Privacy Policy

How we collect, use, and protect your personal information.

Effective Date: June 29, 2025

Sixturns Technologies Corporation, a Delaware corporation doing business as Plethora ("Plethora," "we," "our," or "us"), provides product‑search, recommendation, and delivery services through our website (https://plethora.so), mobile applications, APIs, and any related offerings (collectively, the "Services"). This Privacy Policy ("Policy") describes how we collect, use, disclose, and protect Personal Information when you access or use the Services. By using the Services, you acknowledge that you have read and understood this Policy.

IMPORTANT: Nothing in this Policy constitutes legal advice. While we endeavor to comply with applicable privacy laws, you should consult qualified counsel to evaluate obligations specific to your circumstances. To the fullest extent permitted by law, Plethora disclaims liability for losses arising out of or relating to this Policy or your use of the Services.

1. Scope

This Policy applies to Personal Information we process about:

  • Visitors to our website and apps
  • Registered users and account holders
  • Shoppers who place orders with third‑party sellers ("Sellers") or purchase items directly from Plethora
  • Recipients of deliveries fulfilled by Plethora or our delivery partners

It does not apply to Personal Information collected directly by Sellers, carriers, or other third parties acting on their own behalf.

2. Information We Collect

CategoryExamplesSource
Information You ProvideName, postal address, email, phone number, payment credentials, account credentials, ID verification documents, delivery instructions, product reviews, customer‑service communicationsYou
Transaction & Logistics DataOrder details, item descriptions, purchase price, delivery status, proof of delivery, returnsYou, Sellers, carriers
Device & Usage DataIP address, browser type, device identifiers, referring URLs, pages viewed, search queries, clickstream, cookies, analytics tagsAutomatic
GeolocationApproximate location derived from IP; precise GPS (with permission)Automatic or your device
Inferences & ProfilesInterest segments, preference scores, recommendation relevance metricsDerived
Third‑Party DataIdentity verification results, fraud‑risk scores, marketing leadsService providers

Sensitive Information

We generally do not request sensitive Personal Information (e.g., government‑issued IDs) unless required for identity verification, fraud prevention, or regulatory compliance. Where required, we limit collection to what is strictly necessary.

Payment Information

We do not store full payment information on our servers. All payment information, including credit card details and other payment credentials, is securely processed and stored by our payment partner, Stripe. We may store the last four digits of your credit card number for account management and transaction history purposes.

3. How We Use Personal Information

We process Personal Information to:

  • Provide & Improve Services – operate, maintain, and enhance search, recommendation, and delivery features;
  • Fulfill Transactions – process payments, coordinate shipping, handle returns, and provide customer support;
  • Personalize Recommendations – deliver relevant product results using algorithmic and AI‑based ranking systems;
  • Communicate – send order updates, delivery notifications, marketing (with your consent), and respond to inquiries;
  • Security & Fraud Prevention – authenticate users, detect malicious activity, and enforce our terms;
  • Legal Compliance – satisfy obligations under applicable laws (e.g., tax, sanctions, consumer‑protection, privacy);
  • Research & Development – analyze aggregated usage to develop new features and machine‑learning models.

Where required by law (e.g., the Delaware Personal Data Privacy Act (DPDPA), California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), or the Colorado Privacy Act (CPA)), we rely on legal bases such as consent, performance of a contract, legitimate interests, or compliance with a legal obligation.

4. Sharing & Disclosure

We may disclose Personal Information to:

  • Sellers & Brands – to allow them to fulfill your order, provide warranties, or handle returns;
  • Delivery & Logistics Partners – for pickup, shipping, last‑mile delivery, and reverse logistics;
  • Service Providers – cloud hosting, payment processors, analytics, fraud‑prevention, customer‑service vendors;
  • Advertising & Marketing Partners – to deliver or measure ads (never sharing payment details);
  • Affiliates & Corporate Transactions – in connection with a merger, acquisition, or sale of assets;
  • Law Enforcement & Regulators – when required to comply with subpoenas, court orders, or applicable laws;
  • With Your Direction or Consent – e.g., when you link a third‑party account.

We do not sell Personal Information in exchange for money. We may share certain identifiers or usage information for "targeted advertising" as defined under state privacy laws; you can opt‑out (Section 5).

5. Your Privacy Rights & Choices

Depending on your location, you may have rights to:

  • Access – know whether we process your Personal Information and request a copy;
  • Correct inaccuracies;
  • Delete data we collected from you;
  • Portability – obtain a machine‑readable copy;
  • Opt‑Out of (i) sale of Personal Information; (ii) targeted advertising; or (iii) profiling that produces legal or similarly significant effects;
  • Limit Use of Sensitive Personal Information (CCPA/CPRA);
  • Appeal a denied request (CPA).

To exercise rights, email privacy@plethora.so or visit https://plethora.so/policies/privacy-rights. We will verify your identity and respond within legally mandated timelines.

6. Cookies & Tracking Technologies

We use cookies, SDKs, and similar tools for authentication, analytics, personalization, and advertising. You may adjust browser settings or use our cookie‑preferences tool to manage non‑essential cookies.

7. Data Retention

We retain Personal Information only as long as necessary for the purposes described or as required by law (e.g., tax or accounting). Criteria include account status, legal obligations, and the potential for disputes.

8. Security

We implement administrative, technical, and physical safeguards (encryption in transit, network segmentation, access controls). No method of transmission or storage is completely secure; therefore, we cannot guarantee absolute security.

9. International Data Transfers

We store data primarily in the United States. If we transfer Personal Information outside your jurisdiction, we rely on approved mechanisms such as Standard Contractual Clauses.

10. Third‑Party Links & Services

Our Services may link to third‑party sites. We are not responsible for their privacy practices. Review the privacy notices of any third‑party service.

11. Changes to This Policy

We may update this Policy periodically. If changes are material, we will provide notice (e.g., by email or in‑product message) and obtain consent where required. The "Effective Date" at the top indicates when changes take effect.

12. Contact Us

Questions about this Policy or our privacy practices?

Email: privacy@plethora.so

13. Liability Disclaimer & Limitation

To the fullest extent permitted by applicable law:

  • Disclaimer of Warranties. The Services and all content (including product recommendations) are provided "AS IS" and "AS AVAILABLE," without warranties of any kind.
  • Limitation of Liability. Plethora's total aggregate liability arising out of or related to Personal Information processing or this Policy will not exceed the greater of (a) amounts you paid us in the twelve months preceding the event giving rise to the claim or (b) one hundred U.S. dollars (US $100).
  • No Consequential Damages. Plethora will not be liable for any indirect, incidental, special, consequential, or punitive damages, or loss of profits, data, or goodwill.
  • Statutory Exceptions. Some jurisdictions do not allow limitations on implied warranties or certain damages; the foregoing provisions apply only to the extent permitted by law.

State‑Specific Disclosures

California (CCPA/CPRA)

We provide a "Notice at Collection" and honor opt‑out signals (e.g., GPC). California residents have additional rights described in Section 5.

Delaware (DPDPA)

Delaware residents may exercise rights to access, correct, delete, and opt out, and may appeal denied requests (see Section 5). You may also submit complaints to the Delaware Department of Justice.

Colorado (CPA, effective July 2025)

We do not process biometric identifiers unless necessary for fraud prevention or account security. Where we do, we maintain a public policy and obtain consent as required.

Last Updated: June 29, 2025