Your Privacy Rights
We take your privacy seriously. This page explains your rights under federal and state privacy laws, how we handle your data, and how to contact us with requests.
California Residents — Your Rights Under CCPA/CPRA
Cal. Civ. Code § 1798.100 et seq., as amended by the California Privacy Rights Act (CPRA)
If you are a California resident, you have the following rights regarding your personal information:
Right to Know. You may request that we disclose the categories of personal information we have collected about you, the purposes for which we collected it, and the specific pieces of personal information we hold.
Right to Delete. You may request that we delete personal information we have collected from you, subject to certain exceptions permitted by law.
Right to Correct. You may request that we correct inaccurate personal information we maintain about you.
Right to Data Portability. You may request a copy of your personal information in a portable and usable format.
Right to Opt Out of Sale or Sharing. We do not sell your personal information, and we do not share your personal information with third parties for cross-context behavioral advertising purposes.
Right to Limit Use of Sensitive Personal Information. We do not collect sensitive personal information (as defined by CPRA) through our landing page or waitlist system.
Right to Opt Out of Automated Decision-Making. Under CPRA, you have the right to opt out of the use of automated decision-making technology, including profiling, that produces legal or similarly significant effects concerning you. See CLO Note below regarding scope determination currently in progress.
Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights. You will receive the same service and pricing regardless of whether you submit a privacy request.
Authorized Agent. A California resident may designate an authorized agent to make a rights request on their behalf. We require written permission from the resident and may verify the resident's identity directly.
Global Privacy Control (GPC). We recognize the GPC signal as a valid opt-out of sale and sharing under CPRA. If your browser or device transmits a GPC signal when you visit our site, we will treat it as an opt-out request.
"Shine the Light" (Cal. Civ. Code § 1798.83). California residents may request information about personal information disclosed to third parties for their direct marketing purposes during the preceding calendar year. We do not disclose personal information to third parties for direct marketing purposes.
Enforcement. As of January 1, 2026, the California Privacy Protection Agency (CPPA) is the primary enforcement authority for CCPA/CPRA. You may also direct complaints to the CPPA at cppa.ca.gov.
Texas Residents — Your Rights Under TDPSA
Texas Data Privacy and Security Act, effective July 1, 2024
If you are a Texas resident, you have the right to:
- Know what personal data we have collected about you and why
- Access a copy of your personal data
- Correct inaccuracies in your personal data
- Delete personal data you have provided or that we have collected about you
- Data portability — obtain a copy in a portable format
- Opt out of the sale of personal data, targeted advertising, and profiling for decisions with significant effects
Controller: HomeFill LLC dba Plenu, Nashville, TN Purpose of processing: household supply subscription service — landing page use is limited to waitlist management. Sale or sharing: We do not sell your personal data or use it for targeted advertising.
To exercise your rights, contact us at privacy@plenu.online with subject line "Privacy Rights Request — Texas."
Tennessee Residents — Your Rights Under TIPA
Tennessee Information Protection Act, effective July 1, 2025
As a Tennessee resident — and as a company headquartered in Nashville — we want to be clear about your rights under TIPA:
You have the right to access, correct, delete, and obtain a portable copy of your personal information. You have the right to opt out of the sale of personal information and of profiling in furtherance of decisions that produce legal or similarly significant effects.
We do not sell your personal information. We process only the personal information necessary to manage your subscription and deliver your household supply boxes.
To exercise your TIPA rights, email privacy@plenu.online with subject line "Privacy Rights Request — Tennessee."
Other State Residents
If you reside in Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Utah, or Virginia, your state has enacted a consumer data privacy law that provides rights similar to those described above — including the right to access, correct, delete, and port your personal data, and the right to opt out of sale and targeted advertising.
We honor these rights regardless of where you live. Contact us at privacy@plenu.online to submit a request.
New York Residents — SHIELD Act
NY Stop Hacks and Improve Electronic Data Security Act
We maintain reasonable safeguards to protect the personal information of New York residents. In the event of a qualifying data breach affecting New York residents, we will notify affected individuals without unreasonable delay and, where applicable, notify relevant regulators within 72 hours of discovery, consistent with the SHIELD Act's requirements.
Our Data Architecture
We have designed our systems with privacy in mind from the ground up.
UUID-only operational layer. Our internal operational data systems identify subscribers by a randomly generated UUID (a unique identifier with no connection to your name or contact details). Your name, email address, and payment information are held only in our Stripe and Klaviyo source systems — not in our internal analytics or subscription management layers.
No sale. No ad targeting. We do not sell your personal information. We do not share your personal information with advertising networks or data brokers. We use your information solely to operate your subscription, fulfill your boxes, and communicate with you about your account.
How to Exercise Your Rights
Submit a request: - Email: privacy@plenu.online - Subject line: "Privacy Rights Request" - Include your name, state of residence, and the right(s) you wish to exercise
Response time: We will respond within 30 days. If we need additional time (up to 45 days), we will notify you of the extension and the reason.
Identity verification: For access and deletion requests, we may ask you to verify your identity before we fulfill the request. We do this to protect your information from unauthorized disclosure or deletion.
Authorized agents: If you are submitting a request on behalf of another person, include written authorization from that person. We may also contact the individual directly to verify the request.
No discrimination: Exercising your privacy rights will never affect your service, pricing, or access to Plenu.
Contact Us
Privacy Officer HomeFill LLC dba Plenu 2141 Century Farms Pkwy, Ste 1013-113 Nashville, TN 37013
Email: privacy@plenu.online