Privacy Policy
How we collect, use, and protect your personal information.
Effective Date: June 29, 2025
Sixturns Technologies Corporation, a Delaware corporation doing business as Plethora ("Plethora," "we," "our," or "us"), provides product‑search, recommendation, and delivery services through our website (https://plethora.so), mobile applications, APIs, and any related offerings (collectively, the "Services"). This Privacy Policy ("Policy") describes how we collect, use, disclose, and protect Personal Information when you access or use the Services. By using the Services, you acknowledge that you have read and understood this Policy.
IMPORTANT: Nothing in this Policy constitutes legal advice. While we endeavor to comply with applicable privacy laws, you should consult qualified counsel to evaluate obligations specific to your circumstances. To the fullest extent permitted by law, Plethora disclaims liability for losses arising out of or relating to this Policy or your use of the Services.
1. Scope
This Policy applies to Personal Information we process about:
- Visitors to our website and apps
- Registered users and account holders
- Shoppers who place orders with third‑party sellers ("Sellers") or purchase items directly from Plethora
- Recipients of deliveries fulfilled by Plethora or our delivery partners
It does not apply to Personal Information collected directly by Sellers, carriers, or other third parties acting on their own behalf.
2. Information We Collect
| Category | Examples | Source |
|---|---|---|
| Information You Provide | Name, postal address, email, phone number, payment credentials, account credentials, ID verification documents, delivery instructions, product reviews, customer‑service communications | You |
| Transaction & Logistics Data | Order details, item descriptions, purchase price, delivery status, proof of delivery, returns | You, Sellers, carriers |
| Device & Usage Data | IP address, browser type, device identifiers, referring URLs, pages viewed, search queries, clickstream, cookies, analytics tags | Automatic |
| Geolocation | Approximate location derived from IP; precise GPS (with permission) | Automatic or your device |
| Inferences & Profiles | Interest segments, preference scores, recommendation relevance metrics | Derived |
| Third‑Party Data | Identity verification results, fraud‑risk scores, marketing leads | Service providers |
Sensitive Information
We generally do not request sensitive Personal Information (e.g., government‑issued IDs) unless required for identity verification, fraud prevention, or regulatory compliance. Where required, we limit collection to what is strictly necessary.
Payment Information
We do not store full payment information on our servers. All payment information, including credit card details and other payment credentials, is securely processed and stored by our payment partner, Stripe. We may store the last four digits of your credit card number for account management and transaction history purposes.
3. How We Use Personal Information
We process Personal Information to:
- Provide & Improve Services – operate, maintain, and enhance search, recommendation, and delivery features;
- Fulfill Transactions – process payments, coordinate shipping, handle returns, and provide customer support;
- Personalize Recommendations – deliver relevant product results using algorithmic and AI‑based ranking systems;
- Communicate – send order updates, delivery notifications, marketing (with your consent), and respond to inquiries;
- Security & Fraud Prevention – authenticate users, detect malicious activity, and enforce our terms;
- Legal Compliance – satisfy obligations under applicable laws (e.g., tax, sanctions, consumer‑protection, privacy);
- Research & Development – analyze aggregated usage to develop new features and machine‑learning models.
Where required by law (e.g., the Delaware Personal Data Privacy Act (DPDPA), California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), or the Colorado Privacy Act (CPA)), we rely on legal bases such as consent, performance of a contract, legitimate interests, or compliance with a legal obligation.
4. Sharing & Disclosure
We may disclose Personal Information to:
- Sellers & Brands – to allow them to fulfill your order, provide warranties, or handle returns;
- Delivery & Logistics Partners – for pickup, shipping, last‑mile delivery, and reverse logistics;
- Service Providers – cloud hosting, payment processors, analytics, fraud‑prevention, customer‑service vendors;
- Advertising & Marketing Partners – to deliver or measure ads (never sharing payment details);
- Affiliates & Corporate Transactions – in connection with a merger, acquisition, or sale of assets;
- Law Enforcement & Regulators – when required to comply with subpoenas, court orders, or applicable laws;
- With Your Direction or Consent – e.g., when you link a third‑party account.
We do not sell Personal Information in exchange for money. We may share certain identifiers or usage information for "targeted advertising" as defined under state privacy laws; you can opt‑out (Section 5).
5. Your Privacy Rights & Choices
Depending on your location, you may have rights to:
- Access – know whether we process your Personal Information and request a copy;
- Correct inaccuracies;
- Delete data we collected from you;
- Portability – obtain a machine‑readable copy;
- Opt‑Out of (i) sale of Personal Information; (ii) targeted advertising; or (iii) profiling that produces legal or similarly significant effects;
- Limit Use of Sensitive Personal Information (CCPA/CPRA);
- Appeal a denied request (CPA).
To exercise rights, email privacy@plethora.so or visit https://plethora.so/policies/privacy-rights. We will verify your identity and respond within legally mandated timelines.
6. Cookies & Tracking Technologies
We use cookies, SDKs, and similar tools for authentication, analytics, personalization, and advertising. You may adjust browser settings or use our cookie‑preferences tool to manage non‑essential cookies.
7. Data Retention
We retain Personal Information only as long as necessary for the purposes described or as required by law (e.g., tax or accounting). Criteria include account status, legal obligations, and the potential for disputes.
8. Security
We implement administrative, technical, and physical safeguards (encryption in transit, network segmentation, access controls). No method of transmission or storage is completely secure; therefore, we cannot guarantee absolute security.
9. International Data Transfers
We store data primarily in the United States. If we transfer Personal Information outside your jurisdiction, we rely on approved mechanisms such as Standard Contractual Clauses.
10. Third‑Party Links & Services
Our Services may link to third‑party sites. We are not responsible for their privacy practices. Review the privacy notices of any third‑party service.
11. Changes to This Policy
We may update this Policy periodically. If changes are material, we will provide notice (e.g., by email or in‑product message) and obtain consent where required. The "Effective Date" at the top indicates when changes take effect.
12. Contact Us
Questions about this Policy or our privacy practices?
Email: privacy@plethora.so
13. Liability Disclaimer & Limitation
To the fullest extent permitted by applicable law:
- Disclaimer of Warranties. The Services and all content (including product recommendations) are provided "AS IS" and "AS AVAILABLE," without warranties of any kind.
- Limitation of Liability. Plethora's total aggregate liability arising out of or related to Personal Information processing or this Policy will not exceed the greater of (a) amounts you paid us in the twelve months preceding the event giving rise to the claim or (b) one hundred U.S. dollars (US $100).
- No Consequential Damages. Plethora will not be liable for any indirect, incidental, special, consequential, or punitive damages, or loss of profits, data, or goodwill.
- Statutory Exceptions. Some jurisdictions do not allow limitations on implied warranties or certain damages; the foregoing provisions apply only to the extent permitted by law.
State‑Specific Disclosures
California (CCPA/CPRA)
We provide a "Notice at Collection" and honor opt‑out signals (e.g., GPC). California residents have additional rights described in Section 5.
Delaware (DPDPA)
Delaware residents may exercise rights to access, correct, delete, and opt out, and may appeal denied requests (see Section 5). You may also submit complaints to the Delaware Department of Justice.
Colorado (CPA, effective July 2025)
We do not process biometric identifiers unless necessary for fraud prevention or account security. Where we do, we maintain a public policy and obtain consent as required.
Last Updated: June 29, 2025