← Plum

Privacy Policy

Last updated: August 3, 2026

This policy describes what Plum Applications, Inc. ("Plum," "we") collects when you use the Plum service, how it's used, and the choices you have. Plum Applications, Inc. is the data controller for this processing. The short version: we collect what's needed to run your agents, we don't sell it, and we don't use it to train AI models.

What we collect

How it's used

Solely to operate the service: delivering your agents' conversations, maintaining their memory, executing the tasks you give them, enforcing the trust and spend safeguards, and keeping the service secure. We do not sell your data, share it for advertising, or use it to train AI models.

Who processes it

We rely on a small set of infrastructure providers, each processing data only to provide their function:

Each provider acts as a processor under a data processing agreement and may not use your data for its own purposes.

Cookies and analytics

Plum uses three kinds of browser storage, and only one of them needs your consent:

Separately from cookies, our servers record the content-free usage events described above (tied to your account, not to browser cookies) on the basis of our legitimate interest in understanding and improving the service. You can object to this at any time by emailing support@plum-app.com. We never use advertising trackers, never sell data, and keep web session recording disabled.

Legal bases (EEA, UK, and Switzerland)

Where the GDPR or UK GDPR applies, we process your data on these bases:

Your rights

You can exercise most of these directly in the product (see "Your choices" below); for anything else, email support@plum-app.com and we'll respond within 30 days. We may need to verify you control the account first. If you are in the EEA, UK, or Switzerland, you have the right to:

We never make automated decisions with legal or similarly significant effects about you.

International transfers

Plum is operated from the United States and the providers listed above process data there. If you use Plum from the EEA, UK, or Switzerland, your data is transferred to the US under appropriate safeguards - our providers' data processing agreements incorporate the European Commission's Standard Contractual Clauses (or an adequacy mechanism such as the EU-US Data Privacy Framework where the provider is certified).

Security

Beyond transport and at-rest encryption provided by our infrastructure, Plum enforces structural safeguards: only you and contacts you approve can direct your agent; your agent can only message approved recipients; messages from strangers never reach the AI at all; and calendar access is scoped per calendar to the level you chose.

Retention and deletion

We keep your data while your account is active so your agents can remember. Deleting an agent deletes its conversations, memory, and connections. You can delete your entire account and its data yourself at any time from the iOS app (Manage → Delete account) - this immediately and permanently deletes your agents, their email history, conversations, memory, calendar connections, and sign-in identities. You can also request deletion by emailing support@plum-app.com and we will complete it within 30 days.

Your choices

Text messaging (SMS)

If you enable texting, the following applies to the Plum SMS program (full program terms at agent-plum.com/sms):

Children

The service is not directed to children under 18, and we do not knowingly collect their data.

Changes

We'll post any changes here with an updated date, and announce material changes by email where practical.

Contact

Plum Applications, Inc. - support@plum-app.com