Privacy Policy

Our mission is to serve people and teams doing great things. Protecting the privacy of individuals and organizations is critical to that mission.

This policy describes how Plot Technologies Inc. ("Plot", "the product", "the service", our", "us" or "we") respects and protects the privacy of those who access our website, plot.day, and other sites and products we own and operate ("users").

1. Information we collect

Personal information you provide us directly

We may ask for personal information, such as your:

• Name
• Email
• Company and role
• Payment information

Content you add

You may add content to Plot. Most content you add is private to you. However, Priorities (organizational containers for your activities) can be shared with other users. All content within a shared Priority is visible to its members, unless you mark specific items as private. Private items within a shared Priority are only visible to you.

Extensions, Connections, and integrations

You may optionally install extensions called Twists to extend Plot's functionality, and create Connections to sync data from third-party services. Twists can be provided by Plot, created by yourself, or published by other users. Connections link Plot to a specific account on a third-party service (such as Google Calendar or a project management tool) and sync data on an ongoing basis.

When you install a Twist, you explicitly grant it permission to operate. Twists may access the following categories of your data within Plot: activities, notes, priorities, and user profile information. Third-party Twists run in a sandboxed environment with access only to the tools and permissions they request.

When you create a Connection, you authorize Plot to access specific data from your third-party service account. Connections may receive data via webhooks and push notifications from connected services, meaning data may flow into Plot automatically without you actively triggering it. The data accessed depends on the specific Connection and the scopes you authorize.

Plot stores OAuth authentication tokens for connected third-party services to maintain your Connections. You can revoke access at any time by removing the Connection in your account settings.

You control which Twists you install and which Connections you create, and can remove them at any time. Only Twists and Connections you explicitly authorize have access to your data. We recommend reviewing what a Twist or Connection does and what permissions it requests before installing or authorizing it.

Data from third-party services you authorize

For product functionality, you may authorize Plot to read data from third-party services that manage relevant data such as your calendar events, contacts, tasks, and email. Plot stores copies of this information for processing and fast access.

Connections you create may sync data on an ongoing basis via channels and webhooks. This means third-party services may push data updates to Plot automatically, without you actively triggering each sync.

Additionally, Twists you install may connect to third-party services you authorize, reading and synchronizing data between those services and Plot. The data accessed depends on the specific Twist or Connection and the permissions you grant.

Data retention for Connections and Twists

When you remove a Connection or uninstall a Twist, Plot will stop syncing new data from the associated service. Previously synced data (such as calendar events, tasks, or contacts) will remain in your Plot account unless you explicitly delete it. You can delete individual items or request bulk deletion of synced data by contacting us.

When you disconnect a third-party account that was used by a Connection, the Connection will stop functioning and no new data will be synced. OAuth tokens for the disconnected account will be deleted.

Local-first data storage

Plot uses a local-first architecture, meaning your data is stored on your device and synced to our cloud servers for backup, multi-device sync, and collaboration. This means your data is available to you even when you are offline. When an internet connection is available, your local data is synced with our servers to keep your devices in sync and enable collaboration with others.

Artificial intelligence processing

Plot may use artificial intelligence ("AI") and machine learning technologies to process your data for the purpose of organizing, prioritizing, and surfacing relevant information. When AI features are enabled, your data may be processed by third-party AI service providers who are bound by our data processing agreements.

Some Twists may also use AI to provide their functionality. When a Twist uses AI, this is disclosed before installation. You can opt out of all AI processing via your account settings.

Information we collect automatically

When you visit our website or use our product, we may automatically log the standard data provided by your web browser. That may include your computer’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details.

We may also collect data about the device you’re using to access our website or product. This data may include the device type, operating system, unique device identifiers, device settings, and geo-location data. What we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.

Cookies and web beacons

When you visit our website or use our product, we may send cookies to your device to uniquely identify you. You can control the cookies on your device, including resetting them and/or blocking them. Use of some product features may depend on cookies to operate.

We may also add clear images called web beacons in HTML-based emails to detect when emails are successfully viewed.

2. How we use your information

We use the information we collect to build and operate Plot to best serve you and other users, according to these purposes:

• Providing you with our product: The primary use of any information we collect is to allow operation of the product you are using. This includes operating secure accounts, authentication and authorization, and content storage and retrieval.
• To understand product usage and improve the product: Information we collect automatically is primarily stored in an anonymized form without personally identifiable information. This information allows us to understand patterns in user behaviour so we can continually refine Plot to serve users better. Some of this information may also be associated with your account to support personalizations, such as tips and tricks offered based on your usage.
• Communicating with you about Plot: We use your contact information to send you relevant communications about the product, such as technical, security or administrative matters.
• Promoting engagement with Plot: We may also use information to send you communications to encourage usage of Plot and its features and benefits. You can opt-out of these communications as described below.
• Supporting users: Authorized employees of Plot, with your permission, may access your information as part of a consultation or to help you resolve an issue you are experiencing with the product.
• As required by law: Plot will use or disclose your information to legal authorities only as necessary to comply with the law, enforce our Terms of Use, or protect the security of our product.

Sharing your information

We may share your information with third-party service providers essential to the operation of the product. These service providers are only provided the information required to perform the services required. We carefully review the Privacy Policies and Terms of Service of our third-party service providers to ensure they reflect our commitments to you.

Our third-party service providers include:

• Hosting, storage and data-processing
• Email delivery
• Analytics
• Billing
• AI and machine learning service providers

Ways we do not use your information

Plot does not use any of your information for serving third-party advertisements. We will not sell your information to a third party.

Use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Plot's use of Google data is limited to providing and improving the Service's functionality for you.
• Plot does not use Google data for serving advertisements or for any advertising-related purpose.
• Plot does not allow humans to read your Google data except (a) with your explicit consent, (b) as necessary for security purposes (e.g., investigating abuse), or (c) to comply with applicable law.
• Plot does not transfer Google data to third parties except as necessary to provide or improve the Service, to comply with applicable law, or as part of a merger, acquisition, or asset sale with appropriate data protection obligations.

3. Protecting your information

Plot takes the protection of your information very seriously, applying appropriate safeguards to preserve the security of the information we collect. To protect the privacy and security of information restricted to your account, we take reasonable measures to verify your identity before granting access to your account. You are responsible for maintaining the secrecy of any account passwords and controlling access to any associated accounts given access to your Plot account (e.g. your Google Account used for sign in).

In the event that any information collected by us is compromised by unauthorized access, we will investigate and notify any individuals associated with accounts that were affected. We will also apply additional protections in a reasonable timeframe to prevent further unauthorized access.

We employ measures to preserve the integrity of your data, including regular backups. With electronic records, data loss is a possibility. While we will do everything reasonable to protect and, if necessary, recover your data, it is your responsibility, if necessary, to keep a copy of critical information outside Plot.

4. International transfers of personal information

The personal information we collect is stored and processed in Canada and/or the United States, or where we or our partners, affiliates and third-party providers maintain facilities. By providing us with your personal information, you consent to the disclosure to these overseas third parties.

We will ensure that any transfer of personal information from countries in the European Economic Area (EEA) to countries outside the EEA will be protected by appropriate safeguards, for example by using standard data protection clauses approved by the European Commission, or the use of binding corporate rules or other legally accepted means.

Where we transfer personal information from a non-EEA country to another country, you acknowledge that third parties in other jurisdictions may not be subject to similar data protection laws to the ones in our jurisdiction. There are risks if any such third party engages in any act or practice that would contravene the data privacy laws in our jurisdiction and this might mean that you will not be able to seek redress under our jurisdiction’s privacy laws.

5. Your rights and controlling your personal information

Choice and consent: By providing personal information to us, you consent to us collecting, holding, using and disclosing your personal information in accordance with this privacy policy. If you are under 16 years of age, you must have, and warrant to the extent permitted by law to us, that you have your parent or legal guardian’s permission to access and use the website and they (your parents or guardian) have consented to you providing us with your personal information. You do not have to provide personal information to us, however, if you do not, it may affect your use of this website or the products and/or services offered on or through it.

Information from third parties: If we receive personal information about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person’s consent to provide the personal information to us.

Restrict: You may choose to restrict the collection or use of your personal information. If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by contacting us using the details below. If you ask us to restrict or limit how we process your personal information, we will let you know how the restriction affects your use of our website or products and services.

Access and data portability: You may request details of the personal information that we hold about you. You may request a copy of the personal information we hold about you. Where possible, we will provide this information in CSV format or other easily readable machine format. You may request that we erase the personal information we hold about you at any time. You may also request that we transfer this personal information to another third party.

Account deletion: You can delete your Plot account and associated data at any time by visiting our account deletion page. When you request account deletion, your account will be immediately deactivated and you will no longer be able to sign in. Your data will be retained for 14 days to allow for account recovery, after which it will be permanently deleted. Some data may be retained for legal or accounting purposes (such as transaction records). To recover your account within the 14-day period, please contact us at privacy@plot.day.

Correction: If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us using the details below. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading or out of date.

Notification of data breaches: We will comply with laws applicable to us in respect of any data breach.

Complaints: If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. You also have the right to contact a regulatory body or data protection authority in relation to your complaint.

Unsubscribe: To unsubscribe from our e-mail database or opt-out of communications (including marketing communications), please contact us using the details below or opt-out using the opt-out facilities provided in the communication.

6. Business transfers

If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include data among the assets transferred to any parties who acquire us. You acknowledge that such transfers may occur, and that any parties who acquire us may continue to use your personal information according to this policy.

7. Children’s privacy

Plot does not knowingly collect or solicit personal information from children under the age of 13 and the product and its content are not directed at children under the age of 13. In the event that we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 13, please contact us using the information below.

8. Limits of our policy

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

9. Changes to this policy

At our discretion, we may change our privacy policy to reflect current acceptable practices. We will take reasonable steps to let users know about changes via our website. Your continued use of this site after any changes to this policy will be regarded as acceptance of our practices around privacy and personal information.

If we make a significant change to this privacy policy, for example changing a lawful basis on which we process your personal information, we will ask you to re-consent to the amended privacy policy.

10. How to contact us

If you have any questions about this Privacy Policy or wish to make a request, please contact us at:

Plot Technologies Inc Data Controller
privacy@plot.day

This policy is effective as of March 8, 2026.