Privacy Policy

PlanTrain is operated by Webbmi AB (Swedish Org. No. 559268-5993, VAT SE559268599301). This Privacy Policy explains what personal data we collect, why we collect it, and how it is processed.

Data we collect

Account data (name, work email, company, role), product usage data, and content you create inside PlanTrain (ARTs, PIs, features, retros, votes, etc.).

Purpose & legal basis

We process personal data to provide the service (contractual necessity), to keep it secure (legitimate interest) and, where applicable, with your consent. We do not sell personal data.

Storage & security

Data is stored on EU/EEA infrastructure where possible, with per-organisation isolation and row-level security. Encryption in transit (TLS) and at rest.

Sub-processors

We use a limited number of vetted sub-processors for hosting, authentication and email delivery. A current list is available on request.

Your rights (EU/UK GDPR)

Under the EU and UK GDPR you have the right to access, rectify, delete (erasure), restrict, port your personal data, object to processing (including profiling) and withdraw consent at any time. We respond within 30 days. Contact us at sales@plantrain.ai.

International transfers

When personal data is transferred outside the EU/EEA or UK, we rely on the EU Standard Contractual Clauses (2021/914) and the UK International Data Transfer Addendum, plus supplementary measures where required by Schrems II.

US privacy rights (CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA)

If you are a resident of California, Virginia, Colorado, Connecticut, Utah or another US state with a comprehensive privacy law, you have the right to (a) know/access the personal information we hold about you, (b) correct inaccurate information, (c) delete your information, (d) port a copy, (e) opt out of sale or sharing of personal information for cross-context behavioural advertising, and (f) limit use of sensitive personal information. We do not sell personal information and we honour Global Privacy Control (GPC) signals as a valid opt-out for California residents. To exercise rights, email sales@plantrain.ai or use the "Do Not Sell or Share" link in the footer. We will not discriminate against you for exercising any right.

Children

PlanTrain is a B2B product not directed at children under 16. We do not knowingly collect personal data from children.

Automated decision-making

We do not use solely automated decision-making that produces legal or similarly significant effects on you.

Retention

Account and workspace data is retained while the workspace is active, and deleted within 90 days after termination unless legally required to retain it longer.

Contact & complaints

Data Controller: Webbmi AB, Sweden. Email: sales@plantrain.ai. EU users may lodge a complaint with the Swedish Authority for Privacy Protection (IMY). California users may contact the California Privacy Protection Agency.

Last updated: 14 July 2026.