1. Scope
This Privacy Policy applies to the websites, applications, APIs, AI agents, support channels, and related services operated by Pluto API. It does not govern third-party websites or services that have their own privacy policies.
2. Information we collect
Information you provide
- account details such as name, email address, and organization;
- billing contact and transaction information;
- prompts, source files, repository metadata, task instructions, and other content submitted to the service;
- integration settings and data you authorize us to access; and
- support requests, feedback, and other communications.
Information collected automatically
- IP address, browser, device, operating system, and approximate location;
- pages viewed, referring pages, clicks, and session information;
- API calls, feature usage, credit usage, errors, and security logs; and
- cookies and similar technologies described in our Cookie Policy.
Information from other sources
If you connect a repository, coding client, or deployment integration, we may receive information from that service or your organization’s administrator as authorized by you.
3. How we use information
We use information to:
- provide, personalize, and operate the service;
- process one-time credit purchases and provide receipts;
- run requested AI models, agents, integrations, and workflows;
- support users and communicate service or security notices;
- monitor reliability, prevent abuse, and protect accounts;
- understand and improve product performance; and
- comply with law and enforce our agreements.
4. Legal bases
Where applicable law requires a legal basis, we process information to perform a contract, pursue legitimate interests such as security and product improvement, comply with legal obligations, and based on consent where requested. You may withdraw consent at any time, without affecting processing that already occurred lawfully.
5. How we share information
We do not sell personal information. We may share it with:
- vendors that provide hosting, analytics, communications, customer support, security, and payment processing;
- AI model and data providers when needed to complete a request you initiate;
- integrations and destinations you direct us to use;
- your organization’s authorized administrators;
- professional advisers, authorities, or other parties when required by law or necessary to protect rights and safety; and
- a buyer or successor in connection with a merger, financing, acquisition, or sale of business assets.
Payment card details are collected and processed by our payment processors. We do not store complete card numbers on our servers.
6. AI and connected services
Requests may be sent to the model provider or integration selected for a workflow. Data handling can vary by provider and plan. Do not submit information you are not authorized to process. Enterprise customers may request additional data-processing terms where available.
7. Cookies and analytics
We use necessary cookies for authentication, preferences, security, and service operation. We may use analytics technologies to understand aggregate product usage. You can control non-essential cookies through the cookie banner where available and through browser settings.
8. Retention
We retain information for as long as needed to provide the service, maintain security and business records, resolve disputes, and meet legal obligations. Retention depends on the type of information, account settings, contractual commitments, and legal requirements. We delete or de-identify information when it is no longer reasonably needed.
9. Security
We use administrative, technical, and physical safeguards designed to protect information. No system is completely secure, so we cannot guarantee absolute security. Contact us promptly if you believe your account or data has been compromised.
10. International transfers
We and our providers may process information in the United States and other countries. Where required, we use recognized transfer mechanisms and contractual safeguards for cross-border transfers.
11. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to appeal certain decisions. You may also unsubscribe from marketing emails using the link in the message. To make a request, email support@plutoapi.dev. We may need to verify your identity.
12. Children
The service is intended for adults and business users. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can address it.
13. Changes to this policy
We may update this policy as our service or legal obligations change. We will post the revised policy and update the date above. We will provide additional notice when required by law.
14. Contact
Privacy questions and rights requests may be sent to support@plutoapi.dev. Our full business contact details are available on the Company page.