Legal

Your Privacy Choices

What we do collect

Plumb collects the minimum data required to deliver a web-compliance audit:

• Your email — for sign-in (magic-link) and report delivery.
• Subscription state — your plan tier, Stripe customer ID, and billing period. Payment card data lives entirely with Stripe; we never see it.
• Scan inputs and results — the URLs you submit, the page content we audit, screenshots, and the resulting accessibility / compliance findings.

Full details are in our Privacy Policy.

Your rights under CCPA / CPRA

California residents have the right to:

• Know what personal information we've collected. Email us for a copy.
• Delete your account and all associated scans. You can do this yourself from your dashboard or by emailing us.
• Correct inaccurate personal information.
• Limit the use of sensitive personal information. We don't collect sensitive PI as defined under CPRA, so this right is a no-op for us.
• Opt out of sale or sharing — again, there's nothing to opt out of because we don't sell or share.
• Non-discrimination — we will not deny service or change pricing because you exercised a privacy right.

How to exercise a right

Email privacy@plumbcompliance.com from the email address associated with your Plumb account. We verify identity using the existing account email — no separate verification needed. We respond within 45 days as required by CPRA §1798.130(a)(2).

Global Privacy Control

Plumb respects the Global Privacy Control (GPC) signal as a valid opt-out preference under CCPA §1798.135. Since we don't sell or share personal information, GPC=1 doesn't change anything we do — but we honor the signal as an expression of intent.

Last updated: May 2026 · Plumb is operated from the United States; we serve US customers only.