Privacy
What Plunge AI Consulting keeps about you and your company, where it lives, who sees it, who processes it, and how you get it back or have it erased. Plunge AI Consulting is a service of Plunge AI (PlungeAI, Inc.).
Last reviewed 2026-10-25
In short: we keep what you tell us and the records of our work together, in databases and file storage of our own on Cloudflare. Each client sees only its own data. We do not sell it or train models on it. Your sponsor can download it at any time, and we erase it when you ask. This summary does not replace the page below.
What we keep
The start form
Your name, work email, company and, if you give it, your website. Your four answers about the problem: what is slow, costly or risky; who is affected; what you tried; how you will know it is fixed. If you give them, what you already know you want and a note. We also record the version of the terms you accepted.
Your sign-in
You sign in with a Plunge AI account. We keep your user id, your email and your role at each client you belong to.
Our work together
Proposals, engagements, milestones, the records of each delivery, sign-offs, approvals and your settings. The files we deliver, evidence you share for a Diagnostic, signing certificates and exports.
Billing
Order forms, invoices, payments, credits, Run plans, the ledger and the Stripe ids of each of them. Stripe holds your card or bank details; we never see or store a card number.
The timeline
What happened and when, the mail we sent you, and the firm's own feed.
Where it lives
Plunge AI Consulting has three databases of its own on Cloudflare (D1), separate from other Plunge AI products: one for clients and work, one for billing, and one for the timeline and the mail outbox. Files are in Cloudflare R2 storage, in a folder per client.
Our workers run in Cloudflare's San Jose region (us-west). The primary copies of the databases are in western North America.
No API key or secret value is ever stored in our databases. The systems we build run on your own Plunge account; a key made on that account is recorded by its id and prefix only.
Who sees it
Each client sees only its own data. The firm's members see the clients they work for. Inside your company, each person has one role:
- Sponsor: signs, pays and sees all money.
- Approver: accepts a delivery or a go-live, or pushes back; sees invoices, read only.
- Technical lead: sees keys, connections, deployed URLs and test reports; sees no amounts.
- Viewer: reads only; sees no money.
Who processes it
- Cloudflare hosts the site, the portal, the dashboard, the databases and the files. Its Turnstile check stops bots on the start form, and Cloudflare sees that challenge.
- Anthropic runs the AI models (Claude) behind the agents that draft our work and check the pictures we make, and behind the chat in the portal and the dashboard.
- Google signs you in when you choose "Continue with Google" on the Plunge AI sign-in page, and its image and video models (Gemini, Veo) make the pictures and videos we deliver; they see the prompts we write from your brief and what is made from them.
- OpenAI runs a bot we build for you when we choose one of its models for it; it sees the bot's test cases and its answers while we test it, and later the messages your customers send the bot.
- Stripe handles card and US bank (ACH) payments.
- Resend delivers the mail we send you.
- Brave, Tavily, Exa and Perplexity answer the web searches of the agents that research your company or a research question; they see the search queries.
The full list, with what each one sees, is at Security · Subprocessors. We do not sell your data and we do not use it for advertising.
AI and your data
When you send the start form, an AI agent reads your company's public website and public news about it, then drafts a reply. Nothing is mailed to you until the owner approves it.
Every text we send you is a draft until the owner approves it. Receipts and sign or pay links are automatic notices. Every AI action that reaches you is logged with the model, the run id, who approved it and when.
The chat in the portal shows the same cards as the pages, and only what your role may see. It asks you to confirm before anything that changes money or scope. We do not train or fine-tune models on your data. AI disclosure has the detail.
Export
Your sponsor can download your company's own records as JSON at any time, from Data and exit in the portal.
Erasure
We erase a client's data when you ask. Only the owner can erase a client. The erase removes:
- the client's rows in all three databases;
- the client's file folder.
What stays: signature records the law requires us to keep, which we list back to you; invoices and payment records at Stripe, kept for tax and accounting; and the Plunge AI platform's own run records, which follow the platform's retention.
There is no automatic deletion. We keep a client's data while you are a client and until you ask us to erase it. An enquiry that never became a client is erased on request too.
Your requests
To get a copy of your data, correct it, or have it erased, write to legal@plungeai.com from the address you use with us. We confirm when it is done.
See also Terms, Rights, Security and the data processing agreement.