Privacy Policy (US)

1. Categories and Examples of Personal Information Collected

The information we gather about you depends on the context. Generally, it is any information about you that can personally identify you either alone or in combination with other information. We collect certain personal information about you when you:1.1.1. create or manage an account, subscribe to, access, or use our Services;1.1.2. communicate with us, such as by submitting inquiries, feedback, or support requests by email, post, or phone; and/or1.1.3. subscribe to or interact with our marketing communications. We may also collect personal information from third parties as described below. The specific types of information we collect and the situations in which they are collected include: a) Email Address: collected when you: create an account or subscribe to our Services; communicate with us by email or contact form; or opt in to receive marketing communications or newsletters. b) Other Identifiers (such as your name, postal address, or phone number): collected when you voluntarily provide this information, for example when you: contact our support team or request assistance; submit a feedback form or inquiry; or include such information in your correspondence. c) Customer Records Information: collected when you: voluntarily complete forms, quizzes, or surveys designed to personalize your experience; provide demographic details (such as age, gender, or preferences) in your account settings or profile; or participate in promotional or feedback programs within the Services. d) Device and Internet Activity Information: automatically collected when you use or interact with our Services. This may include your device type, operating system, browser type, IP address, device identifiers, advertising ID, and usage data (such as features accessed, session duration, and interactions with content).We collect this information through cookies, SDKs, analytics tools, and similar technologies to maintain, secure, and improve the Services. e) Inputs and Generated Content (as defined in our Terms of Service): collected when you actively engage with AI-powered features by entering Inputs or otherwise interacting with the Services. We retain your Inputs and Generated Content for as long as your account remains active to allow you to resume previous sessions seamlessly. If you delete your Inputs or close your account, we will delete such data except where retention is reasonably necessary: (a) to comply with legal obligations; (b) to enforce agreements or resolve disputes; or(c) to meet the requirements of third-party AI model providers.You may request deletion of your Inputs or Generated Content at any time by contacting support@plurius.ai. f) Commercial Information: includes records of Services purchased, obtained, or considered, or other purchasing or consumption histories or tendencies.We collect this information when you subscribe to paid Services, manage your subscription, or interact with premium features through third-party payment platforms.This information may include your subscription type, transaction date and time, and renewal status. We do not collect or store full credit card details. g) Inferences: includes inferences drawn from the information described above to create a profile about your preferences, characteristics, or behaviors.We may generate these inferences automatically to personalize your user experience - for example, by suggesting relevant features, improving responses generated by AI models, or adjusting interface language or content display based on your past interactions.These inferences are not used for profiling in ways that produce legal or similarly significant effects. 1.2. From time to time, we may receive personal information about you from third-party sources, including: a) Google Inc. in case of Google Sign-In: when you use the “Sign in with Google” feature to access our Services, we receive personal information from your Google account, which may include your name, email address, and profile picture. You can manage what information is shared through your Google account settings. Google will also provide detailed privacy information during the Sign in with Google process. b) Apple Inc. in case of Apple Sign-In: when you use the Sign in with Apple feature to download our mobile application and start using our Services, we receive personal information from your Apple ID account, which may include your name and email address. You have the option to share your actual email address or an anonymous email address that utilizes Appleʼs private email relay service. Apple will provide detailed privacy information during the Sign in with Apple process. c) Advertising, Analytics, and Strategic Partners: we may receive data from advertising networks, analytics providers, and other business partners. This data may include mobile advertising identifiers, hashed email addresses, phone numbers, cookie identifiers, and insights regarding your activity on external websites or mobile apps. We use this information to better understand your interests and tailor the Service accordingly. d) Payment Processors: when you make a payment through the Services, you provide your financial details (e.g., credit card number) directly to licensed payment processors (such as Stripe). While we do not collect or store full credit card numbers, we may receive limited payment-related information such as the transaction date, time, amount, and payment method type. e) Other Sources: we may obtain additional personal information from our vendors engaged in facilitating or providing Services, publicly available sources, third-party data providers, or other sources as permitted or required by applicable law. 1.3. No Sensitive Personal Information: we do not knowingly request, collect or process special categories of personal information (including “Sensitive Personal Information” as defined under Cal. Civ. Code §1798.140(ae) such as your government identifiers, financial account logins, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, genetic or biometric data, or health-related information and we explicitly request you NOT to include such data into your Inputs. However, in case you voluntarily include such information into your Inputs when interacting with our AI-powered Services, this information will be automatically transmitted to and processed by Third-Party AI model providers solely to generate the requested Output. This means your sensitive personal information will not be accessed, used, or stored for any purposes other than to provide the Services you request, unless otherwise is required by law. 1.4. No Minors Data: we do not collect personal information from individuals under the age of 13. If we become aware that we have collected such information as a result of false or misleading information provided to us, we will promptly delete the data and suspend access to the Services pending further investigation. If we verify that the Services are being used by an individual under the age of 13, we will permanently disable access.

2. Business or Commercial Purposes for Collection. Sharing of personal information.

We collect and use your personal information for the following purposes:

• To provide the Services: including account creation, authentication, payment processing, subscriptions, and customer support.
• To improve and personalize the Services: such as analysing usage trends, customizing content, and enhancing features.
• To promote our Services: to use your information to instruct our partners vendors (third-party platforms such as MMPs, social networks or search engines) to identify audiences on third-party platforms with user characteristics similar to yours.
• To communicate with you: including responding to inquiries, providing updates, sending administrative messages.
• To send you marketing communications. You may opt out of receiving these communications by clicking a link in the footer of each marketing communication received.
• To comply with legal obligations: such as tax, accounting, fraud prevention, and lawful requests from government authorities.
• To protect rights and safety: including enforcement of our Terms of Service, detection of fraudulent or unlawful activity, and protection of our users, property, and legal rights.

We may share your personal information with:

• Companies that are owned by, own, or are jointly-owned with us. These partner organizations will use the information in ways that align with this Privacy Policy, ensuring that your privacy is respected and protected across all our affiliated services within our group.
• Our service providers and vendors: who assist us in operating, maintaining, and improving the Services (e.g., cloud hosting, analytics providers, IT support, payment processors such as Stripe).
• Advertising and analytics partners: subject to your consent where required, to provide personalized ads and measure their effectiveness as described in Section 4 “Cookies and other Tracking Technologies” below.
• Business transfers: in the event of a merger, acquisition, or sale of assets.
• Legal and compliance purposes: when required by law, court order, subpoena, or government request, or to establish, exercise, or defend our legal rights.

The table below provides a summary of the purposes for processing your personal information, the corresponding legal bases, and the third parties with whom information may be shared to achieve each processing purpose.

3. Summary Table of Processing Purposes, Legal Bases, and Service Providers

4. Cookies and other Tracking Technologies

When you visit or interact with our website or Services, we and our service providers may use cookies, web beacons, SDKs, pixels, and similar tracking technologies (“cookies”) to collect certain information automatically. Some of this information may be considered personal information under the relevant privacy laws. Cookies are small text files placed on your device that allow us or our partners to recognize your browser or device and remember certain information. They help operate the website efficiently, understand usage patterns, personalize content, and support marketing efforts. Web beacons (also called “pixels”) are small, transparent images embedded in pages or emails that help us understand whether you have viewed certain content. For example, we may use web beacons in our marketing emails to measure open and click rates and improve our communication effectiveness. Types of Cookies We Use (1) Session and persistent cookies: Session cookies last as long as your online session and disappear from your device when you close your browser. Persistent cookies stay on your device after you close your browser and last for a time specified in the cookie (unless deleted by you earlier). (2) First-party and third-party cookies: First party cookies are set by the website. Only we can read them. Third-party cookies are set by someone other than our website. You may adjust your browser settings to prevent the receipt of third-party cookies, or to provide notification whenever such third-party cookies are sent to you. While the cookies that we use may change from time to time as we improve and update the website, they serve the following main purposes:

• Strictly necessary cookies are essential for the operation of the website, so that you can navigate it and use its features. Without them some parts of the website will not work.
• Functionality cookies allow the website to remember choices you make to provide better functionality and personalized features. These cookies may be set by us or by third-party services we have added to our pages. If you do not allow them then some or all of these services may not function properly.
• Analytics and performance cookies help us improve the performance of the website based on the information about how the website is used, for example, page views and traffic sources.
• Advertising and marketing cookies may be used to build a profile of your interests and show you relevant adverts on other websites. These cookies can be set through the website by us or our partners.

Opt-out from Third-party Cookies From time to time we may also use third party tools such as:

• Google Analytics and Google Ads – Google Privacy Policy and Ad Settings;
• Facebook (Meta) Pixel and Custom Audiences – Meta Privacy Policy;
• Apple App Analytics – Apple Privacy Policy;
• Firebase Analytics – Firebase Privacy Policy.

These partners may collect or receive information from your device and use it to provide us measurement services and targeted advertising. To opt out of these cookies, you can: (i) delete the cookies installed in the past and manage preferences for cookies in your browser settings. How to manage cookies in the most popular browsers: Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac Google Chrome: https://support.google.com/chrome/answer/95647?hl=en Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies Edge: https://support.microsoft.com/en-gb/help/4027947/microsoft-edge-delete-cookies (ii) manage preferences for third-party cookies via the tools provided by those parties. For example, you can manage Googleʼs cookies by visiting Google Ad Settings or installing Google Analytics Opt-out Browser Add-on. You may also follow the instructions provided by the Network Advertising Initiative (US), the Digital Advertising Alliance (US) or other similar services. Such initiatives allow you to select tracking preferences for most of the advertising tools. (iii) opt out of third-party advertising or analytics cookies at any time by adjusting your preferences in the banner or through the “Cookie Settings” link available in the footer of our website. When you disable these categories of cookies: (a) we will stop allowing third-party advertising or analytics cookies to collect your information for cross-context behavioral advertising; and (b) we will record and maintain your preference for at least twelve (12) months, after which we may ask you to reconfirm your choice. If your browser or device supports the Global Privacy Control (GPC) signal, we will also treat such signals as a valid request to opt out of sale or sharing of your personal information. Please note that: (a) opting out of advertising or analytics cookies does not affect cookies that are strictly necessary for the operation or security of the Website; (b) if you block or delete cookies in your browser settings, this may mean that the Website preferences will be lost and that you might not be able to access or use some of its features.

5. Where we process and transfer your information

We host and process your information in the USA. We may transfer personal data to the European Economic Area (EEA) as necessary for the purposes of processing, in which case we will take steps to ensure that the recipient is bound by contractual obligations, including E.U. Standard Contractual Clauses, and additional safeguards to protect your personal information.

6. How we protect your information

We are committed to protecting your information through robust technical and organizational measures. Our security framework is designed to protect your personal information from unauthorized access, use, disclosure, copying, modification, destruction, and accidental loss or misuse. We implemented industry-standard security controls, including but not limited to: Access Controls: we enforce strict access controls to ensure that only authorized personnel and contractors can access your information, based on the principle of least privilege. Data Encryption: to prevent unauthorized access, tampering, or interception of your personal information, we employ strong encryption mechanisms: (i) in transit: we utilize 256-bit SSL/TLS 1.2 encryption to secure data while it is transmitted from us to you; (ii) at rest: all data stored within our infrastructure is encrypted using AES-256 industry standards, ensuring an additional layer of protection; (ii) backups: regular encrypted backups are maintained to ensure data availability and integrity in the event of an incident. Regular Security Audits: we conduct regular penetration testing, vulnerability assessments, and security audits to proactively identify and mitigate potential risks. Antivirus and Intrusion Prevention Systems (IPS): deployed to monitor and prevent unauthorized access and potential threats in real-time. Incident Response: we have established protocols to promptly address any suspected data breaches and will notify you and applicable regulators within legally required timeframes if a breach occurs.

7. What are your rights and choices?

If you are a resident of California or another U.S. state with consumer data protection laws (including the California Consumer Privacy Act as amended by the California Privacy Rights Act, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, and the Utah Consumer Privacy Act), you may have certain rights regarding your personal information.These rights are subject to verification and may be limited or declined as permitted by law. Your rights may include:

• Access / Right to Know: You may request confirmation as to whether we process your personal information, access to your personal information, and a copy of that information. Where required, you may also request a list of categories of personal information we disclosed to third parties for business purposes and the categories of third parties to whom it was disclosed.
• Correction (Rectification): You may request that we correct inaccuracies in your personal information.
• Deletion (Erasure): You may request that we delete your personal information. Please note that we may need to retain certain information as permitted by law (e.g., for legal compliance, accounting, or to protect our rights in legal proceedings).
• Opt-Out of Sale or Sharing: We do not sell personal information for monetary value. However, some disclosures for advertising or analytics may constitute a “sale” or “sharing” under California law. You may request that we not “sell” or “share” your personal information, including for targeted advertising or profiling purposes, as defined under applicable laws. You can exercise this right as described in Section 4 above.
• Limit Use of Sensitive Personal Information: If you have submitted Sensitive Personal Information (for example, as part of your Inputs), you may request that we limit its use or disclosure to what is necessary to provide or improve our Services.
• Withdraw Consent: Where we rely on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.
• Non-Discrimination: You have the right not to be discriminated against for exercising your privacy rights.

Authorized Agents: Under certain state laws, you may designate an authorized agent to submit a request on your behalf. We may require the agent to provide proof of authorization, and we may request additional information from you to verify your identity. Appeals: In states where applicable (e.g., Virginia, Colorado, Connecticut), if we deny your request, you may appeal our decision by contacting support@plurius.ai with the subject line “Privacy Appeal.”If your appeal is denied, you may lodge a complaint with your state attorney general. Submitting a Request: If you wish to exercise any of these rights, please contact us at: support@plurius.ai. We will confirm receipt of your request and respond within the timeframes required by law — generally within 45 days (extendable by an additional 45 days where permitted). Before fulfilling your request, we will verify your identity using information you provide and data already associated with your account.If we cannot verify your identity, we may be unable to process your request for security and fraud-prevention reasons. All verified requests are processed free of charge unless they are manifestly unfounded or excessive.

8. How long do we keep your information

We keep your information for as long as it is necessary for the purposes outlined in section 2 above. We may retain your information if required to do so by law or upon an order of a state authority.

9. Links to third-party resources

Our Services may contain links (including those embedded into the ads distributed via our Services) to third-party resources that are not administered by us and are not governed by this Privacy Policy. We encourage you to familiarize yourself with the privacy policies and security practices of the linked third-party websites before providing them with any personal information.

10. Changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or to address feedback received from our customers. Any changes will be published on this page, and we encourage you to review it regularly to stay informed about how we protect your information. When we post changes, we revise the "Last Updated" date at the top of this policy. If we make any material changes in the way we collect, use, or share your information, we will notify you by prominently emailing you, and if required by applicable law, we will request your consent for such changes.

11. Contact Information

If you have questions or comments regarding this Privacy Policy and our privacy practices, or you have any requests to exercise your legal rights, please contact us at support@plurius.ai.