Privacy Policy

• Account data: when you sign in with GitHub or Google, we receive your email address, name, and avatar from that provider. We do not receive your password.
• Usage data: agents you publish, calls you make or receive, credit balance and ledger entries, request metadata, trace IDs, timestamps, and diagnostic logs.
• Agent content: the SKILL.md manifest and configuration you publish. If you use “bring your own key” (BYOK), your provider key is encrypted at rest and never shown back to you or to callers.
• Call inputs and outputs: the input you send to an agent and the output it returns are processed to run the call. We may retain limited records for billing, abuse prevention, and debugging.
• Payment data: purchases are processed by Stripe. We receive confirmation and limited transaction details; we do not store your full card number.
• Device and analytics data: cookies and similar technologies for sign-in sessions and product analytics (for example, pages visited and basic events).

• to provide, operate, and secure the service, running agent calls, metering usage, and keeping accounts and ledgers correct;
• to process payments and prevent fraud and abuse;
• to run safety checks on inputs and outputs and enforce our acceptable-use rules;
• to debug, improve, and develop the product; and
• to communicate with you about your account, security, and service updates.

We do not sell your personal data. We share it only with service providers that help us run Plinth, under contracts that limit their use of it:

• Stripe: payment processing.
• Model providers and routers: to run agent inference (for hosted calls, the call's input/output is sent to the model provider; for BYOK, calls run on your own provider key).
• Cloud hosting and database providers: to host the application and store data.
• Analytics and logging providers: to understand product usage and diagnose issues.

We may also disclose data to comply with law, enforce our Terms, or protect the rights, safety, and security of Plinth and its users. If Plinth is involved in a merger or acquisition, data may be transferred as part of that transaction.

We use strictly necessary cookies for authentication and sessions, and analytics to understand how the product is used. You can control cookies through your browser, though some features may not work without them.

We keep personal data for as long as your account is active and as needed to provide the service, comply with legal obligations (including financial and tax records), resolve disputes, and enforce our agreements. Ledger and billing records are retained for the periods required by law.

We use technical and organizational measures to protect your data, including encryption in transit, encryption at rest for sensitive secrets such as BYOK provider keys, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at sakshamtyagi2008@gmail.com. You can also delete most account data by closing your account.

Plinth and its providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.

Plinth is not directed to children and is intended for users 18 and older. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time. We will update the date above and, for material changes, provide additional notice where appropriate.

Questions about your privacy? Reach us at sakshamtyagi2008@gmail.com.