Ploti Privacy Policy

This policy applies when you visit ploti.ai or another Ploti website, create or use a Ploti account, use our web, desktop, or mobile applications, communicate with us, or otherwise interact with our products and services (collectively, the "Services").

Ploti provides a collaborative workspace for finding, organizing, analyzing, and discussing geospatial and property information. The Services may include maps, records, projects, documents, AI-assisted research and analysis, integrations, exports, and related collaboration tools.

This policy does not govern third-party products or websites that Ploti does not control, even when they are linked to or integrated with the Services.

Ploti is responsible for personal data used to operate our business, including account, billing, website, sales, support, security, and product-usage data.

Organizations may submit or generate information in their Ploti workspaces ("Customer Content"). For Customer Content that we process on an organization's behalf, the organization determines why and how that information is used and Ploti generally acts as its service provider or processor. If your data is contained in an organization's workspace, you should direct privacy requests to that organization first. We will assist our customers as required by law and our agreements. Our Data Processing Agreement describes these processor commitments.

The organization that controls a workspace may access, export, manage, and delete Customer Content and user accounts within that workspace, including content created by a user who later leaves the organization. Workspace administrators are responsible for configuring permissions and handling requests concerning organization-controlled content.

We receive personal data from:

• You when you use the Services or communicate with us;
• Your employer, workspace administrator, teammates, or other people who invite you to or collaborate with you in Ploti;
• Identity, payment, analytics, communications, and other providers used to operate the Services;
• Integrations or data sources you or your organization choose to connect;
• Government records, public websites, licensed geospatial and property datasets, including parcel ownership, address, permit, zoning, and development information, and other publicly available sources;
• Cookies and similar technologies when you use our websites or applications.

We use personal data to:

• Provide, maintain, and administer the Services;
• Create accounts, authenticate users, and manage workspaces, permissions, subscriptions, and payments;
• Process searches, maps, analyses, files, prompts, and other requests and return relevant results;
• Enable collaboration, sharing, notifications, integrations, and exports requested by users;
• Personalize and improve the Services, develop features, and understand product performance;
• Respond to questions, provide support, and communicate operational or security information;
• Protect Ploti, our customers, and the public; prevent fraud, abuse, and security incidents; and enforce our agreements;
• Send product news and marketing communications, subject to your choices and applicable law;
• Comply with law, legal process, and valid government requests, and establish or defend legal claims;
• Create aggregated or de-identified information that cannot reasonably be used to identify an individual.

Ploti uses artificial intelligence to help users research, summarize, classify, transform, and analyze information. To provide these features, we may send relevant prompts, Customer Content, map context, search results, and other inputs to AI and search service providers. Responses may be stored with the related workspace or chat.

Ploti may combine your instructions with public, licensed, and customer-provided geospatial information to identify or analyze locations, parcels, developments, infrastructure, and other map features. Results may contain information derived from public records or third-party sources. Users are responsible for evaluating results before relying on them for legal, financial, engineering, permitting, or other material decisions.

Model training: Ploti does not use Customer Content to train general-purpose AI models. AI providers may process Customer Content only to provide and secure requested functionality and do not have permission from Ploti to train their general-purpose models on it. We may use voluntary feedback, such as ratings of an AI response, or other information you expressly opt in to provide to evaluate and improve AI features.

You must use public-record and geospatial information lawfully and in accordance with applicable source terms. Unless Ploti expressly agrees in writing, you must not submit Social Security numbers, complete payment-card data, protected health information, biometric identifiers, children's personal data, or other information subject to specialized legal protections beyond generally applicable privacy laws.

We may disclose personal data to:

• Service providers that support hosting, cloud storage, databases, AI and search features, mapping, authentication, analytics, communications, customer relationship management, payments, support, security, and other business operations. Our current provider list is available on our Subprocessors page;
• Your organization and other users according to workspace membership, permissions, sharing settings, and actions you take within the Services;
• Integrations and third-party services when you or your organization direct us to connect, export, or send information to them;
• Professional advisers, such as lawyers, accountants, auditors, and insurers;
• Authorities and other parties when we reasonably believe disclosure is required by valid legal process, necessary to protect rights or safety, or appropriate to investigate fraud, abuse, or security issues. Where legally permitted, we will notify the affected customer before disclosure, and we may challenge requests we reasonably believe are invalid or overbroad;
• Transaction participants in connection with a financing, merger, acquisition, reorganization, sale of assets, or similar corporate transaction;
• Other parties with your direction or consent.

We may use and disclose aggregated or de-identified information for lawful purposes. We will not attempt to re-identify information that we maintain as de-identified, except to test whether our de-identification processes are effective or as otherwise permitted by law.

Ploti and our providers use cookies, local storage, pixels, scripts, and similar technologies to keep users signed in, remember settings, secure the Services, measure performance, understand feature usage, and support sales and marketing.

These technologies may be strictly necessary, functional, or analytical. Some marketing and analytics activity may be treated as a "sale," "sharing," or targeted advertising under certain United States privacy laws even when no money changes hands.

You can control or delete cookies through your browser settings. Blocking cookies may require you to reset preferences and may prevent parts of the Services from working. Ploti does not respond to generic "Do Not Track" signals. Where required by applicable law, Ploti treats supported, legally recognized universal opt-out signals, such as Global Privacy Control, as a request to opt out of sale or sharing and targeted advertising.

Ploti does not sell personal data for monetary payment and does not use Customer Content to advertise to you or others.

We retain personal data for as long as reasonably necessary to provide the Services, maintain legitimate business and security records, comply with law, resolve disputes, and enforce agreements. The appropriate period depends on the type of data, why we collected it, its sensitivity, the customer's instructions, and applicable legal requirements.

Account and Customer Content is generally retained while the related account or customer relationship remains active. When a customer deletes a workspace or closes its account, Ploti will remove Customer Content from active systems within 30 days. Encrypted backup copies may remain until they expire or are overwritten through our ordinary backup cycle, generally within 90 days. We may retain billing, security, fraud, and legal records for longer where reasonably necessary or required by law. An enterprise agreement may specify a different deletion schedule. We may retain aggregated or de-identified information that no longer identifies an individual.

We use administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration. No internet transmission or storage system is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your account credentials, using appropriate workspace permissions, and notifying us if you believe your account or information has been compromised.

The Services are intended for business users. You must be at least 18 years old, or the age of legal majority where you live, and authorized to act for your organization to create an account. The Services are not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data to us, contact us so that we can investigate and take appropriate action.

Depending on where you live and subject to legal exceptions, you may have the right to request access to, correction of, deletion of, or a portable copy of personal data we maintain about you. You may also have rights to obtain information about our data practices, opt out of certain sales, sharing, targeted advertising, or profiling, limit certain uses of sensitive personal data, and appeal a decision we make about your request.

To submit a request, email support@ploti.ai. We may need to verify your identity and authority before completing a request. An authorized agent may submit a request where permitted by law. If we deny a request, you may appeal by replying to our decision with the word "Appeal." We will not discriminate against you for exercising a privacy right.

California residents may also request information about the categories of personal information collected, sources, business or commercial purposes, categories of recipients, and specific pieces of personal information maintained about them. Ploti's practices during the preceding 12 months are described throughout this policy.

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with similar law, you may have rights to access, correct, erase, or receive a portable copy of your personal data; restrict or object to processing; and withdraw consent where processing is based on consent. You may also complain to your local data protection authority.

Where applicable, we process personal data because:

• It is necessary to provide the Services or perform a contract with you;
• It supports our legitimate interests, such as operating, securing, and improving the Services, communicating with customers, and conducting our business, where those interests are not overridden by your rights;
• We have your consent; or
• It is necessary to comply with a legal obligation.

When Ploti processes Customer Content on behalf of an organization, that organization is responsible for identifying the applicable legal basis. Please contact it first to exercise rights concerning that Customer Content.

Ploti is based in the United States, and we and our providers may process personal data in the United States and other countries whose laws may differ from those where you live. Where required, we use recognized legal mechanisms for international transfers, such as adequacy decisions or contractual protections approved by relevant authorities.

We may update this policy as our Services and legal obligations change. We will post the updated policy with a revised effective date. If a change is material, we will provide additional notice where required by law.

Questions or privacy requests may be sent to support@ploti.ai.

Ploti.ai Inc.
446 W. Plant Street
Winter Garden, FL 34787