Privacy Policy
Last updated: July 9, 2026
Playful Platypus Business Ops ("we", "our", or "us") is operated by Playful Platypus LLC. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your information.
Information We Collect
We may collect the following types of information:
- Account information, such as your name, email address, and business name.
- Business data that you choose to store in Playful Platypus Business Ops, including contacts, products, notes, media, messages, and other business records.
- Billing information, which is processed by Stripe, who acts as the merchant of record for Playful Platypus Business Ops subscriptions (sold through Stripe Link). Stripe handles payment collection, card storage, and sales-tax calculation and remittance. We do not store complete payment card details.
- Usage and diagnostic information, including device, browser, IP address, log data, and application telemetry used to operate, secure, and improve the service.
How We Use Information
We use information to:
- Provide, maintain, and improve the service.
- Authenticate users and secure accounts.
- Process subscription payments.
- Provide customer support.
- Detect fraud, abuse, and security issues.
- Communicate important service updates and account notifications.
- Develop new features and improve the user experience.
AI Features
Some optional features use third-party AI services — currently Anthropic and OpenAI — to assist with tasks such as content generation, image tagging, summarization, or product descriptions.
Information is sent to AI providers only when you choose to use those features, and is processed on a no-train inference path: the providers do not retain inputs to train or improve their models. Data is used only to produce the requested output.
Your Business Data
Your business data belongs to you.
We do not claim ownership of the information, documents, products, images, or other content you create or upload. We access customer data only when reasonably necessary to provide support, maintain the service, investigate reported issues, or comply with legal obligations.
Because Playful Platypus Business Ops is a CRM, the business data you upload may include personal information about your own contacts, leads, or subscribers. For that information, you are the data controller and we act as your processor — we handle it on your behalf and according to your instructions, and you are responsible for the lawful basis on which you collect and use it (including any marketing consent).
Cookies
We use cookies and similar technologies to:
- Keep you signed in.
- Remember your preferences (including which business you're currently working in).
- Improve application performance.
- Protect your account.
- Understand how the application is used.
Some of these cookies are set by our subprocessors rather than by us directly:
- Clerk (authentication) sets session cookies on its own subdomain (
clerk.platypusops.app), including a short-lived session token (__session) and durable client cookies (__client,__refresh_*). Clerk also sets analytics cookies through its own subprocessors (PostHog and Segment) on.clerk.com— includingph_phc_*,ajs_anonymous_id, andvisitor-id. We do not configure these; Clerk does. - Cloudflare (security and performance) sets
__cf_bmand_cfuvidto distinguish humans from bots and to maintain session affinity.
Our own first-party product analytics (PostHog) runs in a cookieless mode and sets no cookie — it identifies signed-in users by an internal account ID (never your name or email) purely to understand which features help. It is disclosed here for transparency, and you can turn it off anytime under Account → Privacy. This is separate from the PostHog cookies that Clerk sets on .clerk.com (above), which we do not control.
Most browsers allow you to control cookies through their settings.
Sharing Information
We do not sell your personal information.
We share information with subprocessors who help us operate the platform. Each receives only the information necessary to perform services on our behalf:
| Subprocessor | Purpose |
|---|---|
| Clerk | User authentication and session management |
| Stripe | Subscription billing (merchant of record) and sales-tax remittance |
| Cloudflare | Content delivery, DDoS and bot protection (Turnstile), and object storage (R2) |
| Fly.io | Application hosting and managed Postgres database |
| Brevo | Email delivery (transactional messages and, where you enable it, your own marketing sends) |
| PostHog | First-party product analytics (cookieless; no name/email sent; opt out under Account → Privacy) |
| Sentry | Error reporting |
| Axiom | Application log storage |
| Anthropic and OpenAI | AI features, on a no-train inference path (see "AI Features" above) |
We may also disclose information if required by law or to protect the security, rights, or property of our customers or our company.
Data Retention
We retain information for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements.
After an account is closed, your business data is deleted or anonymized within a reasonable period, subject to legal requirements. Encrypted database backups may retain a copy for up to 10 days after deletion, after which the backup window has rolled past and the data is no longer recoverable. Account closure also removes the associated records from our authentication provider (Clerk) — freeing your email address for future re-signup — and cancels and removes the associated customer record at our billing provider (Stripe).
Your Rights
Depending on where you live, you may have the right to:
- Access your personal information.
- Correct inaccurate information.
- Request deletion of your information.
- Export your data.
- Object to certain processing activities.
To exercise these rights, please contact us.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page, and the "Last updated" date will be revised accordingly.
Contact
If you have questions about this Privacy Policy, please contact us at: