Your privacy matters to us. Here's how we protect your data and respect your privacy when you use Plixo, a service operated by PLIXO LABS LTD (registered in England and Wales).
Last updated: April 1, 2026
We collect only the minimal data necessary to provide our service and protect your privacy at every step.
Your prompts and context are encrypted and stored securely using industry-standard security practices.
You own your data and can export, delete, or modify it at any time through your account settings.
When you create a Plixo account, we collect your email address and create a secure account identifier. Authentication is handled by our third-party provider, Clerk (clerk.com). This information allows us to identify you, sync your prompts and settings across devices, and manage your account.
We store the prompts, context snippets, documents, collections, tags, and notes you explicitly save in Plixo. This content is associated with your account and stored in our backend database (powered by Convex) to provide our core service. We only store content that you actively choose to save — we do not automatically capture or record any content from websites you visit.
To keep you signed in, the Chrome extension reads authentication session cookies set by our authentication provider (Clerk) on the plixo.app domain. A JSON Web Token (JWT) is stored locally in your browser using chrome.storage.local. This token is used solely to authenticate API requests to our backend and is never shared with any other party.
On our website (plixo.app), we collect anonymized usage data via Vercel Analytics to improve our service, such as page views and general performance metrics. This data cannot be linked back to individual users. The Chrome extension itself does not contain any analytics or tracking code.
Our servers automatically collect certain technical information such as your browser type, operating system, and IP address when you interact with our services. This information is used to ensure compatibility, diagnose technical issues, and protect against security threats.
Your account and content data are used to provide Plixo's core functionality: storing, organizing, and injecting your prompts and context into AI conversations. All data processing is performed solely to deliver the features you use.
We use your email address to manage your account, send important service updates (such as changes to this Privacy Policy or Terms of Service), and provide customer support when you contact us.
Anonymized, aggregated usage data from our website helps us understand how Plixo is used so we can improve features, fix bugs, and develop new functionality. We do not use your saved content (prompts, documents, etc.) for training, analytics, or any purpose other than delivering the service to you.
Technical information (IP address, browser type) helps us detect and prevent fraud, abuse, and security threats to protect all users and comply with applicable law.
Your content data (prompts, documents, collections) is stored in our backend database hosted by Convex (convex.dev), which uses SOC 2 compliant cloud infrastructure. Your authentication data is managed by Clerk (clerk.com). Both providers store data in secure data centers located in the United States.
The Chrome extension stores a single authentication token locally in your browser using chrome.storage.local. No content data (prompts, documents, etc.) is cached or stored locally — all content is stored on our secure backend servers. The local token is automatically refreshed and is removed when you sign out or uninstall the extension.
All data is encrypted in transit using TLS (Transport Layer Security) and at rest using AES-256 encryption. Your prompts and context are protected with industry-standard security measures at every stage.
Access to user data is strictly limited to authorized personnel who need it to provide support or maintain our services. All access is logged and monitored.
We regularly audit our security practices and infrastructure to ensure your data remains protected against evolving threats.
We never sell, rent, or trade your personal information or content to third parties for marketing, advertising, or any other purposes.
We share the minimum data necessary with the following trusted service providers to operate Plixo. Each provider acts as a data processor and is contractually bound to process your data only as instructed by us:
When you explicitly choose to connect third-party services, we share only the data necessary to provide those features:
We encourage you to review the privacy policies of any third-party service you choose to connect.
We may disclose information if required by law, regulation, court order, or other legal process, or to protect the rights, property, or safety of PLIXO LABS LTD, our users, or others.
In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction. We will notify users of any such change in ownership or control of their personal data prior to the transfer taking effect.
Our website (plixo.app) uses essential cookies to keep you signed in and remember your preferences. We do not use advertising, cross-site tracking, or third-party marketing cookies.
The Plixo Chrome extension reads authentication session cookies set by Clerk on the plixo.app domain. This access is used solely to authenticate your session and obtain an authorization token. The extension does not read, write, or access cookies on any other domain.
The extension stores a single authentication token in chrome.storage.local. This token is used to authenticate API requests to our backend. No browsing history, page content, or personal data is stored locally by the extension.
We retain your personal data and content for as long as your account is active, in order to provide the Service and maintain your settings and content.
When you delete specific content (prompts, documents, collections), it is permanently removed from our systems. When you delete your account, all associated data is permanently deleted from our backend systems within 30 days.
You can request deletion of your data at any time by contacting us at info@plixo.app, and we will process the request promptly.
We may retain anonymized, aggregated data that cannot identify you for analytical purposes even after account deletion.
The Plixo Chrome extension requests the following permissions, each for a specific purpose:
Plixo's primary content scripts run only on supported AI chat websites (ChatGPT, Claude, Gemini, Copilot, Grok) to provide the prompt injection interface. A lightweight save overlay script runs on all HTTPS websites but only activates when you explicitly use the "Save to Plixo" feature. The extension never reads or collects page content without your explicit action.
The extension runs a background service worker that performs a single function: refreshing your authentication token at regular intervals to keep your session active. This background process does not monitor your browsing activity, access page content, or collect any data about the websites you visit.
The Chrome extension does not collect, access, or transmit: browsing history, page content (except text you explicitly save), keystrokes, form data, screenshots, geolocation, or any data from websites other than what you actively choose to save using the "Save to Plixo" feature.
The extension does not download or execute remote code. All extension functionality is contained within the distributed extension package.
You can access, view, and export your stored prompts and data through your Plixo account at any time.
You can correct inaccurate or incomplete personal information in your account profile.
You can delete specific content at any time or request deletion of your entire account and all associated data by contacting us at info@plixo.app. Deleted data is permanently removed from our systems.
You have the right to receive your personal data in a structured, commonly used, machine-readable format.
Where we rely on consent to process your data, you can withdraw that consent at any time by contacting us or adjusting your account settings.
You have the right to object to the processing of your personal data in certain circumstances, including processing based on our legitimate interests.
If you are located in the UK or EU, you have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk.
As a UK-registered company, we process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). We rely on the following legal bases:
We process your account information and content data as necessary to provide the Plixo service to you, in accordance with our Terms of Service.
We process technical information and anonymized usage data for security, fraud prevention, and service improvement, where our interests do not override your fundamental rights.
Where required, we obtain your consent before processing data — for example, when you connect optional third-party integrations such as Notion. You may withdraw consent at any time.
We may process your data where necessary to comply with applicable laws, regulations, or legal processes.
PLIXO LABS LTD is registered in England and Wales. Our third-party service providers (Clerk, Convex, and Vercel) host data in the United States. When your data is transferred outside the UK, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the UK Information Commissioner's Office (ICO), to protect your data in accordance with UK GDPR requirements.
Plixo is not intended for use by children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal data, please contact us at info@plixo.app.
If you have questions about this Privacy Policy or how we handle your data, please contact us at info@plixo.app
Data Controller: PLIXO LABS LTD, registered in England and Wales. For data protection enquiries, email info@plixo.app.
We may update this Privacy Policy from time to time. We'll notify you of any material changes by email and by posting the updated policy on our website. Continued use of Plixo after changes constitutes acceptance of the updated policy.
This Privacy Policy is effective as of April 1, 2026, and replaces any previous versions.
