or a future approved Plansemble policy requires it.

The effective date at the top of the Policy will identify when the current version became effective.

20. Contact Us

For privacy questions or privacy-rights requests: privacy@plansemble.app

For general legal inquiries: legal@plansemble.app

For customer support: support@plansemble.app

For abuse reports: abuse@plansemble.app

For security concerns: security@plansemble.app

For billing inquiries: billing@plansemble.app

All The Rage Ventures, LLC, P.O. Box 78, Somers, NY 10589, United States