Account Information

When you create an account, we collect your name, email address, and password (hashed). If you sign in with Google, we receive your name, email, and profile picture from Google.

Calendar Data

If you connect your Google Calendar, we access your calendar events in read-only mode to display them within Plinth. We never permanently delete calendar events. If you also connect the write connection, the agent can mark an entry as cancelled or restore it, only after you confirm each change. We do not share your calendar data with third parties except as needed to provide the service.

Adding and updating events is a separate connection you opt into, described below and in section 3. It is managed on our behalf by Composio, and it can only write to calendars mapped in your workspace or your own primary calendar.

Connected Apps

In Settings > Connectors you can choose to connect Gmail, Google Drive, Google Calendar, Notion, Asana, Slack and Dropbox. Each connection is yours alone: nobody else in your workspace can see or use it. Each one is made through Composio, which holds the access token for that app on your behalf; Plinth stores only a reference to the connection, the name or email address of the account it is connected as when the app reports one, the permissions the app says it granted, and when we last checked it.

The permission you grant is the one each app's own consent screen shows you, and for several of these apps it is broad:

• Gmail - read, compose, send and permanently delete email in your mailbox, plus your contacts and basic profile.
• Google Drive - see, edit, create and delete every file in your Drive.
• Google Calendar - see and edit every calendar on your Google account.
• Notion - the pages and databases you choose to share during connection.
• Asana - full access to everything you can see in Asana.
• Slack - a user token that can read your channels and direct messages, search, and post messages as you.
• Dropbox - read and write your files, sharing, file requests, contacts and account details.

Those are grants, and the app enforces them. What bounds what Plinth and its agent actually do with them is Plinth's own tool policy: the agent can draft but never send (no email is sent and no Slack message is posted on your behalf), nothing is permanently deleted in any connected app (some actions can move an item to the app's own trash or archive, where it can be recovered), and calendar entries are written only to the calendars described above, each after you confirm it. You can disconnect any app at any time in Settings > Connectors, or revoke it in the app's own account settings.

Usage Data

We collect usage data (pages visited, features used, clicks and typed interactions) to improve the service. This is processed by Vercel Analytics and by PostHog. PostHog data is linked to your account - we send your user ID, name, email address and workspace to it. PostHog also records replays of your sessions in the product. Text is masked in those replays - both the values you type into form fields and the text shown on screen - so a replay shows how the product was used rather than what you wrote. Browser console output is captured unmasked alongside it. Session replays are stored in the United States and deleted after 30 days.

• To provide and maintain the Plinth service
• To authenticate your identity and manage your account
• To display your calendar events within the application
• To let Plinth and its agent read and act on the apps you connect, within the limits described in section 1
• To send transactional emails (password resets, account confirmations)
• To improve the service based on identified product usage

Plinth's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Reading your calendar uses read-only access. Adding, updating, cancelling or restoring events is a separate connection you opt into, managed by Composio, and it writes only to calendars mapped in your workspace: an artist's calendar, your workspace calendar, or your own primary calendar. Plinth never permanently deletes calendar events; a cancelled entry can be restored.
• Gmail and Google Drive, if you connect them, are managed by Composio in the same way. Plinth's agent drafts email and never sends it, and never permanently deletes mail or files. Some actions can move a message or file to Gmail's or Drive's own trash, where it can be recovered.
• We do not use Google data for advertising purposes
• We never sell Google user data. We share it only with the service providers listed in section 6, and only to operate features you have connected - for the calendar write connection, Gmail and Google Drive, that is Composio holding the OAuth token on your behalf.
• Users can revoke access at any time via their Google Account permissions

Your data is stored securely using Supabase (hosted on AWS) with encryption at rest and in transit. We implement row-level security policies to ensure users can only access data within their own workspace. Access to production systems is restricted to authorised personnel.

We retain your data for as long as your account is active. Deleted items are soft-deleted and retained for 30 days before permanent removal. You may request full account deletion at any time by contacting us - we will delete all associated data within 30 days of your request.

We use the following third-party services to operate Plinth:

• Supabase - database, authentication, and storage
• Vercel - hosting and analytics
• Sentry - error tracking
• Google - OAuth authentication and Calendar integration
• Composio (Sampark Inc, United States) - manages every connection you make in Settings > Connectors: Gmail, Google Drive, Google Calendar, Notion, Asana, Slack and Dropbox. For each app you connect, Composio holds the access token on your behalf and carries out the actions Plinth requests; Plinth stores a reference to the connection, the account name or email it is connected as, the permissions the app reports it granted, and when we last checked it.
• PostHog (United States) - product analytics and session replay. Receives your user ID, name, email and workspace, and stores text-masked session replays for 30 days.
• Anthropic (United States) - the AI assistant features in Plinth. Where they are used, the project's content is processed by Anthropic to generate a response. That context includes material written by other members of your workspace - comments, thread messages, documents and their names - not only what the person using the assistant typed.
• Soundcharts (Soundcharts SAS, France) - streaming and audience statistics shown on artist pages. Receives the names of the artists you look up.
• Stripe - subscription billing and payment processing.
• Resend - transactional email delivery.

Each service processes data in accordance with their own privacy policies.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Revoke third-party access (e.g. Google Calendar) at any time
• Export your data in a portable format

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date.

If you have questions about this Privacy Policy, please contact us at support@plinthmusic.com.