Legal
Privacy Policy
Effective 8 September 2026. How PlanSend collects, uses and protects your data.
Who we are
PlanSend is an approval-first social media scheduler available at plansend.io. It is made and operated by Solo Soft. Paid plans are sold and billed by ULA SOFT LTD, a company registered in England and Wales (company number 16531031, 10-16 Tiller Road, London E14 8PX, United Kingdom), which is the name you will see on card statements.
Solo Soft is the data controller for your PlanSend account and website data, and ULA SOFT LTD for billing data. For the posts, media and comments that you and your team put into a workspace, your organisation decides what is collected and why, so your organisation is the controller and PlanSend processes that content on your instructions.
Questions about this policy go to [email protected].
What we collect
We collect only what the service needs to run. In practice that means:
- Account data. Your email address, name and avatar, received from Google when you sign in. PlanSend has no passwords of its own.
- Workspace and brand data. Workspace names, time zones, approval settings, team members and their roles, and the brands you manage.
- Posts and media. Draft text, per-channel variants, scheduled times, images and videos you upload, and the publishing results returned by each network.
- Review comments and approval decisions. When you share a review link, reviewers type a name and leave comments or decisions. Reviewers do not need an account, and we store only the name they give.
- Billing metadata. Your Stripe customer id, plan, billing interval and invoice status. Card details are entered on Stripe-hosted pages and never reach PlanSend servers.
- Audit and publishing logs. Who did what in a workspace and when, and the outcome of each publishing job, so your team can trace every change.
- Technical logs. IP address, browser user agent, requested pages and errors, kept for 30 days for security and troubleshooting.
- AI Assist input. The text you choose to send to AI Assist, used only to generate the suggestion you asked for.
How we use your data
- To provide PlanSend: sign you in, store drafts, run approvals, schedule posts and publish them to the channels you connected.
- To bill you and issue invoices through Stripe.
- To send service messages such as review requests, publishing failures and billing notices.
- To keep the service secure, detect abuse and debug problems.
- To understand how the public website is used, through Google Analytics 4, only if you accept analytics cookies.
- To send occasional product news, only if you opt in. Every marketing email includes an unsubscribe link.
We do not sell personal data, and we do not use your content to train AI models.
Legal bases
Under the UK GDPR and the EU GDPR we rely on the following bases:
| Purpose | Legal basis |
|---|---|
| Running your account, workspaces, approvals, publishing and billing | Performance of a contract |
| Security, abuse prevention, troubleshooting, audit logs and service messages | Legitimate interests |
| Website analytics and marketing emails | Consent, which you can withdraw at any time |
| Keeping invoices and tax records, responding to lawful requests | Legal obligation |
Connected social networks
When you connect a channel, the network asks you to authorise PlanSend and returns an access token. We store that token encrypted, together with the account name and id, so that we can publish the posts you schedule. PlanSend publishes only content that a member of your workspace scheduled, and never posts, likes, follows or messages on its own.
Today you can connect Facebook Pages, Instagram, Threads, LinkedIn, Bluesky and Mastodon. TikTok, YouTube, Pinterest and X may be added later; this policy will be updated before any new network launches. Each network processes your published content under its own privacy policy.
Disconnecting a channel in Settings → Channels deletes its stored tokens immediately. You can also revoke PlanSend's access from the network's own settings; see our data deletion instructions.
Processors we rely on
We use a small number of providers to run PlanSend. Each one processes data only on our instructions and under a written data processing agreement.
| Provider | What it does | Data involved |
|---|---|---|
| DigitalOcean | Hosting, database, file storage and backups in its Germany (EU) data centre | All service data |
| Stripe | Payments, invoices and sales tax (Stripe Tax) | Name, email, billing address and plan; card details stay on Stripe-hosted pages |
| Sign in with your Google account | Email, name and avatar | |
| Replicate | Runs the AI models behind AI Assist | Only the text you submit to AI Assist; used to generate suggestions, not to train models |
| Google Analytics 4 | Usage statistics for the public website | Page views and device information, only after you accept analytics cookies |
| Connected social networks | Publish the posts you schedule | Post text, media and the account you authorised |
Cookies
PlanSend sets as few cookies as it can. Strictly necessary cookies keep you signed in and protect forms; they cannot be switched off. Analytics cookies are set only after you choose Accept analytics in the cookie banner.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| plansend.sid | Keeps you signed in to your workspace | Strictly necessary | 14 days |
| CSRF token | Protects forms against cross-site request forgery; issued with your session | Strictly necessary | Session |
| plansend_consent | Remembers whether you accepted or declined analytics | Strictly necessary | 12 months |
| _ga and _ga_ cookies | Google Analytics 4 visitor and session statistics | Analytics, only with consent | Up to 2 years, set by Google |
You can change your choice at any time using the Cookie preferences link in the footer, or by deleting cookies in your browser. Private review links never load analytics.
How long we keep data
- Account and workspace data: for the life of your account, then deleted within 30 days of account deletion.
- Channel tokens: deleted immediately when you disconnect a channel or delete your account.
- Publishing logs: 12 months.
- Technical logs: 30 days.
- Invoices and billing records: 7 years, as required by UK tax law.
- Backups: rotate within 30 days, so deleted data leaves our backups within 30 days of deletion.
Where your data is stored
PlanSend is hosted in the European Union (Germany). The database, uploaded media and backups stay in the European Union. Because ULA SOFT LTD is based in the United Kingdom, data moves between the UK and the EU under the adequacy decisions that each side has granted the other.
Some processors, such as Stripe, Google, Replicate and the social networks you connect, are headquartered in the United States. Where they receive personal data we rely on their standard contractual clauses (the EU SCCs together with the UK Addendum) and, where a provider is certified, the EU-US Data Privacy Framework and its UK Extension.
Your rights
You have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict how we process it;
- receive a copy in a portable, machine-readable format;
- object to processing based on legitimate interests;
- withdraw consent at any time, without affecting processing that already happened;
- complain to the UK Information Commissioner's Office (ICO) or, if you live in the EU, to your local data protection authority.
To exercise any of these rights, email [email protected] from the address on your account. We answer every request within 30 days and do not charge for reasonable requests.
Deleting your data
Disconnecting a channel in Settings → Channels deletes its tokens immediately. To delete your whole account, email [email protected] from your account's email address and we will remove your account, workspaces, posts, media and connected channels within 30 days. Invoices are kept for 7 years because tax law requires it. Self-serve account deletion inside the app is on our roadmap; until it ships, email is the way to request deletion. Step-by-step instructions, including how to remove PlanSend from Facebook and Instagram, are on the data deletion page.
Children
PlanSend is a business tool for people aged 18 or over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
Changes to this policy
We will post any changes on this page and update the effective date. If a change materially affects how we use your data, we will email account holders at least 14 days before it takes effect.
Contact
Solo Soft, [email protected]. Billing entity: ULA SOFT LTD, 10-16 Tiller Road, London E14 8PX, United Kingdom.
- Privacy questions and data requests: [email protected]
- Product support: [email protected]
- Legal notices: [email protected]