Privacy Policy

This policy covers Plot Pulse — the site at pulse.useplot.com, the phone calls we place, and the text messages we send.

The short version

• We do not record your call. No audio is stored by us.
• We do not keep a transcript. We keep the short written captures the AI agent makes of the substance of what you said, and — if you offer any — what you tell us about Plot itself at the end of the call. Nothing else of the conversation is written down.
• We do not create a voiceprint or any other biometric identifier, and we do not use your voice to identify you.
• We do not use anything you say to train, tune, or evaluate AI models — ours or anyone else’s — and our providers are not permitted to either.
• We do not sell your personal information and we do not share it for advertising. Not for money, not for anything else.
• Nothing follows you off this site. No ad networks, no data brokers, no tracking pixels, and no analytics code in your browser at all. We do count how the product is working — calls that connected, summaries that generated — but we count it from our own servers, and the service that does it never learns who you are: not your number, not your IP address, not a word you said. The site sets exactly two cookies, both strictly necessary, both named below.
• A creator never sees your phone number, and never sees anyone’s individual answers.

The rest of this page is the detail behind those seven lines.

1. Who is responsible

Plot Technologies Inc. (“Plot Technologies”, “we”, “us”), of Catalyst Commons, 137 Glasgow St., Suite 210, Kitchener, Ontario N2G 4X8, Canada, operates Plot Pulse and is accountable for the personal information described here — the “business” under California law, the “controller” under other US state laws, and the organization accountable for it under PIPEDA and Quebec’s Law 25.

Person in charge of the protection of personal information (named here as Quebec’s Law 25 requires):

Kristopher Braun, Privacy Officer
Plot Technologies Inc., Catalyst Commons, 137 Glasgow St., Suite 210, Kitchener, Ontario N2G 4X8, Canada
privacy@useplot.com

2. What we collect

• Your phone number — you type it into the site. We use it to place the call you asked for, to text you the plot link and sign-in codes, and to recognise you when you come back.
• Call details — collected automatically when we call: the number dialled, the times, the duration, whether it rang, was answered, completed or failed, and whether the confirmation code matched. We need these to run the call, to let you retry a failed one, and to work out why calls break.
• What you say, as text — during the call the AI agent writes short captures of the substance of your answers. These are the material the summary is built from, and they are not a transcript.
• What you tell us about Plot itself — at the end of every call the agent asks whether anything about the conversation could have been better. If you answer, we keep what you said as written text on the record of that call. It is feedback for us, not part of the plot: it does not go into the plot, the summary, or anything the plot’s creator sees, and it is deleted with the call record on the same schedule as everything else below.
• Plot configuration — the name, public description, brief, opening question, and topics the agent writes during the creator’s call.
• The summary — generated from the captures, and read by the creator and by respondents who have completed an interview.
• Sign-in codes — generated when you ask to sign in, stored only as a keyed hash and never in readable form, and deleted after ten minutes.
• A record that you agreed to be called — your number, the time, and the exact wording shown to you, written before the call is placed. If we cannot record it, we do not make the call.
• Whether you have opted out of texts — just your number on a do-not-text list, if you have ever replied STOP.
• Two cookies — described in section 6.
• Anything you email us — kept so we can answer you.

What we never ask for: your name, email address, postal address, date of birth, payment details, or any government identifier. If you volunteer one during a call it may end up in a capture — please don’t.

Your voice. It travels over the phone network and is processed live so the AI can hear you and answer. We do not store it. Section 5 covers what our providers do with it along the way.

3. What we use it for

Only this:

• placing the call you asked for and conducting the interview;
• texting you your plot link, your sign-in codes, and follow-ups about a plot you took part in;
• building and updating that plot’s summary;
• keeping you signed in;
• keeping the service secure, preventing abuse, and diagnosing faults;
• complying with the law and enforcing our Terms.

That is the complete list. We do not profile you and we do not build advertising audiences. No automated decision is made about you that produces a legal or similarly significant effect. The AI conducts the interview and writes the summary; it does not decide anything about you.

4. What the creator of a plot can see

This matters enough to get its own section.

A creator sees: the plot’s summary, and how many people have responded.

A creator does not see: your phone number, your individual answers, which parts of the summary were yours, whether any particular person took part, or when.

The summary is generated under instructions never to attribute a statement to an individual, and the model that writes it is given respondents as plain numbers — never phone numbers. The limit is what you say. If you name yourself, or say something only you could have said, it can appear in the summary. We cannot prevent that.

5. Who else touches it

Six providers, each getting only what it needs. None may use your information for its own purposes, and none may use it to train AI models. All six process it in the United States.

• Cloudflare, Inc. — hosts the site and stores everything we keep: phone numbers, plot configuration, captures, summaries, and call records.
• Telnyx LLC — places the phone calls and sends the texts, so it receives your number and the time and length of each call. Like every telephone carrier it keeps call detail records because it is required to. That is metadata, not content.
• LiveKit, Inc. — carries the live call audio between you and the AI agent. We have turned off transcript and audio capture in its tooling; what we keep from LiveKit is operational only — timings, errors, and whether a step succeeded.
• OpenAI, L.L.C. — runs the voice AI. It processes the call audio in real time to hold the conversation. We use its paid API, under terms that prohibit using our data to train OpenAI’s models and limit retention to short-term abuse monitoring.
• Google LLC — writes the summary. It receives the captures and the brief when a summary is generated, and never the call audio. We use a paid Gemini API tier, under terms that prohibit using our data to train Google’s models and limit retention to short-term abuse monitoring.
• PostHog, Inc. — counts whether the product is working: calls placed, calls that connected, plots created, summaries generated, and errors. It is how we find out that a call failed without having to ask you. Three things it never receives. Your phone number — where an event belongs to a person it carries a scrambled stand-in computed from the number with a key only our own servers hold, and it is the stand-in that is stored, never the number. Your IP address or your device — our servers send these events directly, so your browser never contacts PostHog at all. Anything anyone said or wrote — no plot wording, no answers, no summaries, no codes; where we count how much someone said, we count characters, not words. When a page breaks in your browser we send that too — what broke, where, and the technical trace — with no person attached to it at all.

Beyond those six, we may disclose personal information where the law compels it — a warrant, subpoena, or court order — to establish or defend a legal claim, or to protect someone’s safety in an emergency. Where we can lawfully tell you, we will. If Plot Technologies is ever merged or acquired, information may transfer as part of that, still subject to this policy.

There is no advertising network and no data broker in this picture. PostHog is a product-analytics service, not an advertising one: nothing it receives is used to target you, and none of it is ever sold.

6. Cookies and tracking

You are not reading this inside Plot Pulse. This page is served from useplot.com, the marketing site shared by all of Plot’s products, and it is a different application from Plot Pulse. This page loads its typeface from Google Fonts, runs a PostHog analytics script in your browser, and sets a first-party plot_attr cookie recording which campaign brought you here. None of those run inside Plot Pulse, and everything below describes Plot Pulse.

Plot Pulse sets two cookies. Both strictly necessary, both first-party, both HttpOnly — page JavaScript cannot read either.

• pulse_session — an opaque signed token showing you control your phone number. Ninety days.
• pulse_call — the identifiers for a call in progress and the confirmation code shown on screen, so the code survives a page refresh. Six hours, and cleared when the call ends.

In Plot Pulse: no analytics cookies, no advertising cookies, no third-party cookies, no tracking pixels. Because both cookies are strictly necessary to do the thing you asked for, the app shows no cookie banner.

No analytics code runs in your browser inside Plot Pulse. There is no measurement script on any page of the app — not ours, not anyone’s. The counting described in section 5 happens on our servers, after the fact, which is why it can be done without your browser ever contacting the service that does it. The font Plot Pulse uses is served from pulse.useplot.com rather than from Google, so loading a page of the app does not tell Google you were there. The one piece of code there that is not ours is Cloudflare’s bot check, on the three forms that would otherwise let a script make us phone strangers; it exists to tell a person from a program, and Cloudflare already serves every page.

We do not act on Do Not Track or Global Privacy Control signals because there is nothing for them to turn off: nothing here follows you to another site, nobody is building a profile of you to target or sell, and there is no sale or sharing to opt out of.

7. Your information is processed in the United States

Plot Technologies is Canadian. Our providers are American, and personal information about you — including if you live in Canada — is stored and processed in the United States.

That means it is subject to US law, including lawful access by US courts and government agencies, and that the protections available there may differ from those in your own province or state. We have assessed this and consider it acceptable for what is involved: a phone number and what you chose to say in a survey, with no recording, no transcript, and no sensitive categories asked for. If you are in Quebec, this paragraph is the disclosure of a transfer outside Quebec that Law 25 requires.

If you would rather your information were not processed in the United States, do not enter your number. There is currently no way to use Plot Pulse without it.

8. How long we keep it

• Phone numbers, plot configuration, captures, and summaries — while the plot is active, then 12 months after its last activity, or until you ask us to delete it, whichever comes first.
• Call records (times, status, duration) — 12 months.
• Sign-in codes — ten minutes, or until used.
• Email you send us — twenty-four months.

Three things outlive the rest, and we would rather say so plainly

Consent records — 3 years. When you ask us to call you, we keep a record that you did: your number, the time, and the exact wording you agreed to. That is the window in which a complaint about an unwanted call can be brought, and this record exists to answer one. It survives the deletion of the plot it was given on, and it survives you deleting your plot yourself. It is not a list we call from — nothing is ever sent on the strength of a row in it.

Opt-outs — kept indefinitely. If you reply STOP, we keep your number on a do-not-text list and never remove it on a timer. An opt-out we forgot would be an opt-out we broke. If you later ask us to call you again, that fresh request replaces it.

Product-analytics events — not on a deletion timer. The counts described in section 5 are held by PostHog and are not swept on the schedule above. We would rather tell you that than imply a tidier window than we have. What it amounts to is set by what those events are: no phone number, no IP address, and nothing anyone said — a scrambled stand-in, a count, and an outcome. If you ask us to delete your information, we delete the events under your stand-in along with everything else.

Everything else goes. Deleting a plot deletes its captures and its summary with it, and a creator can delete their own plot at any time from its page. Backups roll off within thirty days. Records held by our providers — Telnyx’s call detail records, for instance — follow their retention schedules, which we do not control.

9. Your rights

Wherever you are, you can ask us to show you what we hold about you, correct it, or delete it. Email privacy@useplot.com and tell us the phone number involved.

That number is your identity here, so we verify a request by texting a code to it. We will not ask you for identity documents — demanding a passport to verify a phone number would collect far more than it protects. We respond within thirty days.

If you are in Canada

Under PIPEDA, and under the provincial laws that stand in its place in Quebec, Alberta, and British Columbia, you may access and correct your personal information and withdraw your consent at any time. Withdrawing consent means we stop calling and texting you; it does not unpick an interview already folded into a summary.

Complain to us first. If we do not resolve it, you may complain to the Office of the Privacy Commissioner of Canada. If you are in Quebec you also have the right to data portability, the right to be informed about automated processing, and recourse to the Commission d’accès à l’information du Québec. In Alberta or British Columbia, to your provincial Information and Privacy Commissioner.

If you are in the United States

Depending on your state — California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and a growing list of others — you may have the right to know what we collect and why, to obtain a copy, to correct it, to delete it, to opt out of its sale, of sharing for cross-context behavioural advertising, and of profiling, and not to be treated worse for exercising any of that.

We make most of those opt-outs moot by not doing the underlying things: we do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not profile, and we have not done any of them in the preceding twelve months. Because we do not knowingly collect information from anyone under 18, we have not sold or shared the personal information of minors.

You may use an authorized agent. If we refuse a request we will tell you why, and you may appeal by replying to our decision; if we deny the appeal you may complain to your state Attorney General.

10. Security

What we actually do:

• Sign-in codes are stored as a keyed hash, never in readable form, and expire in ten minutes after at most five attempts.
• Session tokens are signed with HMAC-SHA-256, verified in constant time, and carried in HttpOnly, Secure cookies that page JavaScript cannot read.
• A plot’s URL carries about 128 bits of randomness, so it cannot be guessed, and an unknown URL returns exactly the same “not found” as one that never existed.
• The confirmation code stops a call to a mistyped number from becoming an interview, and the AI agent is never told the code it should expect.
• Traffic is encrypted in transit, and provider webhooks are accepted only with a verified cryptographic signature.

No system is perfectly secure. If we suffer a breach creating a real risk of significant harm, we will notify you and the relevant regulators as PIPEDA, Law 25, and US state breach-notification laws require.

11. Children

Plot Pulse is for adults; you must be 18. We do not knowingly collect personal information from anyone younger, and we delete it if we learn we have. If you believe a minor has used Plot Pulse, write to privacy@useplot.com.

12. Changes

We will post any change here with a new effective date. If a change is material we will also make it obvious on the site and, where we have a number for you, text you. We will not start using information we already hold for a materially different purpose without asking you first.

13. Contact

Kristopher Braun, Privacy Officer
Plot Technologies Inc.
Catalyst Commons, 137 Glasgow St., Suite 210, Kitchener, Ontario N2G 4X8, Canada
privacy@useplot.com

Our Terms of Service cover the rest of the relationship.