Last updated · September 20, 2026

Privacy Policy.

What Plaza collects, why we use it, who receives it, and the choices available to you.

§ 1 Scope and roles

This Privacy Policy applies to PlazaSites.com, Plaza Sites, Plaza Cards, associated account and administrative pages, support interactions, and related services operated by Matthew Geske doing business as PlazaSites ("Plaza"). It does not govern third-party services with their own privacy policies.

For information about Plaza customers and account users, Plaza generally determines why and how the information is used. When a Plaza Sites customer uses a site to collect information from its own visitors, that customer determines the purpose and means of that collection, and Plaza processes the information to provide the service. Customers are responsible for their own privacy notices, consents, and lawful use of visitor information.

§ 2 Information we collect

Depending on how you interact with Plaza, we may collect:

Account and identity information: name, email address, business name, job title, phone number if provided, login method, account identifiers, and hashed authentication credentials.
Business and project information: business contact details, service selections, quote and kickoff information, approvals, support messages, change requests, and authorized representatives.
Customer Content: card details, photos, logos, copy, files, domains, links, designs, and other material uploaded, entered, or provided for a website or business card.
Payment and transaction information: plan, price, billing interval, invoice and payment status, Stripe customer and subscription identifiers, referral credits, refunds, disputes, and partial payment-method details supplied by Stripe. Plaza does not receive or store complete payment-card numbers.
Site-visitor and booking information: information submitted through a customer website, such as names, contact details, appointment details, inquiry messages, or files, depending on features the customer enables.
Device, usage, and network information: IP address, browser and device type, operating system, referring page, pages and features used, timestamps, cookie or session identifiers, request IDs, and diagnostic records.
Security, compliance, and consent evidence: login and administrative events, upload metadata, reports, moderation and DMCA records, policy versions accepted, acceptance text, timestamp, source IP, user agent, and cryptographic evidence hashes.
Communications: emails, contact forms, support records, call details you provide, and feedback.

We collect information directly from you, automatically from your device, from users you authorize, from service providers such as Stripe and Google, and from publicly available business sources when reasonably necessary to provide or protect the services.

§ 3 How we use information

We use information to:

Create and secure accounts, authenticate users, and provide Plaza Sites and Plaza Cards.
Design, publish, host, maintain, support, personalize, and improve websites and cards.
Process transactions, manage subscriptions, deliver referral credits, prevent billing errors, and maintain business and tax records.
Send service messages, security notices, receipts, support replies, and marketing communications where permitted. You may opt out of non-essential marketing.
Detect, investigate, prevent, and respond to fraud, abuse, malware, unauthorized access, legal violations, disputes, and security incidents.
Maintain policy-acceptance evidence, enforce agreements, comply with law, respond to lawful requests, and establish or defend legal claims.
Understand service performance and public marketing-page use through consented analytics.

We do not sell personal information for money. We do not use personal information for cross-context behavioral advertising, and we do not knowingly sell or share personal information of anyone under 18.

§ 4 How information is disclosed

We disclose information only as reasonably necessary to operate, protect, or transfer the business, including to:

Infrastructure and operations providers, including Cloudflare and database, storage, monitoring, security, and hosting providers.
Payment providers, principally Stripe, to process transactions, subscriptions, refunds, disputes, and fraud checks.
Communications providers, including Resend, to deliver transactional and authorized marketing email.
Login and integration providers, including Google when you choose Google sign-in or connect a Google service.
Analytics providers, including Google Analytics, only for public marketing pages after analytics consent where the consent control applies.
Professional advisers and contractors, subject to appropriate confidentiality obligations and only for legitimate business needs.
Authorities and affected parties, when reasonably necessary to comply with law, legal process, protect rights or safety, investigate abuse, or respond to a security incident.
A business successor, in connection with financing, reorganization, merger, acquisition, sale of assets, or transfer to a successor Plaza entity, subject to applicable law.

Customer websites and business cards are designed for public display. Information a customer chooses to publish there will be publicly accessible and may be copied or indexed by others.

§ 5 Retention

We retain information for as long as reasonably necessary for the purposes described above, including while an account or customer relationship is active and for appropriate periods afterward. Retention depends on the type of information, contractual commitments, backup cycles, security and fraud-prevention needs, limitation periods, tax and accounting rules, disputes, legal holds, and applicable law.

We generally retain transaction, invoice, refund, and tax records for up to seven years; contract, acceptance, dispute, and security evidence for the period reasonably necessary to establish or defend claims; and active Customer Content while needed to provide the service. Deletion from live systems may not immediately remove encrypted backups, which are isolated and expire through ordinary rotation. We may retain de-identified or aggregated information that no longer reasonably identifies a person.

§ 6 Security

Plaza uses administrative, technical, and physical safeguards designed for the nature of the information and service. These include access controls, authentication protections, transport encryption, restricted administrative routes, upload validation, logging, service-provider controls, and incident-response procedures. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please report suspected security issues to [email protected].

§ 7 Your choices and privacy rights

Depending on where you live and subject to legal exceptions, you may request that Plaza:

Confirm whether we process your personal information and provide access to it.
Correct inaccurate personal information.
Delete personal information that we are not required or permitted to retain.
Provide a portable copy of eligible information.
Explain the categories and sources of information, purposes, and categories of recipients.
Withdraw analytics consent or opt out of non-essential marketing.

Submit a request to [email protected] or call +1 (510) 485-9567. We may verify your identity and authority before responding. Authorized agents must provide proof of authorization. We will not discriminate against you for exercising a privacy right. If an applicable privacy law does not cover Plaza or the request, we may still honor it voluntarily when reasonable.

§ 8 Cookies and analytics

Plaza uses essential cookies and similar storage for login sessions, security, checkout flow, preferences, and consent choices. Essential technologies operate because the service cannot function securely without them. Google Analytics is limited to public marketing pages and should load only after analytics consent. Plaza does not use advertising pixels or cross-site behavioral advertising. See the Cookie Policy for details and controls.

§ 9 Children and geographic scope

Plaza is a United States business service for adults and is not directed to children or personal household users. We do not knowingly collect personal information directly from anyone under 18 to create a Plaza customer account. If you believe a minor supplied personal information to Plaza, contact us so we can investigate and take appropriate action.

§ 10 Third-party sites and customer obligations

Links and integrations may lead to third-party services governed by their own policies. Plaza customers must provide legally adequate notices for their own websites, configure collection features appropriately, limit access to visitor information, and avoid using Plaza to collect regulated or sensitive information unless Plaza has expressly agreed in writing to support that use. Plaza is not a HIPAA business associate and should not be used to collect protected health information unless a signed business-associate agreement is in place.

§ 11 Changes to this policy

We may update this Policy as the services, providers, or law change. We will update the date above and provide additional notice when a change is material. Unless a different date is stated, the revised Policy applies when posted and prospectively to continued use.

§ 12 Contact

Matthew Geske dba PlazaSites
330 17th St., Unit 1010
Oakland, CA 94612
United States
+1 (510) 485-9567
[email protected]
[email protected]