Privacy policy
Last updated October 19, 2026
Plainstamp is an office board for tasks, bills, receipts and approvals. This page explains what information Plainstamp keeps, why, who helps us run it, and the choices you have. It covers the website (plainstamp.com and app.plainstamp.com) and the Plainstamp Android app, which opens the same website.
What we keep
- Your account: your name, email address and a securely hashed password (or the Google or Microsoft account you sign in with), and your two-step sign-in settings if you turn them on.
- What you and your team put in: tasks, checklists, comments, bills, transactions, vendors, approvals, budgets and the files and photos you attach, including photos taken with your phone's camera in the app.
- Billing: your plan and subscription status. Card details are handled by Stripe; we never see or store your full card number.
- Connections you turn on: if a workspace connects a bank (through Plaid) or accounting software (QuickBooks or Xero), we keep the transactions and records those services send, and the access tokens needed to keep the connection working, stored encrypted.
- Notifications: if you turn on phone or desktop notifications, the address your device gives us for delivering them.
- Basic records: a log of what was done in a workspace and by whom (the activity history your team sees), and standard server logs used to keep the service secure and working.
We don't use advertising trackers, we don't sell your information, and we don't use your workspace's contents to advertise to you.
Camera and photos
The app uses your camera only when you tap a button to take a photo (for example, a receipt, or a photo showing a task is done). The photo is uploaded to your workspace and is visible to the people in that workspace who can see the item it's attached to. Invoices and receipts are read by Plainstamp itself (on your device, or on our servers for invoices emailed in) to fill in amounts and dates; they aren't sent to outside AI services.
Why we use it
- To run Plainstamp for you and your team: show your boards, send approvals to the right person, and remind people about what's due.
- To send emails and notifications you've asked for or that the service needs (sign-up confirmation, password resets, approvals, reminders). You can turn most of them off in Settings.
- To bill for paid plans, prevent abuse, and keep accounts secure.
- To answer you when you contact us.
Who can see it
A workspace's information is visible to the people in that workspace, according to their role (for example, someone with the "assigned work only" role sees only their own tasks). Plainstamp staff look at a workspace only when needed to support you, keep the service secure, or when the law requires it.
These companies help us run Plainstamp and handle information only to provide their service to us:
- Supabase (database, sign-in and file storage, in the United States)
- Vercel (hosting the website)
- Resend (sending email)
- Postmark (receiving invoices emailed to a workspace's invoice inbox address)
- Stripe (payments)
- Google, Apple, Microsoft and Mozilla push services (delivering phone and desktop notifications you turn on)
- Plaid, Intuit (QuickBooks) and Xero, only when a workspace chooses to connect them
How long we keep it
We keep your information while your account or workspace is active. When you delete your account, your sign-in and profile are deleted right away; work you did in a shared workspace stays there for your team, without your name. A workspace that's deleted is removed with its files. Backups roll off within 30 days. Billing records may be kept longer where tax law requires it.
Your choices
- See and change your name and email in Settings.
- Download a copy of a workspace's data (owners: Settings → Download everything).
- Turn notifications and emails on or off in Settings.
- Delete your account at any time: here's how.
- Ask us for a copy of your information, or to correct or delete it, by emailing hello@plainstamp.com.
Security
Connections are encrypted (HTTPS), files are stored privately and shown through short-lived links, workspaces are kept apart at the database level, and you can require two-step sign-in for everyone in your workspace.
Children
Plainstamp is a tool for businesses and isn't meant for children under 16. We don't knowingly collect information from them.
Changes and contact
If we change this policy in a way that matters, we'll update the date above and tell workspace owners by email. Questions: hello@plainstamp.com.