Plenu Privacy Policy

Operator: HomeFill LLC, a Tennessee limited liability company doing business as Plenu ("Plenu," "we," "us," or "our") Version v1.3 · Effective Date: October 11, 2026 · Last updated: October 11, 2026

This Privacy Policy explains how we collect, use, disclose, and protect personal information for everyone who uses joinplenu.com — both visitors who have not yet subscribed and Plenu subscribers. It replaces any prior Landing Page Privacy Notice and Subscriber Privacy Policy.

Contact

1. About Plenu and our data architecture

Plenu is a household supply subscription service (NAICS 455219) operated by HomeFill LLC from Nashville, Tennessee. We use technology, including AI-assisted personalization, to compose and ship household supply boxes suited to your household.

We designed our systems to limit where identifying information lives. Our internal operational and personalization systems identify your household by a randomly generated identifier (a "UUID") that is not derived from your name or contact details. Your name, email address, delivery address, and payment details are held in our account and service systems and are shared with service providers only as needed to run your subscription (for example, Stripe for billing, Resend for email delivery, and Shippo for shipping labels — see Section 5). Our AI personalization layer works from your preferences, consumption signals, and delivery history linked to your UUID; it is not given your name or payment information.

2. Information we collect

2.1 Account information. Your name, email address, delivery address, and, if you provide it, your phone number.

2.2 Billing information. Payment is processed by Stripe. For display in your account, Plenu stores only the last four digits of your card, your billing ZIP code, and your card type. We do not store your full card number or security code; Stripe handles and secures card data.

2.3 Subscription information. Your tier (Solo, Plus, Family, or XL, or a College-rate subscription), start date, billing cycle, and status.

2.4 Household and box-preference information. To compose your box, we collect what you tell us at signup and afterward, which may include: household type and setup (for example, single person, couple, roommates, family with children, or multi-generational); the age range of any children in the home (counts and ranges only — no names or dates of birth); how quickly your household uses supplies and how often you run laundry; product-category, brand, scent, texture, and format preferences (or a preference for brand-agnostic selections); packaging preferences (for example, easier-to-open or lighter-weight options); whether you have pets and what kind; and your delivery and contact preferences.

2.5 Optional allergy and sensitivity information. One optional free-text field lets you tell us about any allergies or sensitivities we should work around (for example, a fragrance sensitivity or an ingredient to avoid). You can always skip it. We collect it only if you choose to provide it, with your consent, and we use it for a single purpose: to personalize your box and avoid sending products you cannot use. We do not use it to infer any other characteristics about you, and we never sell it, share it, or use it for advertising. Depending on what you write, some of this information may be treated as "sensitive" or health-related under certain state laws; because we use it only to provide the service and not to infer characteristics, the CPRA "right to limit" does not apply, but you may view, update, or delete your answer at any time by contacting us or, where available, in your account settings.

2.6 College verification. If you subscribe at the College rate, we collect confirmation that your student status is current, at signup and on an annual basis. We will describe the verification method at the time of verification.

2.7 Delivery preferences. Your delivery address(es) and any special delivery instructions.

2.8 Communication preferences. Your email opt-in status for marketing and, if you provide it, your SMS consent status (see Section 3; SMS is not offered at this time).

2.9 Personalization signals. As we compose and adjust your boxes, we keep per-household records of preferences and consumption signals linked to your UUID, not to your name.

2.10 Device and usage data. For security and to operate the website, we collect browser and device type, IP address, and general usage of our site.

2.11 Survey responses. From time to time after you subscribe, we may invite you to take part in optional surveys. Participation is voluntary.

3. How we use your information

• To fulfill your subscription — using your preferences, household information, and delivery address to compose and ship your boxes.
• To personalize your boxes — using your preferences and consumption signals through our AI-assisted personalization (see Section 4).
• To process billing — through Stripe, and to send receipts.
• To communicate with you — we send transactional email (confirmations, shipment and delivery updates, and account notices) through our email provider; these are part of the service. With your consent, we also send marketing email, which you can stop at any time using the unsubscribe link.
• SMS — we do not offer SMS messaging at this time. If we introduce it, we will obtain your separate, express consent first, and you will be able to reply STOP to opt out at any time.
• To improve our service — using aggregated, de-identified information.
• For security and fraud prevention, and for legal and tax compliance.

4. AI-assisted personalization

Plenu uses automated, AI-assisted systems to help compose your boxes and adjust quantities based on your household's preferences and usage. What this means, and does not mean:

• Our AI is a behind-the-scenes personalization tool, not a chatbot. We do not currently offer an AI chat assistant on our website, and you are not required to converse with an AI to use Plenu.
• Our AI does not provide medical, mental-health, therapeutic, legal, or financial advice, and is not a substitute for a professional. If you ever contact us in crisis, please call or text the 988 Suicide and Crisis Lifeline, or call 911.
• Our AI does not make binding decisions about your subscription without the ability for you or a person to review them. You can reach a human at hello@plenu.online.

This disclosure is consistent with Tennessee SB 1580 (effective July 1, 2026), which prohibits an AI system from representing itself as a licensed mental-health professional. To the extent the EU AI Act's transparency requirements (Article 50) apply to any interaction, we disclose the AI's nature as described here.

5. How we share your information

We do not sell your personal information, and we do not share it with data brokers.

When our advertising measurement is active on the website — for example, to measure whether one of our ads led to a visit or a signup — we use the Meta Pixel, which may set cookies and send Meta information about your visit, such as pages viewed, whether you completed a signup, and device, browser, and cookie identifiers. Under some state laws, including California's, this may count as "sharing" personal information for cross-context behavioral advertising. You can opt out at any time through Your Privacy Choices on our Cookie Policy page, and we honor the Global Privacy Control signal (see Section 7).

We use the following service providers, each only for the purpose shown and under contractual limits on their use of the information:

Some of our pages load content — web fonts and product images — directly from third-party servers (shown above). When your browser loads that content, those servers receive your device's IP address as a normal part of delivering it. They do not receive your name, account, or other Plenu account information.

We may also disclose information where required by law, to protect our rights or others' safety, or in connection with a merger, acquisition, or sale of assets.

6. How long we keep your information

On account deletion (or cancellation with a deletion request), we delete or render permanently inaccessible your operational data, and delete your personal information from Stripe and our email systems, within 30 days — except records we must keep for tax, legal, or security reasons. We may keep a non-identifying record that a deletion occurred.

7. Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, and obtain a portable copy of your personal information, to opt out of the "sale" or "sharing" of personal information and of targeted advertising, and not to be discriminated against for exercising these rights. We honor these rights for residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, and we will honor comparable rights for residents of other states as their laws take effect.

Opt out of sale/sharing. We do not sell personal information. If our Meta Pixel advertising measurement is active, it may count as "sharing"; you can opt out through Your Privacy Choices on our Cookie Policy page, which turns off advertising measurement and site analytics in that browser, or by contacting us (Section 13).

Global Privacy Control (GPC). We recognize the GPC signal as a valid request to opt out of sale and sharing. When advertising measurement and analytics are active, a browser that sends GPC is not loaded with the Meta Pixel or our analytics for that visit.

Sensitive information. The optional allergy-and-sensitivity details described in Section 2.5 are used only to personalize and fulfill your box, are never used to infer other characteristics, and are never sold, shared, or used for advertising. You may update or delete them at any time.

Appeals. If we decline a request, you may appeal by emailing privacy@plenu.online; we will respond within 60 days.

Shine the Light (Cal. Civ. Code § 1798.83). We do not disclose personal information to third parties for their own direct-marketing purposes.

A separate California Privacy page provides the CCPA/CPRA category disclosures and additional detail for California residents.

8. How to submit a privacy request

Email privacy@plenu.online with the subject line "Privacy Rights Request," and include your name, your state of residence, the email associated with any account, and the right you wish to exercise. We will respond within 30 days; if we need up to 45 more days, we will tell you within the first 30 and explain why. You may use an authorized agent with written permission, and we may verify your identity before acting on a request.

9. Security

We use technical and organizational safeguards to protect your information, including encryption in transit (HTTPS/TLS), strong encryption of operational data at rest, role-based access limits, and reliance on Stripe (a PCI-DSS Level 1 processor) for all card data. No system is perfectly secure. If a breach affects your personal information, we will notify you as required by law, including Tennessee Code § 47-18-2107 (within 45 days of discovery), and within 30 days for California residents. If you believe your account has been compromised, contact hello@plenu.online.

10. Children

Plenu is for adults 18 and older, including College-rate subscribers. We do not knowingly collect personal information from anyone under 18, and will delete it if we learn we have. Household information about children (counts and age ranges) is provided by the adult account holder for box sizing and is not collected from children.

11. Where we operate

Plenu's service is provided in the United States and is intended for U.S. residents in our service area. We do not direct our service to the EU/EEA.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will post the updated policy at joinplenu.com/privacy and, for subscribers, notify you by email at least 30 days before the changes take effect. The version and date block at the top shows the current version.

13. Contact us

HomeFill LLC dba Plenu, 2141 Century Farms Parkway, Ste 1013, #113, Nashville, TN 37013 Privacy and rights requests: privacy@plenu.online · Legal notices: legal@plenu.online · Support: hello@plenu.online