1.Information we collect
Information you give us
- Account information: your email address, your password (stored only as an Argon2id hash, never as the password itself), your workspace’s name and your role in it.
- Your content: the requests you write, the plans, columns and corrections you approve or make, datasets you upload, credentials you add for connectors, and the tables Pluriwave produces for you, including answers, evidence, saved copies of source pages and the agents’ working transcripts.
- Communications: what you send us when you contact support.
Information collected as you use Pluriwave
- Billing records: credit purchases, invoices and how many credits each piece of work used. Payments are processed by Stripe. We receive the payment’s status and amount and limited details such as the email used at checkout, never your full card number.
- Usage and device information: IP addresses, browser type, and the time and nature of requests to our servers, recorded in service logs. We also use IP addresses to protect sign-in, for example by limiting repeated failed attempts.
2.Information about others in research results
Pluriwave researches the entities its customers describe, usually businesses and other organizations, using publicly available sources such as company websites, directories, map listings and public records. Results can include information about people connected to those entities, such as an owner’s or executive’s name or a business phone number.
We process this information on behalf of the customer who requested the research and at their direction. That customer is responsible for having a lawful basis for the research and for how they use the results. If you believe a Pluriwave table includes information about you, write to support@pluriwave.com and we’ll help, including by working with the customer concerned.
3.How we use information
- To provide the service: run your plans, pilots, full runs and refreshes, store your tables, and show their evidence and cost.
- To bill for usage and process payments.
- To keep Pluriwave secure: authenticate users, prevent fraud and abuse, and enforce our Terms of Service.
- To support you and send service notices, such as changes to this policy.
- To diagnose problems and improve the service, using logs and aggregated usage information.
- To comply with the law.
We don’t sell personal information, we don’t share it for targeted advertising, and we don’t show ads.
4.AI models and your content
To answer your requests, we send the content each step needs (your request, a column’s instructions and the material an agent has gathered) to the AI model provider that runs that step. By default this is Anthropic, whose Claude models also perform web searches and fetch pages for agents.
If optional open-weight models are enabled for your workspace, those requests go through OpenRouter, which we configure to use only model hosts that don’t collect request data. Your workspace can also exclude model providers based in mainland China.
We don’t use your content to train AI models, and our model providers process it under API terms that don’t allow them to train on it.
7.How long we keep information
- Agent transcripts and saved copies of source pages are deleted automatically 90 days after the cell that made them finished. The cell keeps its answer and its evidence: source links and quoted passages.
- Your account, tables, datasets and settings are kept while your account is open. When you ask us to delete your account, we delete them, except records we must keep for legal, tax, accounting or security reasons, such as billing records. Deleted data can remain in backups for a limited time until they’re replaced.
- Service logs are kept for a limited time for security and troubleshooting.
8.Security
Traffic between your browser and Pluriwave is encrypted with TLS. Each workspace’s data is kept apart by row-level security enforced by the database itself. Passwords are hashed with Argon2id, connector credentials are encrypted at rest with AES-256-GCM, and code that agents run executes in isolated sandboxes that never receive your credentials. Operator actions are written to an append-only audit log.
No system is perfectly secure. If we learn of a breach that affects your personal information, we’ll notify you as the law requires.
9.Your rights and choices
You can export your tables yourself at any time, as CSV or Parquet. To access, correct or delete your personal information, or to close your account, write to support@pluriwave.com.
Depending on where you live, including the European Economic Area, the United Kingdom, California and other US states, you may also have the right to obtain a copy of your information in a portable format, to restrict or object to certain processing, to withdraw consent you’ve given, and to complain to your data protection authority. We won’t treat you differently for exercising these rights. We’ll confirm your identity before acting on a request, and you may use an authorized agent where the law allows.
For information in a table we hold for one of our customers (see section 2), we may pass your request to that customer, who decides how it’s handled.
10.Legal bases for processing
Where the law requires a legal basis, such as in the EEA and the UK, we rely on:
- Contract: to provide the service you signed up for.
- Legitimate interests: to secure the service, prevent abuse, support you and improve Pluriwave, where these interests aren’t outweighed by your rights.
- Legal obligation: for example, keeping billing records.
- Consent, where we ask for it.
11.International transfers
Pluriwave is based in the United States, where our servers and primary databases are located. We and our service providers may process information in the United States and other countries whose data protection laws may differ from yours. Where the law requires it, we use appropriate safeguards for these transfers.
12.Children
Pluriwave is a service for businesses and professionals. It isn’t directed to children, you must be 18 or older to use it, and we don’t knowingly collect personal information from children.
13.Changes to this policy
When we change this policy we’ll post the new version here and update the date at the top. If a change is material, we’ll also tell account owners by email or in the product before it takes effect.
14.Contact us
Pluriwave, Inc. is responsible for the personal information described in this policy, except research results we process for our customers (section 2). For questions or requests, write to support@pluriwave.com.