Privacy Policy

PLX360 is operated by TNX Inc. (“PLX360”, “we”, “us”, “our”). We provide a multi-tenant product lifecycle management platform at plx360.com. This policy describes what information we collect from users of the PLX360 platform, how we use it, and the choices you have.

• Account information. Name, email address, role (Admin, Product Specialist, Graphic Designer, Vendor), and the organization you belong to.
• Files you upload. Product files (packaging artwork, manuals, 3D renders, factory photos, marketing photos, compliance certs, test reports, sell sheets, videos) and any metadata you attach.
• Product and operational data. Product names, variants, vendor relationships, test scorecard values, comments, workback plans.
• OAuth tokens for connected services. If you connect Google Drive, we store the access and refresh tokens necessary to mirror files into your Drive.
• Usage information. Server logs, including IP address, user agent, and timestamps of significant actions, used for security and debugging.

PLX360 requests a single Google Drive scope from your account: drive.file. This grants permission to read, write, and manage only the specific folder you choose during setup, plus files PLX360 creates inside that folder. We cannot read, modify, or delete any other file or folder in your Drive.

You choose the folder via Google's own folder picker. The act of picking is what grants us access — Google records your choice and limits our access to it. We do not enumerate your Drive ourselves and never see folders or files you didn't pick.

Files mirrored to your Drive remain under your control. You can revoke PLX360's access at any time from your Google Account security settings or from within the PLX360 settings panel.

PLX360 stores OAuth access and refresh tokens encrypted at rest using AES-256-GCM. Tokens are decrypted only in memory at request time to perform Drive operations on your behalf.

• To operate the PLX360 platform and provide the services you request.
• To synchronize your files between PLX360 storage and connected services like Google Drive.
• To send transactional notifications about your account.
• To investigate and respond to security incidents and abuse.
• To improve the product based on aggregated usage patterns.

We do not sell your data. We do not use your product files or uploaded content to train machine learning models.

Files and product data are retained while your organization remains active. If your account is closed, we retain your data for a 30-day grace period to allow data export, after which it is deleted from primary storage.

OAuth tokens for Google Drive are deleted immediately when you disconnect the integration. Files already mirrored to your Drive remain in your Drive after disconnect; we do not remove them.

Backups may retain copies of deleted data for up to 90 days before being overwritten in the normal backup rotation.

PLX360 relies on the following processors to deliver the service:

• Tencent Cloud and Alibaba Cloud for object storage of uploaded files.
• Neon for the application database.
• Vercel for application hosting.
• Anthropic for AI features such as test scorecard generation. Inputs sent to Anthropic are not used to train their models per their commercial terms.
• Google when you opt into the Google Drive integration.

You can request access to, export of, or deletion of your personal data by emailing dev@plx360.com. Organization admins can also export and delete most data directly through the PLX360 dashboard.

PLX360 is a B2B product not intended for users under 18. We do not knowingly collect personal information from children.

We will notify users of material changes to this policy at least 30 days in advance via the email address on your account or an in-app notice.

For privacy questions or requests, email dev@plx360.com.