Privacy Policy

1. Introduction to Our Privacy Commitment

At PLTO.IN (operated by Plantosphere Private Limited), we believe that digital privacy is a fundamental human right. As a next-generation smart URL shortener and link-in-bio infrastructure provider, we process millions of data points globally. However, unlike legacy platforms that monetize your raw click data, our entire architecture is built on privacy-first edge computing principles. This Privacy Policy details exactly what information we collect, how it is processed at the edge, and the stringent security measures we employ to protect your data across all jurisdictions, including strict compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

We collect information in two distinct categories to ensure the platform functions at maximum efficiency while maintaining your privacy:

2.1 Information You Provide to Us

When you register for a PLTO.IN account, whether through Google OAuth or standard email registration (secured by Google Firebase Authentication), we collect your basic profile information. This includes your email address, display name, and authentication tokens. For users of our Link-in-Bio public profile feature, we collect the URLs you choose to display, your bio text, and the structural layout preferences of your profile. At no point do we store plaintext passwords on our servers.

2.2 Automated Click Data and Edge Analytics

When a user clicks on a PLTO.IN shortened link, our Cloudflare Edge Workers instantly intercept the request. We collect highly anonymized and aggregated telemetry data. This includes non-identifiable browser user agents, generalized geographic locations (country/city level via IP, but raw IPs are instantly discarded and never written to our persistent databases), referring domains, and device types. We do NOT use invasive tracking cookies or device fingerprinting to follow users across the web.

3. How We Process and Use Your Data

Our unique architecture relies on Cloudflare KV and D1 databases to minimize data hoarding. We use your data exclusively for the following purposes:

• Service Delivery: To instantly resolve short aliases to their destination URLs with zero latency.
• Creator Analytics: To provide you, the creator, with aggregated dashboards showing total clicks, top referrers, and audience demographics without exposing individual user identities.
• Security and Abuse Prevention: To run automated heuristics that detect spam, phishing, and malware links. If a destination URL is flagged by our threat intelligence network, we use metadata to block the redirect and suspend malicious accounts.
• Platform Optimization: To improve our routing algorithms and ensure 99.99% uptime across our global edge nodes.

4. Data Sharing and Third-Party Subprocessors

PLTO.IN does not, and will never, sell your personal data or the click data of your audience to third-party data brokers or advertising networks. We only share data with essential infrastructure partners (Subprocessors) required to run the platform:

• Cloudflare, Inc.: Provides our edge computing, DNS, WAF, KV storage, and D1 databases. Data processed here is encrypted at rest and in transit.
• Google LLC (Firebase): Manages our secure authentication layer. They process login credentials strictly under their enterprise privacy agreements.

We may also disclose information if required by law enforcement under a valid subpoena or court order, provided such disclosure is legally mandatory.

5. Your Data Rights (GDPR & CCPA)

Depending on your location, you have extensive rights regarding your personal data. You have the right to request a complete export of all data associated with your account in a machine-readable format. You have the right to request the deletion of your account and all associated short links (Right to be Forgotten). You also have the right to rectify any inaccurate information in your profile. To exercise any of these rights, please contact our Data Protection Officer at privacy@plantosphere.in. We are committed to fulfilling these requests within 30 days.

6. Data Retention and Deletion

We retain your account information and link data for as long as your account remains active. If you choose to delete your account, your authentication data is instantly purged from Firebase. Your short links will be deactivated, and the associated aggregated analytics will be permanently anonymized in our D1 databases, ensuring they can never be traced back to you. Temporary edge cache data is automatically flushed globally within hours.

7. Children's Privacy

PLTO.IN is designed for professional creators, publishers, and businesses. Our services are not directed at individuals under the age of 13 (or 16 in certain European jurisdictions). We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take immediate steps to delete that information from our servers.

8. Changes to this Privacy Policy

As our ecosystem evolves, particularly with the upcoming integrations of Eynni AI and Litora, we may update this Privacy Policy to reflect new data processing practices. We will notify all active users via email and through dashboard announcements at least 15 days prior to any material changes taking effect. Your continued use of PLTO.IN after the effective date constitutes your acceptance of the revised policy.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please do not hesitate to contact our legal team. You can reach us via email at legal@plantosphere.in or via traditional mail at the Plantosphere Private Limited corporate headquarters.