Privacy Policy

1. Information we collect

We collect only what we need to run Plinth for you:

• Account information: your name, email address, firm name and the details you give us when you request a pilot or create an account.
• Connected account data: when you connect an email account (such as Google) or another messaging service, we access the messages, attachments and metadata (sender, recipients, dates, subject lines) for the projects you choose to connect.
• Content you add: notes, files, project details and corrections you enter into Plinth.
• Usage information: basic technical data such as browser type, device, IP address and pages visited, used to keep the service secure and working.

2. How we use your information

We use your information to:

• Build and maintain the project record for the projects you connect, including extracting decisions, deadlines and open items and linking each one back to its source message.
• Provide, secure, support and improve the service.
• Respond to pilot requests and communicate with you about your account.
• Meet our legal obligations.

We do not sell your information. We do not use your data to train public or general-purpose AI models.

3. Google user data

If you connect a Google account, Plinth requests access only to the Google data needed to build your project record, for example read access to Gmail messages in the projects you choose. You will see the exact permissions on Google's consent screen before you grant them.

We use Google user data solely to provide and improve the user-facing features of Plinth. We do not use it for advertising, we do not sell it, and we do not transfer it to third parties except as necessary to provide the service, to comply with law, or as part of a merger or acquisition with your notice. Humans at Plinth do not read your Google data unless you give us permission for a specific message (for example, for support), it is needed for security purposes, or the law requires it.

Plinth's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Plinth's access at any time from your Google account permissions page. When you disconnect, we stop collecting new data from that account.

4. How we share information

We share information only in these cases:

• Service providers who host, store or process data on our behalf (such as cloud hosting and AI processing providers), under contracts that restrict them to processing it for Plinth.
• People in your own firm whom you give access to your workspace.
• When required by law, or to protect the rights, safety and security of our users or Plinth.
• In connection with a merger, acquisition or sale of assets, in which case we will tell you before your information becomes subject to a different privacy policy.

Data from one firm is never shared with another firm.

5. Security

Your data is encrypted in transit and at rest and stored in your firm's own workspace. Access within Plinth is limited to the people and systems that need it to run the service. No system is perfectly secure, but we take reasonable measures to protect your information and will notify you of any breach as required by law.

6. Retention and deletion

We keep your information for as long as your account is active or as needed to provide the service. You can delete individual items at any time, and you can ask us to export or permanently delete all of your data by emailing hello@plinth-studios.com. When you close your account or disconnect a source, we delete the associated data within 30 days, except where we must keep it to meet legal obligations.

7. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict how we use it. To exercise any of these rights, contact us at hello@plinth-studios.com. We will not discriminate against you for exercising them. If you are outside the United States, you may also have the right to complain to your local data protection authority.

8. Cookies

We use only the cookies and local storage needed to keep you signed in and to make the site work. We do not use advertising cookies.

9. Children

Plinth is a business service and is not directed at children under 13. We do not knowingly collect information from children.

10. Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, notify you by email before the changes take effect.

11. Contact

Questions about this policy or your data can be sent to hello@plinth-studios.com.