Legal

Privacy Policy

Last updated: April 2026  ·  Questions? privacy@plotflo.com

Overview

Plinth Ltd ("Plinth", "we", "us") operates Plot (plotflo.com and app.plotflo.com). This Privacy Policy explains how we collect, use, and protect information about you when you use our services.

We take privacy seriously. Plot is designed for organisations that manage sensitive product knowledge. We handle your data with the same standard of care we ask you to apply to your own.

By using Plot, you agree to the practices described in this policy. If you do not agree, please do not use the service.

What we collect

Account information. When you create an account, we collect your name, email address, and organisation details. If you authenticate via a third-party provider (Google, GitHub), we receive the profile information that provider makes available.

Content you create. Documents, sections, comments, and any other content you create within Plot are stored on our infrastructure. This content is yours. We do not use it to train AI models or share it with third parties except as necessary to provide the service.

Usage data. We collect information about how you interact with the product — pages visited, features used, actions taken. This is used to improve the product and is not sold or shared with advertisers.

Technical data. IP address, browser type, device identifiers, and similar technical information collected automatically when you use the service.

Communications. If you contact us by email or through the product, we retain those communications to help us respond and improve the service.

How we use it

We use the information we collect to:

  • Provide, operate, and maintain the Plot service
  • Send transactional emails — account verification, notifications, expiry alerts
  • Respond to support requests and communications
  • Understand how the product is used and where it can be improved
  • Detect and prevent abuse, fraud, and security incidents
  • Comply with legal obligations

We do not use your content to train AI models. We do not sell your data. We do not display advertising.

Sharing

We do not sell, rent, or share your personal data with third parties for their marketing purposes.

We may share data with:

  • Service providers who help us operate the platform — cloud infrastructure, email delivery, analytics. These providers are contractually bound to use data only as instructed.
  • Other users in your organisation as part of the normal operation of the product — for example, section ownership and audit trail entries are visible to organisation administrators.
  • Law enforcement or regulators where required by applicable law, court order, or where we believe disclosure is necessary to protect the rights or safety of any person.

If Plinth is acquired by or merges with another company, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

Storage and security

Your data is stored on Google Cloud Platform infrastructure. We use industry-standard security measures including encryption in transit (TLS) and at rest.

Access to production systems and customer data is restricted to authorised personnel only. We maintain logs of all access.

No method of transmission over the internet is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.

Cookies

The Plot marketing site (plotflo.com) uses Plausible Analytics, a privacy-first, cookieless analytics tool. No cookies are set on the marketing site. No GDPR consent banner is required.

The Plot application (app.plotflo.com) uses session cookies necessary for authentication and to maintain your logged-in state. These are strictly necessary and cannot be disabled without losing access to the product.

We do not use advertising cookies or third-party tracking scripts.

Your rights

Depending on your location, you may have rights regarding your personal data, including:

  • Access — request a copy of the personal data we hold about you
  • Correction — request correction of inaccurate personal data
  • Deletion — request deletion of your personal data, subject to certain legal exceptions
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to certain processing of your personal data

To exercise any of these rights, contact us at privacy@plotflo.com. We will respond within 30 days.

Data retention

We retain your account data for as long as your account is active. If you close your account, we will delete your personal data within 90 days, except where we are required to retain it for legal or compliance purposes.

Content you have created within Plot — documents, sections, audit trail entries — will be deleted with your account unless your organisation has a separate data retention obligation.

Children

Plot is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete that information.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page and, where changes are material, notify users by email.

Your continued use of Plot after any changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us.

Plinth Ltd
privacy@plotflo.com

For data protection enquiries: privacy@plotflo.com