LEGAL

Plantel Privacy Policy

Plantel Inc. — Texas-incorporated.

1. Information we collect

When you use Plantel, we collect:

  • Account information: Name, email, company, password, and authentication methods.
  • Billing information: Payment method, subscription tier, usage-based wallet transactions.
  • Content you create: Email, documents, files, messages, and agent configurations stored in your workspace.
  • Usage analytics: Login events, feature usage, agent action logs, API calls, and performance metrics.
  • Device information: IP address, browser type, operating system, and Plantel Web instance version.

2. How we use it

We use your information to:

  • Provide, maintain, and support Plantel services.
  • Bill and process payments according to your subscription plan.
  • Improve our products, features, and security.
  • Send service notifications and respond to your inquiries.
  • Detect fraud, abuse, and enforce our terms.
  • Comply with legal obligations.

3. Sharing and sub-processors

We do not sell your personal data. We share data only with trusted sub-processors (see our Data Processing Addendum for the current list). These processors act on our instructions and are contractually bound to protect your data. For information about upcoming sub-processor changes, we provide 30 days' notice.

4. Cookies

Plantel uses essential cookies only:

  • Theme preference: Remembers your onyx/aurora color scheme choice.
  • Sound preference: Remembers your notification sound settings.

We do not use tracking cookies, third-party analytics cookies, or advertisement cookies.

5. Your rights

GDPR (EU, EEA, UK): You have the right to:

  • Access your personal data.
  • Correct inaccurate data.
  • Delete your data (right to be forgotten).
  • Restrict or object to processing.
  • Port your data to another service.
  • Withdraw consent at any time.

CCPA (California): California residents have the right to:

  • Know what personal information is collected.
  • Know whether personal information is sold or shared.
  • Delete personal information collected.
  • Opt-out of the sale or sharing of personal information.
  • Non-discrimination for exercising CCPA rights.

To exercise any of these rights, contact privacy@plantel.ai.

6. Data retention

Account data: Retained for the life of your account plus 90 days after deletion.

Audit logs: Retained for 7 years to support compliance audits and legal obligations.

Backup copies: May persist in backups for up to 30 days after deletion.

7. Security

Plantel encrypts data in transit and at rest, isolates agent processes, and maintains SOC 2 Type II Aligned and ISO 27001:2022 Aligned practices. See our Security Policy for details on encryption, isolation, and signed actions.

8. International transfers

If you are located in the EU, EEA, or UK, your personal data may be transferred to the United States. We rely on EU Standard Contractual Clauses (Module 2) to ensure adequate data protection under GDPR Article 46.

9. Children

Plantel is not intended for individuals under 13 years of age. We do not knowingly collect personal data from children under 13. If we discover we have done so, we will delete such data promptly.

10. Changes to this policy

We may update this privacy policy to reflect changes in our practices or applicable law. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact us

If you have questions or requests regarding this privacy policy or our privacy practices, contact us at privacy@plantel.ai.

Last updated 2026-05-18. Templated v1; outside counsel review pending.