Privacy Policy

This policy covers Plot Pulse — the site at plot.team, the phone calls we place, and the text messages we send.

The short version

• We do not record your call. No audio is stored by us.
• We do not keep a transcript. We keep only the short written captures the AI agent makes of the substance of what you said.
• We do not create a voiceprint or any other biometric identifier, and we do not use your voice to identify you.
• We do not use anything you say to train, tune, or evaluate AI models — ours or anyone else’s — and our providers are not permitted to either.
• We do not sell your personal information and we do not share it for advertising. Not for money, not for anything else.
• There is no analytics, no advertising, and no tracking. The site sets exactly two cookies, both strictly necessary, both named below.
• A creator never sees your phone number, and never sees anyone’s individual answers.

The rest of this page is the detail behind those seven lines.

1. Who is responsible

Plot Technologies Inc. (“Plot Technologies”, “we”, “us”), of Catalyst Commons, 137 Glasgow St., Suite 210, Kitchener, Ontario N2G 4X8, Canada, operates Plot Pulse and is accountable for the personal information described here — the “business” under California law, the “controller” under other US state laws, and the organization accountable for it under PIPEDA and Quebec’s Law 25.

Person in charge of the protection of personal information (named here as Quebec’s Law 25 requires):

Kristopher Braun, Privacy Officer
Plot Technologies Inc., Catalyst Commons, 137 Glasgow St., Suite 210, Kitchener, Ontario N2G 4X8, Canada
privacy@plot.team

2. What we collect

• Your phone number — you type it into the site. We use it to place the call you asked for, to text you the plot link and sign-in codes, and to recognise you when you come back.
• Call details — collected automatically when we call: the number dialled, the times, the duration, whether it rang, was answered, completed or failed, and whether the confirmation code matched. We need these to run the call, to let you retry a failed one, and to work out why calls break.
• What you say, as text — during the call the AI agent writes short captures of the substance of your answers. These are the material the summary is built from. They are not a transcript, and they are the only record of the conversation that exists once the call ends.
• Plot configuration — the name, public description, brief, and opening question the agent writes during the creator’s call.
• The summary — generated from the captures, and read by the creator and by respondents who have completed an interview.
• Sign-in codes — generated when you ask to sign in, stored only as a keyed hash and never in readable form, and deleted after ten minutes.
• A record that you agreed to be called — your number, the time, and the exact wording shown to you, written before the call is placed. If we cannot record it, we do not make the call.
• Whether you have opted out of texts — just your number on a do-not-text list, if you have ever replied STOP.
• Two cookies — described in section 6.
• Anything you email us — kept so we can answer you.

What we never ask for: your name, email address, postal address, date of birth, payment details, or any government identifier. If you volunteer one during a call it may end up in a capture — please don’t.

Your voice. It travels over the phone network and is processed live so the AI can hear you and answer. We do not store it. Section 5 covers what our providers do with it along the way.

3. What we use it for

Only this:

• placing the call you asked for and conducting the interview;
• texting you your plot link, your sign-in codes, and follow-ups about a plot you took part in;
• building and updating that plot’s summary;
• keeping you signed in;
• keeping the service secure, preventing abuse, and diagnosing faults;
• complying with the law and enforcing our Terms.

That is the complete list. We do not profile you and we do not build advertising audiences. No automated decision is made about you that produces a legal or similarly significant effect. The AI conducts the interview and writes the summary; it does not decide anything about you.

4. What the creator of a plot can see

This matters enough to get its own section.

A creator sees: the plot’s summary, and how many people have responded.

A creator does not see: your phone number, your individual answers, which parts of the summary were yours, whether any particular person took part, or when.

The summary is generated under instructions never to attribute a statement to an individual, and the model that writes it is given respondents as plain numbers — never phone numbers. The limit is what you say. If you name yourself, or say something only you could have said, it can appear in the summary. We cannot prevent that.

5. Who else touches it

Four providers, each getting only what it needs. None may use your information for its own purposes, and none may use it to train AI models. All four process it in the United States.

• Cloudflare, Inc. — hosts the site and stores everything we keep: phone numbers, plot configuration, captures, summaries, and call records.
• Telnyx LLC — places the phone calls and sends the texts, so it receives your number and the time and length of each call. Like every telephone carrier it keeps call detail records because it is required to. That is metadata, not content.
• LiveKit, Inc. — carries the live call audio between you and the AI agent. We have turned off transcript and audio capture in its tooling; what we keep from LiveKit is operational only — timings, errors, and whether a step succeeded.
• Google LLC — runs the AI. It processes the call audio in real time to hold the conversation, and receives the captures and the brief when a summary is generated. We use a paid Gemini API tier, under terms that prohibit using our data to train Google’s models and limit retention to short-term abuse monitoring.

Beyond those four, we may disclose personal information where the law compels it — a warrant, subpoena, or court order — to establish or defend a legal claim, or to protect someone’s safety in an emergency. Where we can lawfully tell you, we will. If Plot Technologies is ever merged or acquired, information may transfer as part of that, still subject to this policy.

There is no advertising network, no data broker, and no analytics vendor in this picture.

6. Cookies

Two. Both strictly necessary, both first-party, both HttpOnly — page JavaScript cannot read either.

• scuttle_session — an opaque signed token showing you control your phone number. Ninety days.
• scuttle_call — the identifiers for a call in progress and the confirmation code shown on screen, so the code survives a page refresh. Six hours, and cleared when the call ends.

No analytics cookies, no advertising cookies, no third-party cookies, no tracking pixels. Because both cookies are strictly necessary to do the thing you asked for, there is no cookie banner. We do not act on Do Not Track or Global Privacy Control signals because there is nothing for them to turn off: we do not track, and there is no sale or sharing to opt out of.

7. Your information is processed in the United States

Plot Technologies is Canadian. Our providers are American, and personal information about you — including if you live in Canada — is stored and processed in the United States.

That means it is subject to US law, including lawful access by US courts and government agencies, and that the protections available there may differ from those in your own province or state. We have assessed this and consider it acceptable for what is involved: a phone number and what you chose to say in a survey, with no recording, no transcript, and no sensitive categories asked for. If you are in Quebec, this paragraph is the disclosure of a transfer outside Quebec that Law 25 requires.

If you would rather your information were not processed in the United States, do not enter your number. There is currently no way to use Plot Pulse without it.

8. How long we keep it

• Phone numbers, plot configuration, captures, and summaries — while the plot is active, then 12 months after its last activity, or until you ask us to delete it, whichever comes first.
• Call records (times, status, duration) — 12 months.
• Sign-in codes — ten minutes, or until used.
• Email you send us — twenty-four months.

Two things outlive the rest, and we would rather say so plainly

Consent records — 3 years. When you ask us to call you, we keep a record that you did: your number, the time, and the exact wording you agreed to. That is the window in which a complaint about an unwanted call can be brought, and this record exists to answer one. It survives the deletion of the plot it was given on, and it survives you deleting your plot yourself. It is not a list we call from — nothing is ever sent on the strength of a row in it.

Opt-outs — kept indefinitely. If you reply STOP, we keep your number on a do-not-text list and never remove it on a timer. An opt-out we forgot would be an opt-out we broke. If you later ask us to call you again, that fresh request replaces it.

Everything else goes. Deleting a plot deletes its captures and its summary with it, and a creator can delete their own plot at any time from its page. Backups roll off within thirty days. Records held by our providers — Telnyx’s call detail records, for instance — follow their retention schedules, which we do not control.

9. Your rights

Wherever you are, you can ask us to show you what we hold about you, correct it, or delete it. Email privacy@plot.team and tell us the phone number involved.

That number is your identity here, so we verify a request by texting a code to it. We will not ask you for identity documents — demanding a passport to verify a phone number would collect far more than it protects. We respond within thirty days.

If you are in Canada

Under PIPEDA, and under the provincial laws that stand in its place in Quebec, Alberta, and British Columbia, you may access and correct your personal information and withdraw your consent at any time. Withdrawing consent means we stop calling and texting you; it does not unpick an interview already folded into a summary.

Complain to us first. If we do not resolve it, you may complain to the Office of the Privacy Commissioner of Canada. If you are in Quebec you also have the right to data portability, the right to be informed about automated processing, and recourse to the Commission d’accès à l’information du Québec. In Alberta or British Columbia, to your provincial Information and Privacy Commissioner.

If you are in the United States

Depending on your state — California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and a growing list of others — you may have the right to know what we collect and why, to obtain a copy, to correct it, to delete it, to opt out of its sale, of sharing for cross-context behavioural advertising, and of profiling, and not to be treated worse for exercising any of that.

We make most of those opt-outs moot by not doing the underlying things: we do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not profile, and we have not done any of them in the preceding twelve months. Because we do not knowingly collect information from anyone under 18, we have not sold or shared the personal information of minors.

You may use an authorized agent. If we refuse a request we will tell you why, and you may appeal by replying to our decision; if we deny the appeal you may complain to your state Attorney General.

10. Security

What we actually do:

• Sign-in codes are stored as a keyed hash, never in readable form, and expire in ten minutes after at most five attempts.
• Session tokens are signed with HMAC-SHA-256, verified in constant time, and carried in HttpOnly, Secure cookies that page JavaScript cannot read.
• A plot’s URL carries about 128 bits of randomness, so it cannot be guessed, and an unknown URL returns exactly the same “not found” as one that never existed.
• The confirmation code stops a call to a mistyped number from becoming an interview, and the AI agent is never told the code it should expect.
• Traffic is encrypted in transit, and provider webhooks are accepted only with a verified cryptographic signature.

No system is perfectly secure. If we suffer a breach creating a real risk of significant harm, we will notify you and the relevant regulators as PIPEDA, Law 25, and US state breach-notification laws require.

11. Children

Plot Pulse is for adults; you must be 18. We do not knowingly collect personal information from anyone younger, and we delete it if we learn we have. If you believe a minor has used Plot Pulse, write to privacy@plot.team.

12. Changes

We will post any change here with a new effective date. If a change is material we will also make it obvious on the site and, where we have a number for you, text you. We will not start using information we already hold for a materially different purpose without asking you first.

13. Contact

Kristopher Braun, Privacy Officer
Plot Technologies Inc.
Catalyst Commons, 137 Glasgow St., Suite 210, Kitchener, Ontario N2G 4X8, Canada
privacy@plot.team

Our Terms of Service cover the rest of the relationship.