Privacy Policy

Last updated September 19, 2026

Draft, not legal advice. Bracketed details such as [Operator name] must be completed and the text reviewed before Plumb launches publicly.

The short version

Your ideas are yours. We use what you submit only to evaluate it for you. We don't sell your data, we don't use it for advertising, and you can delete any evaluation at any time.

Who we are

Plumb is operated by [Operator name], [Country/State] (“we”, “us”). Questions about this policy: [contact email].

What we collect

  • Account information: your email address, and your name and profile picture if you sign in with Google.
  • What you submit: the idea or business details you enter in an evaluation.
  • Results: the scores, verdicts and written analysis we generate for you.
  • Usage records: when evaluations run, how long they take and how much AI processing they use, so we can enforce plan limits and keep the service reliable.

How we use it

  • To run evaluations and show you your results and history.
  • To operate, secure and improve the service, including enforcing usage limits.
  • To contact you about your account or important changes.

We do not sell your personal information or use your submissions for advertising.

Service providers

We rely on a small number of providers who process data on our behalf:

  • Supabase: database and sign-in.
  • Anthropic: the AI model that evaluates your submission. It also runs web searches about your idea's market, category and competitors. We instruct the research model to search only for your market, category and competitors, and not to use your confidential details (names, customers, revenue and other figures) as search terms. Under Anthropic's commercial terms, data sent through its API is not used to train its models by default. [Operator to verify against Anthropic's current terms before launch.]
  • Vercel: hosting.
  • Stripe: payments for paid plans. Stripe collects and stores your card details; we only keep your Stripe customer id and the status of your subscription.

Who can see your evaluations

Only you. Evaluations are protected by row-level access controls in our database, so each account can read only its own records. Data is encrypted in transit.

Retention and deletion

We keep your evaluations until you delete them. If an evaluation fails, we keep your answers for 30 days so you can try again, and our hosting provider's background-job system keeps processing logs of each evaluation for a limited time. You can delete any evaluation from its report page. To delete your account and all associated data, email [contact email].

Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal data, or to object to certain processing. Contact [contact email] to exercise them.

Changes

If we make material changes to this policy, we'll update the date above and notify signed-in users.