Privacy policy

1. Information we collect

Enquiries and updates

When you contact us, we collect your name, email address, message and any company or role details you choose to provide. When you join our waitlist or subscribe to updates, we collect your email address and subscription preferences. We receive this information directly from you and keep correspondence needed to handle your request.

Accounts and project work

When you use the app, we collect the account and contact details you provide, together with information needed to administer your access and subscription. Your prompts, uploaded files, project details and generated responses may contain personal information about you or other people. We process this content to provide the features you use and maintain your project history.

Only include personal information you are authorised to share and need for the task. Avoid unnecessary sensitive information, such as health details, identity documents or passwords. Planning records and other sources used in a project may also contain personal information.

You can browse public pages without creating an account. If you do not supply details needed for an enquiry or app feature, we may not be able to respond or provide that feature.

2. How we use it

We use personal information to:

• respond to enquiries and provide support;
• operate accounts, subscriptions and the features you request;
• process project content and generate planning-related responses;
• send service notices and updates you have subscribed to;
• understand, in aggregate, how the website is used so we can improve it;
• diagnose problems, maintain security and prevent misuse; and
• meet legal obligations and handle disputes.

Sending an enquiry does not, by itself, subscribe you to marketing. You can unsubscribe from marketing emails using the link in the message or by contacting us.

3. Service providers and AI

We use external providers for hosting, databases, authentication, email delivery, security and AI processing. Current services include Vercel, Supabase and Mailjet. AI requests are routed through Vercel’s AI Gateway to OpenAI models.

To generate a response, relevant prompts, uploaded content and context are sent to the AI services involved in that request. These providers process that information as part of delivering their services. Their applicable terms, service settings and retention arrangements affect how it is handled; this policy does not promise zero retention or that every provider handles data in the same way.

Information may also be disclosed to professional advisers where needed, to authorities where required or permitted by law, or at your direction. We may change service providers as the product develops and will update this policy to reflect material changes to the way personal information is handled.

4. Overseas handling

Our service providers may store or process information outside Australia, including through their support teams and subcontractors. Using Plynth does not mean that information remains in Australia. The locations involved depend on the service, its configuration and the providers processing a request.

Contact us if you need information about processing locations before sharing personal or confidential material. Where Australian privacy law applies to an overseas disclosure, we must meet the applicable requirements; this policy is not a request for you to waive those protections.

5. Cookies and technical information

The website, app and supporting services may process technical information such as IP addresses, browser or device details, requests and security signals. Cookies and similar browser storage support functions such as sign-in and session management. The website uses BotID to help protect enquiry and signup forms against automated abuse.

The website uses Vercel Web Analytics to count page views and a small set of interactions: enquiry and early-access form submissions, links from guides and research into product pages, and visits referred by AI assistants. It does not set cookies for this. Vercel identifies a visit with a hash of the incoming request that is discarded after 24 hours, and records the page, referring site, approximate location, device type, operating system and browser. We see only aggregated statistics. Page addresses are sent without query parameters other than campaign (UTM) tags, and form contents and email addresses are never sent to analytics.

You can manage cookies and site storage through your browser. Blocking or clearing them may affect sign-in or other features.

6. Security and retention

Information is held in the systems used to deliver our services, including hosted databases, file storage and email systems. No online service or transmission is completely secure. Where Australian privacy law applies, we are required to take reasonable steps to protect personal information and to assess and notify eligible data breaches as required by law.

Retention depends on the information and its purpose: providing your account and project history, dealing with correspondence, keeping necessary business records, resolving disputes and meeting legal obligations. Provider logs and backups may have separate retention periods. Deleting an account or asking for deletion does not necessarily remove every copy immediately.

You can ask us about retention or request deletion using the contact details below. We will assess the request against the information we hold and any applicable retention requirements. Where the Australian Privacy Principles apply, information no longer needed for a permitted purpose must be destroyed or de-identified, subject to the exceptions in those principles.

7. Access, correction and choices

You can ask for access to personal information we hold about you, request correction, ask about deletion or stop marketing emails. Email privacy@plynth.ai with enough detail to identify your request, but do not send passwords or identity documents unless we arrange a suitable verification method with you.

We may need to verify your identity before providing or changing information. We will respond within a reasonable period. If we cannot fulfil a request, we will explain the reason and any available complaint options, subject to legal restrictions. Unsubscribing from marketing does not stop necessary account or service messages.

8. Privacy questions and complaints

Start by emailing privacy@plynth.ai or info@plynth.ai. Describe what happened, when it occurred and the outcome you are seeking. We will review the concern, seek any further information needed and provide a response.

If you are not satisfied with our response, or have not received one after a reasonable period, you can contact the Office of the Australian Information Commissioner (OAIC). The OAIC generally asks that you first complain to the organisation and allow about 30 days for a response.

9. Changes to this policy

We will update this page when our information-handling practices change and revise the date above. Where a change calls for a separate notice or consent, updating this policy does not replace that requirement.