Privacy Policy

1. About this policy and controller

This policy explains how PlasticParts Hub collects and uses information when you browse the website, create an account, submit a company profile, or contact us. PlasticParts Hub is responsible for the processing described here. Privacy requests can be sent to support@plasticparts.app.

2. Information we collect

We may collect your name, email address, account authentication details, company information you submit, uploaded media, and technical information such as IP address, browser type, device data, and website usage events.

When you register by email or Google, we record your registration IP address and the approximate country associated with it when available. These details are available only to platform administrators, are not part of your public profile, and are not replaced when you sign in again. A VPN or proxy may affect the country detected.

If you use Google Sign-In, Google provides us with your Google account identifier, verified email address, first name, and last name. We do not receive or store your Google password, Google access token, or Google refresh token.

3. How we use information

We use information to create and secure accounts, authenticate users, review and publish company profiles, provide requested services, communicate with users, prevent abuse, understand website performance, and improve the platform.

4. Legal bases and required information

We process account and service information when necessary to provide the services you request and perform our agreement with you. We process security, abuse-prevention, operational, and basic performance information for our legitimate interests in protecting and improving the platform. We rely on consent where applicable, including for non-essential analytics when enabled, and on legal obligations where processing is required by law.

Name, email address, and authentication information are required to create an account. Without them, we cannot provide account services. Company details, publications, and other profile information are optional unless a specific feature identifies them as required.

5. Public content

Information submitted for a public company profile or publication may be visible to visitors and search engines after applicable review. Do not submit personal, confidential, or third-party information that you are not authorized to publish.

6. Service providers and international processing

The platform uses Google for optional authentication and consent-aware website analytics, Microsoft Clarity for consent-aware session analytics and heatmaps, Vercel for hosting, analytics and file storage, Neon for database hosting, Payload CMS for account and content management, and Resend for transactional email. These providers may process limited information as necessary to deliver their services under their own terms and privacy policies.

Information may be processed in countries where these providers operate. Where required, transfers are handled using legally recognized safeguards or another valid transfer mechanism.

7. Cookies and authentication

We use essential cookies to protect authentication requests and keep signed-in sessions active. Google may use cookies when you choose Google Sign-In. Google Analytics loads with analytics and advertising storage denied by default. Microsoft Clarity loads only after you allow analytics and may then use analytics cookies for session recordings and heatmaps. You may allow or withdraw analytics storage through Analytics settings; advertising storage, advertising user data, and personalization remain denied. Withdrawing analytics consent reloads the page to stop Clarity and removes its first-party analytics cookies. We do not currently use advertising cookies.

8. Sharing and retention

We do not sell personal information. We share information only with service providers, when you choose to publish company information, when required by law, or when necessary to protect the platform and its users.

Account information is generally retained while the account is active. Other records are retained only as long as reasonably necessary for the purposes described here, security and dispute resolution, backups, and applicable legal obligations. The exact period depends on the record type, account status, public-content state, and legal requirements.

9. Your rights and choices

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or a copy of your personal information; object to certain processing; and withdraw consent where processing relies on consent. Withdrawal does not affect earlier lawful processing. You may complain to the data-protection authority responsible for your location or the alleged infringement.

You may stop using Google Sign-In and revoke PlasticParts Hub access from your Google Account settings. Revoking Google access does not automatically delete your PlasticParts Hub account.

10. Security and automated decisions

We use reasonable technical and organizational safeguards, but no online service can guarantee absolute security. We do not currently use solely automated decision-making that produces legal or similarly significant effects for users.

11. Changes and contact

We may update this policy as the platform develops. The latest version and update date will remain on this page. Questions or privacy requests can be sent to support@plasticparts.app.