Changed on August 11, 2026: added Section 3a (the in-app assistant); added Anthropic PBC to the service providers in Section 4; stated the 12-month retention period for assistant conversations in Section 7; named the assistant among the U.S.-operated services in Section 6; and removed the undertaking in Section 3 to update this policy and the Data Processing Addendum before introducing machine-learning processing — that undertaking was honoured by this change and has been replaced by the description in Section 3a. The previous version was effective August 3, 2026.

This Privacy Policy describes how Constructo, Inc. ("Constructo," "we," "us"), the company behind Planlyx, collects, uses, discloses, and protects personal information. It applies to planlyx.com, the Planlyx application, the client portal, public enquiry forms, and related services (together, the "Service").

Planlyx is offered to businesses in the United States and is designed to process information about individuals located in the United States.

---

1. The most important thing to understand first

Planlyx is a tool that design firms use to run their businesses. That means personal information reaches us in two very different ways, and your rights run through different doors depending on which applies to you.

We act for ourselves — as the responsible business — for the information of the firms that subscribe to Planlyx: the account details of firm owners and team members, billing information, and information about visitors to our own website. Part A of this policy covers that.

We act on behalf of a subscribing firm — as that firm's service provider — for everyone the firm brings into the Service: the firm's clients, its vendors and consultants, its prospects, people who submit its enquiry forms, and people who email it at its Planlyx address. For that information, the firm — not Constructo — decides what is collected and why, and the firm is responsible for it. Part B explains what that means for you.

If you interacted with a design firm and are wondering why that firm has your information, the answer lies with that firm. We explain in Part B how to reach them and how we will help.

---

Part A — Information we are responsible for

2. Information we collect

Account information. When a firm registers, we collect the registering person's name and email address, the firm's name, and account settings. Team members and vendors added to a firm provide their name and email when they accept an invitation.

Billing information. Subscription status, plan, and billing history. Payment card details are entered only on pages hosted by our payment processor, Stripe. We never receive or store card numbers.

Communications with us. If you email us, we keep the correspondence.

Website and security information. When you use the Service, our infrastructure providers process standard request data (such as IP addresses and browser type) to deliver pages and maintain security. On our public forms — account registration and firms' enquiry forms — we record submissions together with a one-way hashed form of the submitter's IP address for rate limiting and abuse prevention; we do not store these IP addresses in readable form. To protect public forms from automated abuse, we use Cloudflare Turnstile, which receives the visitor's IP address directly (see Section 5).

What we deliberately do not collect. The Service contains no analytics, telemetry, or advertising technology. We do not run tracking scripts, advertising pixels, or third-party analytics on the Service. We use only the cookies necessary to sign you in and keep your session secure. Fonts and document-rendering assets are served from our own domain.

3. How we use information

We use the information in Part A to provide, secure, and support the Service; to create and administer accounts; to bill subscriptions; to send transactional messages (sign-in links, invitations, notifications, billing notices); to prevent abuse of our public forms; to communicate with you about the Service, including — for business contacts — occasional marketing about Planlyx, which you can opt out of at any time; and to comply with law.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use personal information for targeted advertising. We do not use customer content to train machine-learning models, and our agreement with the provider that powers the in-app assistant described in Section 3a prohibits that provider from doing so.

3a. The in-app assistant

The Service includes an assistant in its help panel that answers questions about using Planlyx. It is optional: searching the guides and contacting support do not involve it, and you can use the Service without ever opening it.

What is sent when you use it. The message you type, the recent messages in that conversation, and — only when you ask about your own subscription — your firm's plan name, subscription status, trial end date, and active-project counts. Passages from our own help guides are sent with it so the assistant answers from them.

What is not sent. Project files, drawings, plan sets, comments, client messages, invoices, and contact records are not sent to the assistant's provider. Neither is any information belonging to another firm.

Who processes it. Messages are processed by Anthropic PBC (United States) on our behalf, under a contract limiting its use of them to providing the service to us.

Training. Neither we nor Anthropic use these messages to train machine-learning models.

How long it is kept. We keep a conversation for 12 months after its last message, then delete it automatically. Anthropic deletes the messages we send it within 30 days, except where a message is flagged under its usage policy, in which case it may hold it for up to two years.

What it can and cannot do. The assistant answers questions; it cannot make changes to your account, send anything, or read your project data. Its answers come from our help guides and can be wrong, so please check anything that matters.

4. Service providers

We disclose information to service providers that host and operate the Service under contracts limiting their use of it to providing services to us:

We may also disclose information when required by law or legal process; to protect the rights, safety, or property of Constructo, our customers, or others; or in connection with a merger, acquisition, or sale of assets, in which case this policy's protections follow the information.

5. Services your browser contacts directly

One feature causes your browser to communicate directly with a third party that is not our service provider. When you use it, that party receives your IP address and the content of the request from your browser, under its own privacy policy:

• Address suggestions are provided by Photon, operated by Komoot GmbH (Germany). As you type an address into an address field, the text you type is sent to Photon to return suggestions.

This is the feature of the Service that sends information from your browser to a third party. You can avoid it by typing addresses without selecting a suggestion.

6. Data location

The Service is hosted in the United States: application hosting, database, file storage, email transmission, and the assistant described in Section 3a are all operated from U.S. regions. The browser-contacted service in Section 5 is operated from Germany and receives only the request data described there.

7. How long we keep information

We keep account information for as long as an account is active, and afterwards for as long as reasonably needed for the purposes described in this policy — including maintaining business records, resolving disputes, enforcing agreements, and complying with law. We do not currently apply fixed retention periods to account information; you may request deletion as described in Section 9, and firms may request deletion of their account data under the Data Processing Addendum. Database backup copies persist for a short period before cycling out; stored files are not covered by that mechanism.

One category does have a fixed period: assistant conversations are deleted 12 months after their last message (Section 3a). Support requests you send us through the help panel are not — those are business records, and a request outlives the conversation it may have come from.

8. Security

We protect information with measures appropriate to a service of this kind: sign-in is by emailed link, so no passwords exist to be stolen; each firm's data is segregated from every other firm's, enforced at the database layer; uploaded project files are held in private storage accessible only through short-lived signed links; the database maintains point-in-time recovery backups; and consequential records are append-only by design. Access by our own personnel to customer accounts is limited to a support console, and any action we take on an account is recorded in that account's own visible activity record. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your privacy rights

Depending on your state of residence, you may have rights to know what personal information we hold about you, to access it, to correct it, to delete it, to receive a portable copy, and to not be discriminated against for exercising these rights. Because we do not sell personal information, do not share it for cross-context behavioral advertising, and do not use it for targeted advertising or profiling that produces legal or similarly significant effects, there is nothing for opt-out rights or universal opt-out signals (such as Global Privacy Control) to switch off — but we honor the underlying commitment: your information is not sold or shared, signal or no signal.

To exercise a right, email legal@constructo.online from the email address associated with your information, or write to Constructo, Inc., 651 N Broad St, Ste. 206, Middletown, DE 19709. We will verify your identity — ordinarily by confirming control of that email address — and respond within the time required by your state's law (generally 45 days, extendable once with notice). You may use an authorized agent if the agent provides proof of your written authorization and we can verify your identity. If we decline a request, we will explain why, and you may appeal by replying to our response; we will answer your appeal within the time your state's law requires and, if we deny it, tell you how to contact your state Attorney General.

About deletion, honestly. Parts of the Service are deliberately built as permanent records — approval records and project activity logs exist to preserve evidence of business transactions, and their integrity is a core feature of the product. Where the law entitles you to deletion, we will delete your personal information, except information we are permitted to retain — for example, to complete a transaction the information was collected for, to maintain records of legal significance, to detect security incidents, or to comply with law. Where a record structure cannot be erased without destroying the integrity of others' records, we will de-identify your information within it so that it no longer identifies you.

Portability, honestly. The Service's export today produces PDF documents of project records. We will provide your information in a portable format to the extent technically feasible, which currently means those documents plus a copy of your identity and contact records.

10. Children

The Service is for business use and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child's information has reached the Service, contact us and we will address it.

---

Part B — Information we process on behalf of firms

11. If a firm brought you here

If you are a firm's client reviewing drawings in a portal, a vendor working on a firm's project, a prospect a firm has contacted, someone who submitted a firm's enquiry form, or someone who corresponded with a firm at its Planlyx address — the firm you dealt with is responsible for your information. Constructo processes it only on that firm's behalf, only to provide the Service to it, under a contract that prohibits us from selling it, sharing it, or using it for our own purposes.

What the Service holds on a firm's behalf can include: your name and contact details; notes the firm keeps about you; project content, drawings, comments, and approvals; messages between you and the firm (the Service keeps a permanent log of correspondence, which is part of its function as a system of business records); and, if you approved a proposal, a record of your name, email, organization, IP address, and browser identifier captured at the moment of approval — a deliberate feature that makes approvals durable evidence for both sides.

To exercise privacy rights over this information — access, correction, or deletion — contact the firm you dealt with. The firm decides how to respond, because the information is theirs to control. If you contact us instead, we will forward your request to the firm and let you know we have done so; we do not respond to it in the firm's place.

12. Email from firms

Firms can send email through the Service, including commercial outreach. Every commercial message sent through the Service must carry the sending firm's physical postal address and an unsubscribe link. Unsubscribing applies to the firm that emailed you: it stops that firm's commercial email to you through the Service, while messages about business you actually have with the firm (such as invoices or approval requests for your own project) continue. Unsubscribe requests are honored automatically and immediately upon processing, and bounces and spam complaints likewise suppress further commercial email from that firm.

---

13. Changes to this policy

We may update this policy. We will post the updated version with a new effective date and, for material changes, notify account holders by email or in the Service before the changes take effect.

14. Contact us

Constructo, Inc. 651 N Broad St, Ste. 206, Middletown, DE 19709 legal@constructo.online