Privacy Policy

Plotler is provided by Bisols, a registered software company with offices in Islamabad, Dubai and the United Kingdom (“Bisols”, “we”). This policy explains what personal data we handle, why, where it is kept and how to reach us about it.

It covers two different roles:

• Where we decide how data is used: visitors to www.plotler.com, people who ask for a demo or contact us, people who sign up, the staff users of each workspace and the billing contacts of our customers.
• Where we act for a developer: the records a property developer keeps in Plotler about its buyers, their family members, its brokers, suppliers, staff and leads. The developer decides how that data is used, and we process it only on its instructions. If you are a developer’s buyer, please contact your developer first; we will help them answer you.

• Demo and contact requests: your name, email, phone, company, city and message, and the page and campaign that brought you to us (UTM tags), if any.
• Sign-up: company name, your name, work email, mobile number, city, number of projects and a password (stored only as a secure hash), the version of the Terms of Service and of this policy you accepted and when, and your IP address for limits on repeated sign-ups.
• Staff users: name, email, mobile number, role, sign-in times, and authenticator enrolment. Changes made in a workspace are recorded in its audit log with the user, time, IP address and browser.
• Billing: billing contacts, invoices, payments and the gateway’s response to an online payment. We do not receive or store card numbers; card payments are made on the gateway’s own page.
• Support: what you tell us by email, phone or WhatsApp, and a record of any support access you grant.
• Technical data: when something fails in the app, an error report with the page, the error and the browser, linked to the signed-in workspace; and usage counts per workspace (for example messages sent and AI requests) to apply plan limits.

• To provide Plotler under our contract with you: create and run your workspace, sign you in, send the service’s emails, and bill you.
• To answer your demo or contact request.
• To keep Plotler secure: authenticator checks, rate limits, the audit log, detecting misuse and fixing errors.
• To meet legal duties, such as keeping invoices and accounting records for as long as tax law requires.
• To tell you about changes to Plotler and, where you have not objected, about related products from Bisols. You can opt out of marketing at any time.

We do not sell personal data, and we do not use a developer’s buyer records for our own marketing.

The website sets no cookies. It keeps your light or dark theme choice in your browser’s local storage and, for the length of a visit, the campaign tags you arrived with in session storage, so a demo request or sign-up can record where it came from. If we turn on Vercel Web Analytics, it counts page views without cookies and without identifying you.

The app keeps your sign-in session in your browser’s local storage, and the buyer app keeps its own program files on the phone so it opens quickly; buyers’ records are not stored there. The website and the app serve their own typefaces, so your browser does not contact a font service.

We use these service providers, each only for the purpose shown:

• Supabase: the database, sign-in, files and server functions, hosted on AWS in Tokyo, Japan.
• Vercel: hosting of the website and the app.
• Resend: sending email.
• Anthropic: Plotler’s AI features, only for workspaces on the Scale and Enterprise plans or the AI add-on, and only when AI is switched on.
• Payment gateways (JazzCash and EasyPaisa): online payment of Plotler invoices, and of buyers’ instalments through a developer’s own merchant account.
• Cloudflare Turnstile: a bot check on the sign-up form.
• Where a developer connects them: Meta (WhatsApp Business messages, Facebook and Instagram lead forms), Google (Google Ads lead forms) and an SMS gateway.

We may also disclose data where the law requires it, to protect Plotler and its users from fraud or harm, or to a successor if the Plotler business is transferred.

Plotler’s database and files are hosted in Japan, by Supabase on AWS in Tokyo. The website and the app are served by Vercel from Washington, D.C., in the United States, through Vercel’s global network. Some providers above process data in other countries, including the United States. We choose providers that protect data in line with this policy, and personal data leaves Pakistan only as needed to provide the service.

• Workspace data: while the subscription lasts and, after closure, for 90 days so you can export it; then it may be deleted.
• Demo and contact requests that do not become customers: 24 months after our last contact.
• Invoices, payments and accounting records: for as long as Pakistani tax law requires, currently six years.
• Backups: overwritten in the normal backup cycle, within 30 days.
• In-app notifications are deleted after 90 days.

Each workspace is isolated in the database by row-level security; owners, admins and accountants sign in with an authenticator by default; every change is recorded in an append-only audit log; data is encrypted in transit; and backups are tested by restoring them.

You can ask us for a copy of the personal data we hold about you, to correct it, to delete it where we no longer need it, or to stop using it for marketing. Workspace users can correct their own name and phone in the app. Write to hello@bisols.com; we reply within 30 days and may ask you to confirm who you are.

For records a developer holds about you as a buyer, broker or employee, the developer decides; we pass your request to them and help them answer it.

Plotler is a business service and is not meant for children. Children appear in a buyer’s records only where the developer has entered them.

We will publish any change to this policy here with its new version and date, and tell workspace owners of significant changes by email. Questions or complaints: Bisols, hello@bisols.com, 03331501487.