Privacy

What we collect

• Account name, email, password hash and preferences.
• Learning work: saved PLC source, attempts, pass/fail results, completions and last activity.
• First-party page and product events: page path, pseudonymous session hash, account ID when logged in, referrer host, campaign fields, device/browser category and actions within the learning and purchase journey.
• Subscription status, product, price, currency and payment-provider references. We do not receive full card numbers.
• Support, feedback and marketing-email choices you submit.

Why we process it

We process account, learning and billing data to provide the service and perform our contract. We use security logs, first-party funnel measurement and support evidence for legitimate interests in protecting the service, finding broken or confusing workflows, preventing abuse and improving learning outcomes. You can object on grounds relating to your situation.

First-party measurement

Measurement is handled by PLC Simulator’s same-origin application and database. It does not create a third-party analytics identity, replay your screen or transmit page and feature events to Google Analytics, PostHog or an advertising platform. Our cookie and analytics policy lists the functional storage, event fields and controls.

Retention

First-party page visits are kept for 90 days and bounded product events for 365 days. Account and learning data remain while the account is open. After a valid deletion request we remove ordinary account data, attempts and saved source within 30 days, subject to backups and records we must retain. Billing records are retained for seven years for South African tax and accounting obligations.

Processors and transfers

Hosting and database providers process application data to run the service. Dodo Payments processes checkout and billing information under its own privacy terms. Transactional email providers receive the recipient and required message content. We do not use Google Analytics or PostHog as analytics processors. Where a provider processes information outside South Africa, we assess appropriate POPIA safeguards and limit the data to the service purpose.

POPIA rights

PLC Simulator is operated from South Africa and is subject to the Protection of Personal Information Act. You may:

• Ask whether we hold personal information and request access.
• Correct inaccurate or out-of-date information.
• Object to processing on legitimate grounds or request deletion where applicable.
• Lodge a complaint with the Information Regulator of South Africa.

Delete or contact us

Signed-in users can open Profile and use Delete account. You can also contact the Information Officer at privacy@plcsimulationsoftware.com from the account email address.