This Privacy Policy explains how Plutavia (“Plutavia”, “we”, “our”, or “us”) collects, uses, discloses, and protects information about you (“you” or “your”) when you use or access our website (https://plutavia.com), products, services, or applications (collectively, the “Services”). “Personal Data” means information that identifies you or can reasonably be linked to you.
Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at hi@plutavia.com.
1. Changes to this Privacy Policy
We may change this Privacy Policy from time to time. We will post any changes on the Services with a new “Last Updated” date at the top of this Privacy Policy, and for changes that materially affect paying subscribers, we will also email you. Any changes are effective when we post the revised Privacy Policy on the Services. We encourage you to review our Privacy Policy whenever you use the Services to stay informed of ways you can protect your privacy.
We may provide you with disclosures and alerts regarding this Privacy Policy or Personal Data collected by posting them on our website and, if you have an account, by emailing you at the email address listed in your Plutavia account.
If applicable law requires that we provide notice in a specified manner before making any changes to this Privacy Policy applicable to you, we will provide such required notice.
2. Personal Data We Collect
Personal Data is collected from you directly, automatically from your device, and also from third parties. The Personal Data we process when you use the Services depends on variables like how you interact with our Services, the features you use, and your method of accessing the Services. Below, we detail the information we collect through each of these channels.
2.1 From You
Account Data: When you open an account, we collect your email address and name through our sign-in provider (Clerk). We store your email, name, plan status, Stripe customer ID, and your Plutavia activity (highlights, notes, watchlists, Quick Access pins, model history, and which filing alerts you have cleared). If you add a profile photo, it is held by our sign-in provider (Clerk). Billing details are handled by Stripe, as described below.
Payment Information: For paid subscriptions, billing details (such as your email, billing address, and payment card details) are collected and processed by Stripe, Inc., our payment processor.
Support Data: When you seek customer support, we collect the information that you provide and use it to respond to you and to improve the Services.
2.2 Automatically
Cookies and Similar Technologies: We use cookies and similar technologies to provide essential functionality like signing you in and recognizing you while using our Services. See the “Cookies and Other Technologies” section below for more details and control options.
Website Usage Data: We automatically log data about your website interactions, including the referring site, date and time of visit, pages viewed, and your IP address, browser, device type and approximate location. We use IP addresses to protect the Services against abuse and to rate-limit requests.
Error Reports: When something goes wrong, our error-monitoring provider (Sentry) receives an error report. Error reports may include your account ID, browser type and the page you were on.
2.3 What You Create on Plutavia
When you use the Services, we store the content and settings you create so we can show them back to you. This includes your highlights and notes on filings, your watchlists and filing-alert settings, your Quick Access pins, and the history of the financial models you have generated.
Share links: If you create a share link, anyone with the link can view the shared filing and your highlights and notes on it. Share links are live: the page shows your current highlights and notes on that filing, so notes you add after sharing also appear (the page data includes when each was created or updated). Your name and email are not shown. Deleting a highlight removes it from the shared page. To turn a link off, email hi@plutavia.com. Share links stay live if your subscription ends, and stop working when your account is deleted. Only share a link with people you want to see that content.
Contact-sales submissions: If you fill in our contact-sales form, the details you enter (name, email, company, job title, phone, website, company size and message) are emailed to us and used to respond to you and to improve the Services.
2.4 From Third Parties
From Stripe, we receive your billing email, customer ID and subscription status, your card brand, last four digits and expiry date, and your subscription price and renewal date, which we show you in your Settings. From our sign-in provider (Clerk), we receive your email address and your first and last name. We do not receive your full card number.
3. Cookies and Other Technologies
3.1 What Cookies Are
A cookie is a small text file that can be stored on and accessed from your device when you visit our Services. We use only essential cookies and browser storage, described in “Cookies We Use” below.
You can find more useful information about cookies and similar technologies at www.allaboutcookies.org.
3.2 Cookies We Use
Necessary: We use essential cookies from our login provider (Clerk) to sign you in and keep you signed in. The Services cannot function properly without these cookies. Disabling these cookies may make the Services unavailable.
Browser storage: We also use a browser local-storage item that remembers an in-progress Excel model request, and short-lived browser session storage used by our error-monitoring tool (Sentry).
We do not use advertising, marketing, or cross-site tracking cookies.
Analytics and performance: we use Vercel Analytics and Speed Insights, which do not use cookies and collect page views, performance data, country, browser and device information.
3.3 Managing Cookies
If you do not want cookies to be dropped on your device, you can adjust the settings of your Internet browser to reject the setting of all or some cookies and to alert you when a cookie is placed on your device. For further information about how to do so, please see the specific browser procedures below, or see www.allaboutcookies.org. Please note that if you use your browser settings to block all cookies (including the Necessary cookies described above), you may not be able to access or use all or parts of our Services or specific functionalities.
Safari Mobile (iPhones and iPads)
If you want to remove previously stored cookies, you can manually delete the cookies at any time. However, this will not prevent the Services from placing further cookies on your device, unless and until you adjust your Internet browser setting as described above.
3.4 Global Privacy Control and Do Not Track
We do not sell personal data or share it for cross-site advertising, and we do not track you across other websites, so we do not change our behavior in response to Global Privacy Control or Do Not Track signals.
4. How We Use Your Information
We use the Personal Data we collect from you for the following purposes:
- To provide and maintain our Services;
- To support our legitimate interests in maintaining and improving our Services;
- To send you the emails described in the “Emails We Send” section below;
- To provide the information, products, and services you request;
- For internal administrative and auditing purposes;
- To detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity, including, when necessary, to prosecute those responsible for such activities;
- For other purposes such as data analysis, identifying usage trends, and evaluating and improving our Services, products, and your experience;
- To enforce our policies or other agreements;
- To combine information collected through the Services and from other sources so that such information can no longer reasonably be linked to you or your device (“De-Identified Information”) such as de-identified demographic information, information about the device from which you access the Services, or other analyses we create;
- To use for any other purpose for which we provide notice at the time of collection; and
- To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties.
We do not sell your Personal Data. We do not use your Personal Data for advertising, and we do not send your Personal Data to AI providers. If this practice should change in the future, we will update this Privacy Policy.
5. Emails We Send
We send account and billing notices, filing alerts for companies you watch, announcements about new features and updates, notices about issues with our data, and occasional requests for feedback. We do not sell your email address or send third-party advertising.
Non-essential emails, such as announcements and requests for feedback, include a way to opt out. You can also write to hi@plutavia.com and we will stop them. Essential account, billing and service-issue notices continue while you have an account.
6. Privacy Rights Requests
To access, correct or delete your data, email us at hi@plutavia.com. We will respond within 30 days. We may need to verify that you own the account before acting on a request.
You cannot delete your account from within the Services. To request deletion, email hi@plutavia.com. Within 30 days, we will delete all account data, including your profile, highlights, notes, watchlists, Quick Access pins, model history and share links. We will also cancel your subscription and delete the billing data we control. We keep only billing records we are required to keep, backups that expire in the ordinary course, and the technical records described below. Our payment processor, Stripe, may retain billing records it is required to keep.
7. How Long Do We Keep Your Information
We retain Personal Data as long as we are providing the Services to you or for a period during which we reasonably anticipate providing the Services. After your account is deleted, we keep only records we are required to keep for legal, tax or billing purposes, backups that expire in the ordinary course, and the technical records described below. See the “Privacy Rights Requests” section above.
Some technical records, such as error-monitoring events, hosting logs and email-delivery logs, contain account identifiers. Our providers keep them on their own retention schedules, and we use them only for security and operations.
8. Where Plutavia Operates
Plutavia is operated from the United States. If you access the Services from another country, your information is transferred to and processed in the United States.
9. How Do We Keep Your Information Safe
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
10. Your Choices
If you have registered for an account, you may review and update certain Personal Data that you have provided to us by logging into your account and using available features, or by contacting us in accordance with the “Privacy Rights Requests” section above. To delete your account, email hi@plutavia.com. We may need to verify that you own the account. We will delete your account data within 30 days, except billing records we are required to keep, backups that expire in the ordinary course, and the technical records described in the “How Long Do We Keep Your Information” section.
11. Do We Collect Information From Minors
You must be at least 18 years old to use the Services; we do not knowingly collect information from anyone under 18. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at hi@plutavia.com.
12. Contact Us
If you have any questions or concerns about our Privacy Policy, please contact us via email at hi@plutavia.com.