Privacy Policy

• Only if you sign in: your Google account’s basic identity (name, email, profile picture). Signing in asks for nothing else, and plumbline has no access to your Gmail, Drive or any other Google data.

• If you sign in: your name, email, profile picture and Google account id.
• The domains you choose to keep, the checks you picked for each, and the reports of the scans you save for them.
• For each assistant you have connected (see below): its name, what you allowed it to do, when you approved it and when it last used the connection. We keep sign-in tokens for it only as one-way hashes.
• For five minutes after a page is scanned, its address, so the same page is not scanned again too soon. This is about the page, not about you.

The checks run in your browser. Every request they make to the site you are checking goes through plumbline’s server, so that site sees a request from plumbline rather than from your browser. A scan you run without saving it is not stored: its results stay in your browser and are gone when you leave the page.

If you connect an AI assistant to plumbline, you approve it on a consent screen first, and choose whether it may only read your domains and reports or change them as well. What an assistant does with them once you have allowed it is governed by that assistant’s own privacy policy. You can see every assistant you have connected, and disconnect any of them, from the Connect page; disconnecting ends its access immediately.

• One cookie, plumbline_session, keeps you signed in. It is only readable by our server, is sent only to this site, and lasts up to 30 days or until you sign out. Two short-lived cookies (ten minutes) are used while you sign in, to check that the answer came from the sign-in you started, and to bring you back to the right page.
• No advertising or analytics cookies, and no trackers.
• Cloudflare, which hosts plumbline, records each request (the address it came from, the page asked for, the time and the result) in logs that we use to keep the service running and secure. They are kept for a short time and are not used to profile you.

We don’t sell or share your data, show ads, or use anything you keep in plumbline to train any model.

Removing a domain deletes it and all of its reports. To delete your account and everything above with it, email us from the address you sign in with and we will do it. To also withdraw Google’s permission, remove plumbline at your Google account permissions.

mridang.agarwalla@gmail.com