Privacy Policy
Last updated: July 3, 2026
This policy describes what Plum Applications, Inc. ("Plum," "we") collects when you use the Plum service, how it's used, and the choices you have. The short version: we collect what's needed to run your agents, we don't sell it, and we don't use it to train AI models.
What we collect
- Account information - your email address, and your mobile number if you enable texting.
- Conversations - emails and texts sent to and from your agents, including conversation transcripts your agents need in order to remember context.
- Agent memory and skills - the notes and playbooks your agent writes as it works for you. These are yours: you can read, edit, and delete them from your dashboard.
- Connected services - if you connect Google Calendar, we store the access tokens and read or write calendar data strictly within the per-calendar permissions you chose. We never see your Google password.
- Usage metering - per-agent token counts and estimated costs, used to enforce spend limits.
How it's used
Solely to operate the service: delivering your agents' conversations, maintaining their memory, executing the tasks you give them, enforcing the trust and spend safeguards, and keeping the service secure. We do not sell your data, share it for advertising, or use it to train AI models.
Who processes it
We rely on a small set of infrastructure providers, each processing data only to provide their function:
- Anthropic - the AI model that powers agent reasoning (API traffic is not used to train Anthropic's models);
- AgentMail - email infrastructure for agent inboxes;
- Google Cloud - hosting, database, and storage;
- Twilio - text messaging, if you enable it;
- Google - calendar access, if you connect one.
Security
Beyond transport and at-rest encryption provided by our infrastructure, Plum enforces structural safeguards: only you and contacts you approve can direct your agent; your agent can only message approved recipients; messages from strangers never reach the AI at all; and calendar access is scoped per calendar to the level you chose.
Retention and deletion
We keep your data while your account is active so your agents can remember. Deleting an agent deletes its conversations, memory, and connections. To delete your entire account and its data, email support@plum-app.com and we will complete the deletion within 30 days.
Your choices
- Edit or delete your agents' memory and skills from the dashboard at any time.
- Disconnect calendars or revoke Google access (also possible from your Google account settings).
- Control exactly who can talk to your agent via its trusted-contact list.
- Request a copy or deletion of your data by email.
Text messaging (SMS)
If you enable texting, the following applies to the Plum SMS program:
- No sharing of mobile information. Your mobile phone number and your SMS opt-in consent are never shared with, sold to, or transferred to any third party or affiliate for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from any data sharing of any kind.
- Message frequency varies, depending on how you and your assistant converse and on any reminders or notifications you configure.
- Message and data rates may apply, according to your mobile carrier's plan.
- Opting out: reply STOP at any time to stop receiving texts. Reply HELP for help, or contact us at support@plum-app.com.
Children
The service is not directed to children under 18, and we do not knowingly collect their data.
Changes
We'll post any changes here with an updated date, and announce material changes by email where practical.
Contact
Plum Applications, Inc. - support@plum-app.com