Privacy policy

What Plainhand collects, why, and who else handles it.

Effective October 1, 2026

Plainhand is operated by Sage Keyes, an individual based in North Carolina, United States.

In short

• Mechanical checks run in your browser. That text never reaches us.
• Text you send for a deep read is analyzed by an AI model provider and isn't stored by us.
• We never see your full card number.
• We don't sell your data or show ads.

What we collect

Your account

When you create an account, we store your email address and a password. Passwords are stored in hashed form by our authentication provider, so we can't see them.

Your purchases

For each purchase, we store its status, when it expires, how many deep reads you've used, and a reference to the Stripe checkout. We also store a Stripe customer ID linked to your account, and a record of whether you've used your free deep read.

Invites

Each account has an invite code. If you create an account through someone's invite link, we record which account invited yours, the date of the invite, and the date the reward was given, if it was. The invite code you signed up with is also kept with your account. We don't record anything else about invites. We also store how many bonus deep reads you have.

Payment details

Payments are handled by Stripe, which collects your card details, name, email, and postal code. Stripe shares limited details with us, such as your name, email, and the amount paid, but never your full card number. Stripe's handling of your information is covered by its own privacy policy.

Writing you analyze

Mechanical checks happen entirely in your browser, and that text isn't sent to us. When you run a deep read, your text is sent to our server and forwarded, through OpenRouter, to an AI model provider (currently Anthropic) for analysis. We don't store the text or the results: they're returned to your browser and not kept on our servers. OpenRouter and the model provider process the text under their own terms and policies.

Technical data

Our hosting and infrastructure providers keep standard server logs, which can include IP addresses and browser details, for security and reliability.

Who else handles your data

• Supabase: accounts, database, and server functions
• Stripe: payments
• OpenRouter, and the AI model provider it routes to: deep read analysis
• Resend: account emails, such as password resets
• Netlify: website hosting
• ImprovMX and Google (Gmail): forwarding and receiving mail sent to support@plainhand.net

Cookies and local storage

We use your browser's local storage to keep you signed in and, if you arrive through an invite link, to remember the invite code until you create an account. We don't use advertising or tracking cookies.

How long we keep data

Account information stays until you delete your account. Purchase records may be kept after that where needed for accounting, tax, or legal reasons.

Your choices

You can ask us to access, correct, or delete your data by emailing support@plainhand.net from the email address on your account.

Children

Plainhand isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child under 13 has created an account, contact us and we'll delete it.

Changes to this policy

If we change this policy, we'll update the date at the top of this page.

Contact

Email support@plainhand.net.