PlanetScale Privacy Policy

This Privacy Policy, last updated October 26, 2023, governs PlanetScale Inc.'s handling of personal information collected through its website, database platform, and related services, treating all covered data as pertaining to individuals acting in a business representative capacity rather than a personal or household capacity. The policy states that PlanetScale collects contact details, account credentials, payment information (processed by Stripe), usage data, device and online activity data, marketing data, and inferences; the terms authorize sharing this information with service providers, advertising partners, professional advisors, law enforcement, and business transferees in merger or acquisition scenarios. Notably, the policy explicitly carves out data processed on behalf of enterprise customers as a service provider or processor, meaning that data falls outside this policy's scope entirely, which is operationally significant for B2B customers assessing their own compliance obligations. The policy engages GDPR and UK GDPR through its appointment of EU and UK data representatives (Verasafe) and reliance on EU Commission and UK government adequacy decisions or contractual safeguards for cross-border transfers; it also participates in the EU-US Data Privacy Framework, the UK Extension, and the Swiss-US Data Privacy Framework, with PlanetScale expressly subject to FTC investigatory and enforcement authority. California residents should note the detailed CCPA-aligned Privacy Snapshot disclosing data categories, collection sources, processing purposes, and sharing limitations, including a 'Do Not Share My Personal Information' opt-out for interest-based advertising, though the policy clarifies that personal information is not sold.