How PleoStack protects your data.
A plain account of how your data is kept separate, how access is controlled, and what happens to it — the same questions any team should ask before rolling out new software on a live project.
Data
Each organization's data is scoped to that organization within the platform.
Authentication
Sign-in runs on Supabase Auth, by email and password or a one-time sign-in link. Credentials are never stored in plaintext, and session tokens are managed server-side.
Compliance & data handling
Our Privacy Policy follows India's DPDP Act and offers GDPR-grade rights to everyone. Data requests go to privacy@pleostack.com.
Sub-processors
The third parties that process data on PleoStack's behalf, in service of running the product. Full detail is in our Privacy Policy.
Questions about data handling?
Send a data request or a security question directly — it goes to the team, not a ticket queue.