Privacy Policy

Who we are

Pluid is an AI article creation service available at www.pluid.com and app.pluid.com. This policy explains how we collect, use and share personal information when you visit our websites, use our app, purchase a plan or contact us.

Pluid is operated by Interleave Studios PTE LTD, registered at 20A Tanjong Pagar Rd, Singapore 088663 (“Pluid”, “we”, “us”). We are the controller of personal information used to manage our business, customer accounts and website tracking.

For privacy questions or requests, email social@pluid.com or write to the address above.

Where a business customer supplies personal information within its content and we process that information on its instructions, the customer is the controller and we act as its processor under our agreement with that customer. Requests about that content should normally go to the customer; we assist as required.

Information we collect

Account and contact information. We collect information you provide to create and manage an account or contact us, such as your name, email address, organisation, account credentials or sign-in identifiers, and messages to our team. Required account information lets us authenticate you and deliver the service; without it, we cannot provide the relevant account features.

Content and service activity. We process the briefs, prompts, source materials, uploads, edits and other content you submit, and the articles and other outputs you create. These may contain personal information. We also process information needed to operate your workspace and apply your plan limits. Only submit personal information you are authorised to use.

Billing information. Stripe processes payments. We process the billing and subscription information needed to manage your plan, such as billing contact details, invoices, payment status and transaction or subscription references. Payment details entered into Stripe’s payment interface are handled by Stripe.

Website and app analytics. Subject to the choices described below, we use PostHog to understand how people use Pluid. On www.pluid.com, PostHog collects page views and clicks, and records sessions for a sample of about one in five visitors who allow analytics. On app.pluid.com, PostHog collects page views and product events, records sessions for every user who allows analytics on every page except the article editor, and captures errors so we can find and fix bugs. Recordings reconstruct interactions with our pages to help us understand usability problems. Our PostHog deployment uses EU servers.

Before you make a choice in a region where we ask first, or after you decline analytics, PostHog only counts the pages you open and leave, anonymously, together with your country. No clicks, recordings or other activity are collected. These counts use no cookies or other storage on your device and do not identify you. Our server also records some account events as part of running the service, whatever your cookie choice, for example a signup together with the domain of the email address used.

Advertising measurement. Subject to your tracking choices, the Meta Pixel on www.pluid.com collects information about visits and activity for ad measurement. It loads only once advertising is allowed and is never used in the app. For users who allow advertising, our server also sends Meta four events: signing up, starting the free plan, starting checkout and subscribing. Each event carries a hashed (SHA-256) email address and user ID, the IP address and browser user agent, the values of the Meta cookies described below, and the plan and price as event details. This helps Meta attribute these actions to its ads.

Country lookup and preferences. We use your IP address to look up your country and decide which consent rules to apply. The lookup runs on our own server using ip-location-db, a public-domain country list. We do not store or log the IP address used for this country lookup; we only remember whether your region asks for consent first, in a cookie that lasts 30 days. This statement concerns the lookup itself; it does not describe separate processing by infrastructure or tracking providers. We retain your cookie preference so we can apply your choice.

Operational information. We keep the records needed to run and secure the service, such as sign-in records and security and error logs. Each sign-in session stores the IP address and browser details it was created from, so we can protect your account.

Why we use information

We use account, content and billing information to provide the service you request, create and edit articles, manage subscriptions, process payments and respond to support requests. Where data protection law requires a legal basis, we rely on performance of our contract with you or steps requested before entering that contract. For business customers’ personnel, our legitimate interest is administering and delivering the customer’s service.

We use necessary operational information to protect accounts, prevent abuse, troubleshoot failures and maintain the service. Our legal basis is our legitimate interest in providing a secure and reliable service, balanced against your rights. We use billing and other records to meet applicable accounting, tax and legal obligations where processing is legally required.

We use optional analytics and advertising information to understand usage, improve the product and measure advertising. In the EU, UK and other places where prior consent is required, our basis is your consent. Where local law permits optional tracking without prior consent, we apply the choices below and rely on our legitimate interests in understanding and improving our service and measuring advertising, to the extent that this basis is applicable and permitted.

We use country lookup and consent records to apply privacy choices and relevant legal requirements. We rely on compliance with applicable legal obligations where required, and otherwise our legitimate interest in applying appropriate privacy settings.

Cookies and your choices

Analytics and advertising are two separate choices. In the EU, UK and other places where prior consent is required, optional analytics, session recording and advertising tracking remain off until you accept the relevant tracking. This includes both browser tracking and our server-side advertising events. Until then, we only count page views anonymously as described above. Rejecting optional tracking does not prevent you from using the core service.

Elsewhere, we enable optional tracking by default only where local law allows it. You can turn it off at any time. We honour applicable local opt-out requirements.

You can review or change your choice at any time, including withdrawing consent: use “Cookies” in the footer of www.pluid.com, or “Cookie settings” in the account menu or on the sign-in pages of app.pluid.com. Withdrawal stops future optional collection covered by your choice; it does not make earlier lawful processing unlawful or automatically delete information already collected. Declining advertising removes the Meta cookies. You can separately request deletion as described below.

Your choices are kept in cookies in your browser for one year and apply to both www.pluid.com and app.pluid.com. Technologies strictly necessary to provide requested functions, such as signing in, security, payments and remembering your privacy preference, may operate without optional tracking consent. They are distinct from analytics and advertising. Choices may need to be set again if you clear browser storage or use another browser or device.

The table below lists the cookies we use. “Website” means www.pluid.com and “App” means app.pluid.com.

The app also keeps interface preferences and unsaved drafts in your browser’s storage on your device. They are necessary for features you use and are not sent to third parties.

Who receives information

We use service providers to operate Pluid, including hosting, storage, authentication, communications, AI processing and payments. They receive the information needed for their respective services:

• Hosting and infrastructure: Railway (hosting and databases), Cloudflare (file storage) and Redis.
• Sign-in and email: Google, if you choose to sign in with Google, and Resend for email delivery.
• Payments: Stripe receives your workspace name, the owner’s email address and billing details. Card details go straight to Stripe.
• Analytics: PostHog provides our analytics and session recordings.
• Advertising measurement: Meta receives advertising measurement information and may process it under its own terms and privacy policy.
• AI processing: prompts, briefs, source material, knowledge base content and chat messages go through OpenRouter to AI model providers, including Google, OpenAI, Z.ai, Moonshot AI, Qwen (through DeepInfra) and Cohere. Text edits in the editor go to Synthetic, and uploaded files go to Mistral for text extraction. Langfuse keeps logs of AI requests so we can debug them.
• Research and web content: search queries built from your topics and briefs go to web search and research services (Exa, Tavily and Parallel). Firecrawl reads your website during onboarding, Jina reads links you add to the knowledge base, and image searches go to stock image libraries (Pexels, Unsplash, Pixabay and Openverse).

To generate or edit content, we send relevant prompts, source material and other inputs to these AI model providers, who process them under their own terms.

We may disclose information to professional advisers, authorities or other parties where necessary to comply with law, protect rights or investigate abuse. If our business is acquired or reorganised, relevant information may transfer as part of that transaction, subject to applicable privacy protections.

Provider information is available at https://posthog.com/privacy, https://stripe.com/privacy and https://www.facebook.com/privacy/policy/. Their policies explain their own processing and do not replace our responsibilities.

International transfers

Our PostHog analytics deployment uses EU servers. This does not mean that all Pluid data is processed only in the EU. Our service providers may process and store information in countries other than yours, including the United States and the European Union. Where the law requires, we rely on appropriate safeguards such as standard contractual clauses.

You can contact social@pluid.com for information about applicable transfer safeguards and how to obtain a copy.

How long we keep information

We retain information only for the purposes described in this policy, taking account of your account status, the service requested, legal recordkeeping requirements and any genuine need to resolve disputes or protect the service.

You can permanently delete knowledge base items in the app. To delete your account or other content, email social@pluid.com. We delete your account data and saved articles within 30 days of your request. We may retain limited records where required by law, such as tax and payment records, or where necessary to resolve a dispute or protect legal rights. Those records are retained only for the applicable requirement or purpose.

Advertising events that have not been sent to Meta are deleted after 7 days, and once an event is sent, we remove its personal details from our copy of the event. When you start a checkout or add a payment card, we also keep a record that you allowed advertising, with the same details the event will carry (hashed email address and user ID, IP address, browser user agent and Meta cookie values), so the event can be sent when the payment completes. That record is deleted after 30 days. Cookies last for the periods listed in the table above.

The country lookup does not store the IP address it uses. Information that must be kept after an account closes is limited to the relevant legal or operational purpose.

Your rights

Depending on the law that applies, you may ask to access, correct, delete or restrict the use of your information, and receive a portable copy of eligible information. You can withdraw consent at any time. These rights have conditions and exceptions, including where records must be retained by law.

Your right to object. You may object to processing based on legitimate interests, including related profiling. You may object to use of your information for direct marketing at any time. Use “Cookies” on www.pluid.com or “Cookie settings” in the app to stop optional tracking, and contact social@pluid.com for other objections or requests.

We may request information reasonably necessary to verify your identity. We respond within the time required by applicable law, normally within one month for EU or UK requests, with permitted extensions where necessary.

You can complain to your local data protection authority. In the UK, contact the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/. In the EEA, you may complain to the authority where you live, work or believe an infringement occurred.

Security and updates

We use technical and organisational measures designed to protect personal information. No online service can guarantee absolute security.

We update this policy when our practices or applicable requirements change. We publish the current version here and update its effective date. Where required, we give additional notice or request fresh consent before introducing materially different processing.

Contact

For questions or requests, contact social@pluid.com or write to Interleave Studios PTE LTD, 20A Tanjong Pagar Rd, Singapore 088663.