Privacy Policy
Last updated: August 3, 2026
This policy describes what Plum Applications, Inc. ("Plum," "we") collects when you use the Plum service, how it's used, and the choices you have. Plum Applications, Inc. is the data controller for this processing. The short version: we collect what's needed to run your agents, we don't sell it, and we don't use it to train AI models.
What we collect
- Account information - your email address, and your mobile number if you enable texting.
- Conversations - emails and texts sent to and from your agents, including conversation transcripts your agents need in order to remember context.
- Agent memory and skills - the notes and playbooks your agent writes as it works for you. These are yours: you can read, edit, and delete them from your dashboard.
- Connected services - if you connect Google Calendar, we store the access tokens and read or write calendar data strictly within the per-calendar permissions you chose. We never see your Google password.
- Usage metering - per-agent token counts and estimated costs, used to enforce spend limits.
- Product analytics - content-free usage events (for example "a message was sent" or "an agent was created", with counts, timings, and feature names - never the content of anything you or your assistant say), tied to your account id so we can understand and improve how the product is used. Analytics cookies in the browser are set only with your consent - see Cookies and analytics below.
How it's used
Solely to operate the service: delivering your agents' conversations, maintaining their memory, executing the tasks you give them, enforcing the trust and spend safeguards, and keeping the service secure. We do not sell your data, share it for advertising, or use it to train AI models.
Who processes it
We rely on a small set of infrastructure providers, each processing data only to provide their function:
- Anthropic - the AI model that powers agent reasoning (API traffic is not used to train Anthropic's models);
- Postmark - email sending and receiving for the shared assistant address;
- Google Cloud - hosting, database, and storage;
- Twilio - text messaging, if you enable it;
- Google - calendar access, if you connect one;
- PostHog - product analytics (content-free usage events only, as described above).
Each provider acts as a processor under a data processing agreement and may not use your data for its own purposes.
Cookies and analytics
Plum uses three kinds of browser storage, and only one of them needs your consent:
- Sign-in cookie (essential) - a single httpOnly session cookie that keeps you signed in for up to 30 days. The service can't work without it, so it's always on.
- Theme preference (functional) - your light/dark choice, kept in this browser's local storage. It never leaves your device.
- Analytics cookies (optional, consent-only) - set by PostHog to recognize a returning browser so usage funnels make sense. These are set only after you accept the analytics banner; declining (or ignoring) it means no analytics runs in your browser at all. You can change your mind at any time - withdrawing is as easy as accepting.
Separately from cookies, our servers record the content-free usage events described above (tied to your account, not to browser cookies) on the basis of our legitimate interest in understanding and improving the service. You can object to this at any time by emailing support@plum-app.com. We never use advertising trackers, never sell data, and keep web session recording disabled.
Legal bases (EEA, UK, and Switzerland)
Where the GDPR or UK GDPR applies, we process your data on these bases:
- Performance of a contract - operating your agents: delivering conversations, maintaining memory and skills, executing tasks, calendar access you configured, and billing.
- Consent - analytics cookies, the SMS program, and connecting third-party services like Google Calendar. You can withdraw consent at any time without affecting the rest of the service.
- Legitimate interests - keeping the service secure, preventing abuse, enforcing spend safeguards, and content-free product analytics.
- Legal obligation - where we must retain or disclose information to comply with law.
Your rights
You can exercise most of these directly in the product (see "Your choices" below); for anything else, email support@plum-app.com and we'll respond within 30 days. We may need to verify you control the account first. If you are in the EEA, UK, or Switzerland, you have the right to:
- Access your personal data and get a copy of it;
- Rectify inaccurate data;
- Erase your data ("right to be forgotten") - self-serve, see Retention and deletion;
- Port your data to another service in a machine-readable format;
- Restrict or object to processing, including any processing based on legitimate interests;
- Withdraw consent at any time, without affecting prior processing;
- Complain to your local data protection supervisory authority (in the EU, see the EDPB member list; in the UK, the ICO).
We never make automated decisions with legal or similarly significant effects about you.
International transfers
Plum is operated from the United States and the providers listed above process data there. If you use Plum from the EEA, UK, or Switzerland, your data is transferred to the US under appropriate safeguards - our providers' data processing agreements incorporate the European Commission's Standard Contractual Clauses (or an adequacy mechanism such as the EU-US Data Privacy Framework where the provider is certified).
Security
Beyond transport and at-rest encryption provided by our infrastructure, Plum enforces structural safeguards: only you and contacts you approve can direct your agent; your agent can only message approved recipients; messages from strangers never reach the AI at all; and calendar access is scoped per calendar to the level you chose.
Retention and deletion
We keep your data while your account is active so your agents can remember. Deleting an agent deletes its conversations, memory, and connections. You can delete your entire account and its data yourself at any time from the iOS app (Manage → Delete account) - this immediately and permanently deletes your agents, their email history, conversations, memory, calendar connections, and sign-in identities. You can also request deletion by emailing support@plum-app.com and we will complete it within 30 days.
Your choices
- Edit or delete your agents' memory and skills from the dashboard at any time.
- Disconnect calendars or revoke Google access (also possible from your Google account settings).
- Control exactly who can talk to your agent via its trusted-contact list.
- Request a copy or deletion of your data by email.
Text messaging (SMS)
If you enable texting, the following applies to the Plum SMS program (full program terms at agent-plum.com/sms):
- No sharing of mobile information. Your mobile phone number and your SMS opt-in consent are never shared with, sold to, or transferred to any third party or affiliate for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from any data sharing of any kind.
- Message frequency varies, depending on how you and your assistant converse and on any reminders or notifications you configure.
- Message and data rates may apply, according to your mobile carrier's plan.
- Opting out: reply STOP at any time to stop receiving texts. Reply HELP for help, or contact us at support@plum-app.com.
Children
The service is not directed to children under 18, and we do not knowingly collect their data.
Changes
We'll post any changes here with an updated date, and announce material changes by email where practical.
Contact
Plum Applications, Inc. - support@plum-app.com