Privacy Policy
Last updated: May 12, 2026
Overview
This Privacy Policy explains how Happenings Group A/S ("we", "us", "our") collects, uses, and protects your personal data when you use Pleo CLI ("Service"). We are committed to protecting your privacy and processing your data in accordance with the General Data Protection Regulation (GDPR) and Danish data protection law.
Data Controller
Company: Happenings Group A/S
CVR: 40979956
Address: Klostergade 56B St., 8000 Aarhus C, Denmark
Email: support@happenings.dk
Data We Collect
We collect minimal data necessary to operate the Service:
| Data | Purpose | Stored Where |
|---|---|---|
| Pleo auth tokens | Authenticate API requests to Pleo | Locally on your device |
| Website analytics | Understand usage of pleocli.com | Vercel Analytics |
Data We Do Not Collect
- Your Pleo password (authentication is via browser-based login)
- Payment card details
- Your expense data or financial records
- Telemetry or usage data from the CLI application
- Device identifiers or fingerprints
How We Use Your Data
- To authenticate your requests to the Pleo API
- To provide customer support
- To improve the Service through aggregated, anonymized website analytics
Legal Basis (GDPR)
We process your personal data under the following legal bases:
- Contract performance (Art. 6(1)(b) GDPR) — processing necessary to provide the Service
- Legitimate interest (Art. 6(1)(f) GDPR) — website analytics to improve the Service
- Consent (Art. 6(1)(a) GDPR) — where you explicitly consent, e.g. optional cookies
Third-Party Services
We share data with:
| Service | Purpose | Data Shared |
|---|---|---|
| Pleo | API requests on your behalf | Auth tokens |
| Vercel | Website hosting & analytics | Anonymized usage data, server logs |
Data Storage & Security
Authentication tokens and configuration are stored locally on your device at ~/.config/pleo/. We use HTTPS for all network communication. We do not operate our own database of user data.
Data Retention
- Local tokens: Stored until you run
pleo logout - Analytics data: Retained per Vercel Analytics' default retention period
Your Rights
Under the GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data
- Restriction — request we limit processing of your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interest
- Withdraw consent — where processing is based on consent
To exercise these rights, email support@happenings.dk. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.
Children
The Service is not directed to children under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.
Contact
For privacy-related inquiries, contact us at: