Privacy Policy

Who we are and what this policy covers

Plotex builds interactive 3D community maps for US land developers, homebuilders and land brokers. We rebuild a plat map or site plan you already have into a map buyers can explore, we host it, and you embed it on your site.

This policy covers the plotex.us website, the contact and quote forms on it, the sample maps we publish here, and the email you send to our published addresses.

It does not cover how our customers run their own websites or handle their own buyers' information. When a customer stores their leads, lots and documents inside their Plotex admin panel, we process that data on their instructions under our agreement with them, and their own privacy policy governs it.

Information we collect

We collect only what we need to answer you and build what you asked for.

• Form submissions. Your name, work email, company, phone number if you choose to give one, and details about your community such as its name, location, lot count and timing.
• Files you upload. The plat map, site plan, CAD file, PDF or image you send us so we can scope a quote or build a draft map.
• Messages. Whatever you write in a form message or send to one of our email addresses, and our replies.
• Consent records. When you check a box on our form we store the exact wording you agreed to, plus the date and time. That covers the call-and-text consent, your acceptance of these terms (and which version was on the page that day), and the separate, optional permission to show your community in our portfolio.
• Server logs. Your IP address, the pages and files requested, timestamps, the referring page, and basic error information. Our hosting and content delivery network create these automatically for every visitor.
• Device and browser information. Browser type and version, operating system, screen size and language.
• Analytics. Aggregate usage of the site — pages viewed, which sample maps get opened, how people arrive. We use Google Analytics 4, and it loads only after you choose Accept in our cookie notice. If you decline, or never answer, the Google script is never requested at all.
• Nothing from the assistant. The chat bubble on this site answers from a fixed list of questions written into the page. It sends nothing to a server, so there is no transcript to store, read or disclose.

What we do not collect

• No Social Security number, driver license number, passport number or other government ID.
• No financial account or payment card details. This website takes no payments, so there is no payment processor and no card data to protect. Invoices for a signed project are handled outside this site.
• No precise geolocation. Server logs contain an IP address, from which only an approximate city or region can be inferred.
• No sensitive personal information as California defines it, and nothing used to infer your race, religion, health, union membership, sexual orientation or immigration status.
• No device fingerprinting. We do not build a device identifier to recognize you across visits or sites. If that ever changes it will be disclosed here and in the cookie notice before the code ships, not after.

Why we use it

Each purpose below maps to something you asked us to do, something required to run the business honestly, or something you consented to.

• To answer your inquiry and prepare a quote, normally within 1 business day.
• To read your plat at intake and build your draft map. AI reads the file to pull lot counts, dimensions and labels. A person builds the 3D map.
• To deliver, host, update and support your map and admin panel.
• To send service messages about a project that is under way — drafts, review links, changes, renewals.
• To send marketing email only if you asked for it, and to call or text you only if you gave express written consent.
• To keep the site secure: rate limiting, abuse prevention, error debugging.
• To understand in aggregate which pages, demos and tools are useful, so we can improve them.
• To meet our legal, tax and accounting obligations, and to enforce our agreements.

The basis for using it

US state privacy laws ask us to be specific about purpose rather than to pick a legal basis. We use your information because you asked us to do something, because it is reasonably necessary to provide the service you engaged us for, or because you gave consent — for marketing calls and texts, and for analytics cookies.

We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not profile you.

This site is aimed at the United States and we do not market to the EU or the UK. If you contact us from either and we take the project on, we will handle your information under the UK GDPR or the GDPR as it applies, and we will say so in writing before any work starts.

We do not sell your personal information

Plotex does not sell personal information, and has not sold personal information in the preceding 12 months. We do not exchange it for money or for anything else of value.

We also do not currently share personal information for cross-context behavioral advertising. There are no third-party advertising cookies or advertising pixels on this site. If that ever changes, we will update this policy and the cookie banner before it takes effect, and the change will apply going forward only.

The Do Not Sell or Share My Personal Information page explains the opt-out mechanics in full.

Who we share it with

We share personal information only with vendors that help us run the business, under contracts that limit them to our written instructions and prohibit them from using it for their own purposes. They are service providers, not buyers.

• Hosting and content delivery network. Serves this website and generates the server logs described above. Our current provider is Cloudflare.
• Database and file storage. Stores form submissions and uploaded plat files in a private bucket that is not public and not indexed. Our current provider is Supabase.
• Email. Zoho Mail hosts the plotex.us mailboxes and carries our replies and any messages you asked to receive.
• Analytics. Google Analytics 4, and only after you accept. Google receives the usage data described above. We have turned off Google Signals and ads personalization, so this data is not used to build an advertising profile of you, and we run no advertising tags on this site.
• Professional advisers — attorneys and accountants — when they need it to advise us.
• Law enforcement, courts or regulators when we are legally required to respond, and only to the extent required.
• A buyer or successor, if the business is sold or merged. We will post notice on this page before your information moves to a new controller.

Where your information is stored

The website is served from a global content delivery network, so a copy of the page you request may be cached near you. Form submissions and uploaded files are stored with our database and file storage provider.

Plainly: our database and file storage run in Supabase’s Mumbai, India region, so form submissions and uploaded plat files are stored in India and not in the United States. Plotex is an India-based company serving US customers, and we would rather state that than imply a US-only footprint we do not have. If you need your project data held in a US region, tell us before you send anything and we will say yes or no in writing.

Plat files and other documents you upload

Files you upload are stored privately under an opaque key. They are not published, not linked from the site and not indexed by search engines.

We use them for one thing: scoping your quote and building your map. We do not use your plat to train a public AI model, and we do not resell it or add it to our sample library.

You can ask us to delete an uploaded file at any time by emailing privacy@plotex.us. We will delete it unless we still need it for a project you have engaged us to deliver, and we will tell you which applies.

Cookies, analytics and Global Privacy Control

The site stores your cookie choice in your browser. Analytics do not run until you accept them. The Cookie Notice lists everything we use.

We honor the Global Privacy Control. If your browser or an extension sends a GPC signal, we treat it as an opt-out of any sale or sharing of personal information for that browser, automatically, with no further action from you.

How long we keep it

We keep personal information only as long as it serves the purpose we collected it for, or as long as the law requires. In practice:

• Inquiries and quote requests: kept while we are in contact, then 24 months after the last contact, unless you ask us to delete them sooner.
• Uploaded plat files where the project does not proceed: 12 months after the quote, then deleted.
• Customer project data while a map is live: for the length of the agreement, plus the export window described in our Terms of Service.
• Consent records for calls and texts: 5 years after the consent is withdrawn. This one is deliberately long — a consent record is the evidence that protects you as much as us if a call is ever disputed.
• Server logs: 90 days, then discarded or aggregated.
• Aggregate analytics with no identifier attached: kept indefinitely, because it is no longer personal information.

How we protect it

No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant regulator within the timeframe your state requires.

• The whole site is served over HTTPS.
• Uploads are stored in private storage under opaque keys, checked by file signature and capped in size.
• Database access uses a server-side key that is never exposed to the browser, and queries are parameterized.
• Public endpoints are rate limited per IP address.
• Access to personal information is limited to the people who need it to do the work.
• We do not store payment card data anywhere.

Your privacy rights

If you live in California, Colorado, Connecticut, Texas or Virginia — and in a growing list of other states — you have the rights below. We extend them to everyone who contacts us, wherever you live, because operating two standards is a good way to get one of them wrong.

• Know and access. Ask what personal information we hold about you, where we got it, why we use it, and who we disclosed it to.
• Correct. Ask us to fix information that is inaccurate.
• Delete. Ask us to delete what we hold, subject to the narrow exceptions the law allows, such as records we must keep for tax or legal reasons.
• Portability. Get a copy in a portable, machine-readable format.
• Opt out of sale or sharing, and of targeted advertising. We do not sell or share, but the right exists and we honor it, including through the Global Privacy Control.
• Opt out of profiling that produces legal or similarly significant effects. We do not profile.
• Limit the use of sensitive personal information. We do not collect any.
• Appeal. Ask us to reconsider if we decline your request.
• Non-discrimination. We will not deny you service, charge you a different rate, or give you a lesser experience for exercising any of these rights.

How to exercise your rights

Email privacy@plotex.us with "Privacy request" in the subject line. Tell us which right you are exercising, the email address or phone number you used with us, and enough detail to find your record.

We verify requests by replying to the email address on file, or by asking you to confirm details we already hold. We will not ask you for a government ID or any new sensitive document to verify a request.

We acknowledge receipt within 10 business days where state law requires it, and respond within 45 calendar days. If a request is genuinely complex we may take one 45-day extension, and we will tell you why before we do. Requests are free unless they are repetitive or clearly excessive, in which case we will tell you before doing anything.

An authorized agent may submit a request on your behalf. Send the agent request to privacy@plotex.us with written permission signed by you. We may still contact you directly to confirm the agent is authorized.

If we decline, our answer will say why. You can appeal by replying to that email within 30 days with "Appeal" in the subject line. We will re-review and answer in writing within 45 days. If we deny the appeal, you may complain to your state attorney general.

Marketing email, calls and texts

Every marketing email we send carries a working unsubscribe link, and we honor it promptly. Service messages about a live project are not marketing and continue until the project ends.

We call or text only if you gave express written consent by checking the consent box on a form. That box is never pre-checked. Reply STOP to any text to opt out, or email privacy@plotex.us. Message and data rates may apply, and message frequency varies.

CAN-SPAM requires a valid physical postal address in the footer of marketing email. We do not send bulk marketing email from this site, and we will not start until we have an address to put there. Replies to an inquiry you started are not marketing and need no such footer.

Children

This site is built for real estate professionals. It is not directed to children, and we do not knowingly collect personal information from anyone under 16.

We do not sell or share the personal information of anyone under 16, and we would not do so without the opt-in consent California requires. If you believe a child has given us information, email privacy@plotex.us and we will delete it.

Changes to this policy

When this policy changes we update the date at the top of the page and summarize what changed here.

September 17, 2026 — first published version. Added Google Analytics 4 as a named third party and described exactly when it loads; named Zoho Mail as our email host; stated plainly that our database and file storage are in India rather than the United States; and set the retention periods, which had been left open in the draft.

For a material change — a new category of information, a new purpose, or any new disclosure to a third party — we will post notice on this page at least 30 days before it takes effect, and email customers with an active project. Changes never apply retroactively to information already collected.

Contact us

Privacy questions and rights requests: privacy@plotex.us. Anything else: hello@plotex.us. Accessibility: accessibility@plotex.us.

We reply by email. We do not publish a mailing address or a phone number yet, and we would rather say that than print one that does not reach anybody. Both will appear here once they exist.

Questions

Email hello@plotex.us and we will route it to the right person. For privacy requests use privacy@plotex.us; for accessibility barriers use accessibility@plotex.us.