Privacy Policy

1. Introduction

Pleo Consult ("we," "our," or "us") operates as an independent consultation service providing guidance on Pleo expense management solutions. We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our consultation services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for European Union users and the California Consumer Privacy Act (CCPA) for California residents.

2. Information We Collect

2.1 Personal Data

When you submit a consultation request or contact us, we may collect:

Name: Your full name for identification and communication purposes
Email Address: Your work email address to respond to inquiries and send relevant information
Phone Number: Your phone or WhatsApp number for direct communication

2.2 Company Data

We collect information about your business to provide tailored consultation:

Company Name: The name of your organization
Company Size: Number of employees to recommend appropriate plans
Country of Registration: To ensure service availability in your region
Monthly Expense Volume: To assess your expense management needs

2.3 Preferences

We collect information about your service preferences:

Interested Plan: The Pleo plan you are considering
Accounting System: Your current accounting software for integration planning

2.4 Technical Data

We automatically collect certain technical information when you visit our website:

IP Address: Your internet protocol address
Browser Type: The web browser you use to access our site
Device Information: Type of device and operating system
Usage Data: Pages visited, time spent on pages, and navigation patterns
Referral Source: How you arrived at our website

2.5 Communication Data

We collect information from your communications with us:

Messages: Content of emails, form submissions, or other correspondence
Comments: Additional comments or questions you provide through forms
Support Requests: Any inquiries or requests for assistance

3. How We Use Your Information

We use the information we collect for the following purposes:

Provide Consultation Services: To deliver personalized guidance on Pleo expense management solutions based on your business needs
Communicate About Pleo: To respond to your inquiries and provide information about Pleo services, features, and pricing
Send Relevant Information: With your consent, to send newsletters, updates, and promotional content related to expense management
Improve Our Website: To analyze usage patterns and enhance user experience on our website
Comply with Legal Obligations: To meet legal requirements, respond to lawful requests, and protect our rights
Facilitate Referrals: To connect you with Pleo services when appropriate

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

4.1 Consent

We process your personal data when you have given explicit consent. This includes:

Submitting forms after agreeing to this Privacy Policy
Accepting cookies for analytics and marketing purposes
Opting in to receive marketing communications

4.2 Contract Performance

We process your personal data when necessary to perform a contract or take pre-contractual steps, including:

Processing consultation requests
Providing requested information about Pleo services
Responding to inquiries about our services

4.3 Legitimate Interests

We process your personal data when we have a legitimate interest that is not overridden by your rights, including:

Improving our website and services through analytics
Protecting our business from fraud and security threats
Maintaining records for legal compliance

6. Third-Party Services

Our website uses the following third-party services that may collect information about you:

6.1 Google Analytics

We use Google Analytics to analyze website traffic and user behavior. Google Analytics collects information such as how often users visit our site, what pages they visit, and what other sites they used prior to coming to our site. For more information, see Google's Privacy Policy.

6.2 Google Ads

We use Google Ads to display advertisements. Google may use cookies and data from our site and other sites to show ads based on your prior visits. You can opt out of personalized advertising by visiting Google Ads Settings.

6.3 Cloudflare or Similar

We may use Cloudflare or similar content delivery network (CDN) and security services to protect our website and improve performance. These services may collect certain technical data. For more information, see Cloudflare's Privacy Policy.

We encourage you to review the privacy policies of these third parties to understand their data practices.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected:

7.1 Consultation Data

Active Consultations: Retained throughout the consultation period and for a reasonable period afterward
Contact Information: Retained for up to 3 years from your last interaction, unless you request deletion
Communication Records: Retained for up to 3 years for reference and quality purposes

7.2 Technical Data

Analytics Data: Aggregated data may be retained indefinitely; individual-level data is typically retained for 26 months
Log Files: Retained for up to 12 months

7.3 Deletion Policies

When personal data is no longer needed, we will securely delete or anonymize it. If you request deletion of your personal data, we will comply within 30 days, subject to any legal requirements to retain certain information.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information within 30 days of your request.

8.2 Right to Rectification

You have the right to request correction of inaccurate personal information or completion of incomplete information we hold about you.

8.3 Right to Erasure

You have the right to request deletion of your personal information, subject to certain exceptions such as legal retention requirements.

8.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information under certain circumstances.

8.5 Right to Data Portability

You have the right to request a copy of your personal information in a structured, machine-readable format and to have that information transmitted to another party.

8.6 Right to Object

You have the right to object to the processing of your personal information, including for direct marketing purposes.

8.7 Right to Withdraw Consent

Where we process your personal information based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: support@pleo.io

We will respond to your request within 30 days. You may also have the right to lodge a complaint with a supervisory authority in your jurisdiction.

8.9 California Consumer Privacy Act (CCPA) Rights

California residents have additional rights under the CCPA, including:

Right to know what personal information is collected, used, or disclosed
Right to know whether personal information is sold or disclosed and to whom
Right to say no to the sale of personal information
Right to equal service and price when exercising privacy rights

9. Cookies

We use cookies and similar tracking technologies to collect and track information about your browsing activities. Cookies are small data files stored on your device that help us improve our website and your experience.

We use the following types of cookies:

Necessary Cookies: Essential for the website to function properly
Analytics Cookies: Help us understand how visitors interact with our website
Marketing Cookies: Used to deliver relevant advertisements

For detailed information about the cookies we use, how we use them, and how you can manage your preferences, please see our Cookie Policy.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption: Secure Socket Layer (SSL) technology to encrypt data transmission
Access Controls: Restricted access to personal information on a need-to-know basis
Regular Reviews: Periodic assessment of our security practices
Employee Training: Training our team on data protection best practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

11. International Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

When we transfer personal information outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses approved by the European Commission
adequacy decisions where applicable
Other legally valid transfer mechanisms

By using our services, you acknowledge that your information may be transferred to and processed in the United States and other countries where we or our service providers operate.

12. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18 years of age.

If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have collected personal information from a child, please contact us immediately at support@pleo.io.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will:

Update the "Last updated" date at the top of this policy
Post the revised policy on this page
Notify you of significant changes via email or a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of our website and services after any changes indicates your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: support@pleo.io

Company: Pleo North America, Inc.

Address: 18th Ave S & Chet Atkins Pl, Nashville, TN 37212, US

We will respond to your inquiry within 30 days. For data subject requests under GDPR or CCPA, we will verify your identity before processing your request.