Privacy Policy

Effective Date: February 12, 2025 — Last Updated: February 12, 2025

At Pliant Labs LLC ("Pliant," "Company," "we," "our," or "us"), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your personal information ("Personal Data") when you access or use the PliantAI platform, including all associated websites, applications, features, and services (collectively, the "Service"). By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service. This Privacy Policy should be read in conjunction with our Terms of Service.

1. Personal Data We Collect

We collect Personal Data in several ways when you interact with our Service. The categories of Personal Data we collect depend on how you use the Service.

1.1 Information You Provide Directly

Account Information. When you create an account, we collect your first name, last name, email address, username, date of birth, gender (optional), and password. Your password is stored using industry-standard cryptographic hashing (bcrypt) and is never stored or accessible in plaintext.

Conversation Data. We collect the messages, prompts, and other content you submit to the Service ("Input") and the AI-generated responses you receive ("Output"). This includes text messages, image attachments, file uploads, and voice recordings submitted through the voice chat feature.

Personalization Data. If you choose to personalize your experience, we collect information you provide in your profile and AI settings, including your nickname, personal characteristics, hobbies, AI assistant name, AI gender preference, AI location preferences, AI religion preference, custom training data, voice preferences, response style preferences, bubble color settings, and other appearance and behavior customizations.

Payment Information. When you subscribe to a premium plan, payment processing is handled entirely by Stripe, our third-party payment processor. We do not directly collect, store, or have access to your full credit card number, debit card number, or bank account details. We receive and retain limited transaction information from Stripe, including your Stripe customer ID, subscription ID, plan type, billing cycle, subscription status, payment amount, and transaction timestamps.

Communication Data. When you contact us for support or otherwise communicate with us via email, social media, or other channels, we collect the content of those communications, including your name, email address, and any other information you voluntarily provide.

Two-Factor Authentication Data. If you enable two-factor authentication (2FA), we store the encrypted secret key associated with your authenticator application. We do not store individual 2FA codes.

1.2 Information We Collect Automatically

Device and Browser Information. We automatically collect certain technical information when you access the Service, including your device type, operating system, browser type and version, screen resolution, and language preferences.

IP Address and Location Data. We collect your IP address when you access the Service. We use your IP address for security purposes (such as detecting unauthorized access or suspicious login activity), rate limiting, and to determine your approximate geographic location (city/region level). We do not collect precise GPS location data.

Usage Data. We collect information about how you interact with the Service, including the features you use, the pages you visit, the AI models you select, the frequency and duration of your sessions, timestamps of your interactions, and general usage patterns.

Log Data. Our servers automatically record information about your interactions with the Service, including request URLs, HTTP method, response status codes, referral URLs, and timestamps. Log data is used for debugging, security monitoring, and performance optimization.

Cookies and Session Data. We use session cookies and similar technologies to maintain your authenticated login state, remember your preferences and settings, and ensure the proper functioning of the Service. For detailed information, see Section 7 (Cookies and Similar Technologies) below.

1.3 Information We Receive from Third Parties

Payment Processor. We receive limited information from Stripe related to your subscription status, payment confirmations, and billing events (such as successful charges, failed payments, and subscription cancellations).

2. How We Use Your Personal Data

We use the Personal Data we collect for the following purposes:

• Providing the Service: To operate, maintain, and deliver the core features of PliantAI, including processing your Input, generating AI Output, managing your account, and providing personalized AI interactions based on your preferences and settings.
• Authentication and Security: To verify your identity, maintain your authenticated session, process two-factor authentication, detect and prevent fraud, unauthorized access, and other security threats, and to protect the safety and integrity of the Service and our users.
• Payment Processing: To process subscription payments, manage billing cycles, handle subscription changes and cancellations, and maintain billing records.
• Communication: To respond to your inquiries and support requests, send you transactional notifications (such as account verification emails, password reset emails, subscription confirmations, and suspension notices), and communicate important updates about the Service or these policies.
• Improvement and Development: To analyze usage patterns and trends, identify and fix bugs and technical issues, develop new features and improve existing ones, and conduct internal research and analytics to enhance the Service. If you opt in to model improvement (controlled through your account settings), your conversation data may be used to train and improve our AI models.
• Content Moderation and Safety: To enforce our Terms of Service and content policies, moderate Content for compliance with our policies and applicable law, and ensure the safety of our platform and users.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from government authorities, enforce our legal rights, and resolve disputes.

3. How We Share Your Personal Data

We do not sell your Personal Data. We do not sell, rent, lease, or trade your Personal Data to any third parties for their marketing, advertising, or any other commercial purposes. We share your Personal Data only in the following limited circumstances:

3.1 Service Providers

We share Personal Data with trusted third-party service providers who perform services on our behalf, subject to contractual obligations to protect the confidentiality and security of your data and to use it only for the purposes for which it was disclosed. These service providers include:

• Stripe: For payment processing and subscription management. Stripe processes your payment information in accordance with its own privacy policy.
• Email Service Providers: For sending transactional emails such as account verification, password reset, subscription, and suspension notifications.
• Hosting and Infrastructure Providers: For hosting the Service, storing data, and providing the underlying technical infrastructure.

3.2 Other Users (Group Chats)

If you participate in group chat conversations, your messages, username, and profile information visible within the chat will be accessible to other members of that group conversation. You should exercise care in what information you share in group chats.

3.3 Legal Requirements

We may disclose your Personal Data if we believe in good faith that such disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or enforceable governmental request; (b) enforce our Terms of Service or other agreements, including investigation of potential violations; (c) detect, prevent, or otherwise address fraud, security, or technical issues; or (d) protect the rights, property, or personal safety of Pliant, our users, or the public as required or permitted by law.

3.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, dissolution, sale of assets, or similar transaction involving Pliant Labs LLC, your Personal Data may be transferred to the acquiring entity or successor as part of that transaction. We will notify you via email or prominent notice on the Service of any such change in ownership or control of your Personal Data.

3.5 With Your Consent

We may share your Personal Data with third parties when you have given us explicit consent to do so.

4. Data Retention

We retain your Personal Data for as long as reasonably necessary to fulfill the purposes for which it was collected and to comply with our legal obligations. Specific retention practices include:

• Account Data: Retained for the duration of your account's existence. Upon account deletion, your account data will be permanently deleted within thirty (30) days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our agreements).
• Conversation Data: Retained for as long as your account is active. You may delete individual conversations or all conversation data at any time through the Service. Deleted conversations are permanently removed from our active systems within thirty (30) days.
• Payment and Transaction Data: Retained for as long as necessary to process transactions, manage subscriptions, and comply with applicable financial record-keeping requirements (typically up to seven (7) years).
• Usage and Log Data: Generally retained for up to twelve (12) months for analytics and security purposes, after which it is aggregated or deleted.
• Anonymized and Aggregated Data: We may retain anonymized or aggregated data that does not identify any individual for analytics, research, and service improvement purposes indefinitely.

5. Data Security

We implement commercially reasonable administrative, technical, and physical security measures designed to protect your Personal Data from unauthorized access, disclosure, alteration, destruction, and misuse. These measures include:

• Encryption of data in transit using SSL/TLS (HTTPS);
• Cryptographic hashing of passwords using bcrypt;
• Two-factor authentication (2FA) available for account security;
• Access controls limiting employee and contractor access to Personal Data on a need-to-know basis;
• Regular security reviews and monitoring of our systems;
• Secure server infrastructure with firewall protection; and
• Session management with secure cookie handling and expiration policies.

Despite these measures, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. You acknowledge that you provide your Personal Data at your own risk. If you become aware of any security breach affecting your account, please notify us immediately at support@pliant.bot.

6. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your Personal Data. We are committed to honoring these rights to the extent required by applicable law. Your rights may include:

• Right of Access: You may request a copy of the Personal Data we hold about you.
• Right of Correction: You may request that we correct inaccurate or incomplete Personal Data. You can update most account information directly through your account settings.
• Right of Deletion: You may request that we delete your Personal Data, subject to certain exceptions (such as where retention is required by law or for legitimate business purposes). You may delete individual conversations at any time through the Service, and you may request full account deletion by contacting us.
• Right to Data Portability: You may request a copy of your data in a structured, commonly used, and machine-readable format. The Service provides a data export feature that allows you to download your conversation history.
• Right to Opt Out of Model Improvement: You may opt out of having your conversation data used to train or improve our AI models through your account settings. Opting out will not affect the functionality of the Service available to you.
• Right to Withdraw Consent: Where we rely on your consent to process Personal Data, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Restrict Processing: You may request that we restrict the processing of your Personal Data in certain circumstances.
• Right to Object: You may object to our processing of your Personal Data in certain circumstances.

To exercise any of these rights, please contact us at support@pliant.bot. We will respond to your request within thirty (30) days, or within the timeframe required by applicable law. We may ask you to verify your identity before processing your request.

7. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Service and provide you with a seamless experience. A cookie is a small text file that is stored on your device when you visit a website.

7.1 Types of Cookies We Use

• Essential/Session Cookies: These cookies are strictly necessary for the operation of the Service. They enable core functionality such as maintaining your authenticated login session, remembering your security preferences (such as 2FA status), and ensuring the proper functioning of the Service. These cookies are temporary and are deleted when you close your browser or when your session expires.
• Preference Cookies: These cookies remember your settings and preferences (such as your selected AI model, language preference, appearance settings, and other personalization options) so that we can provide a consistent and personalized experience across sessions.

7.2 Cookies We Do Not Use

We do not use third-party advertising cookies, tracking cookies, or analytics cookies from third-party services such as Google Analytics, Facebook Pixel, or similar advertising and tracking technologies. We do not serve advertisements on the Service, and we do not engage in cross-site tracking or behavioral advertising.

7.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies or to alert you when a cookie is being set. However, please note that disabling essential cookies may prevent you from logging in or using certain features of the Service.

8. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect Personal Data from children under 13 years of age. If you are under 13, you may not create an account or use the Service. If you are a parent or guardian and you believe that your child under 13 has provided us with Personal Data, please contact us immediately at support@pliant.bot, and we will take steps to delete such information from our systems promptly. Users between the ages of 13 and 18 may use the Service only with parental or guardian consent, and certain age-restricted features (including NSFW content) require users to be at least 18 years of age.

9. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, you acknowledge and consent to the transfer, storage, and processing of your Personal Data in the United States and other countries where our service providers may operate. These countries may have data protection laws that differ from the laws of your jurisdiction. We take reasonable measures to ensure that your Personal Data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

10. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals to websites. Because there is no universally accepted standard for how to interpret and respond to DNT signals, we do not currently respond to DNT signals. However, as described in Section 7, we do not use third-party tracking or advertising cookies and do not engage in cross-site tracking.

11. U.S. State Privacy Rights

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or another U.S. state with applicable privacy legislation, you may have additional rights under those laws, including:

• The right to know what Personal Data we collect, use, and disclose about you;
• The right to request deletion of your Personal Data;
• The right to opt out of the "sale" or "sharing" of your Personal Data (note: we do not sell or share your Personal Data for cross-context behavioral advertising);
• The right to non-discrimination for exercising your privacy rights; and
• The right to correct inaccurate Personal Data.

To exercise these rights, please contact us at support@pliant.bot. We will not discriminate against you for exercising any of your privacy rights.

12. European Economic Area, United Kingdom, and Swiss Users

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, we process your Personal Data on the following legal bases under the General Data Protection Regulation (GDPR) or equivalent legislation:

• Performance of a Contract: Processing necessary to provide the Service and fulfill our obligations under the Terms of Service (e.g., account management, processing conversations, and managing subscriptions).
• Legitimate Interests: Processing necessary for our legitimate interests, provided these interests are not overridden by your rights and freedoms (e.g., security monitoring, fraud prevention, service improvement, and analytics).
• Consent: Processing based on your explicit consent (e.g., opting in to model improvement or enabling optional features). You may withdraw consent at any time.
• Legal Obligation: Processing necessary to comply with applicable legal requirements.

You may exercise your GDPR rights (including access, rectification, erasure, restriction, portability, and objection) by contacting us at support@pliant.bot. If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will notify you by posting the updated Privacy Policy on the Service with a new effective date and, where practicable, by sending an email notification to the address associated with your account. Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Pliant Labs LLC
Email: support@pliant.bot
Twitter/X: @PliantBot

We will make every effort to respond to your inquiry in a timely manner.