Privacy Policies
Your privacy is important to us at Pluvia. We respect your privacy regarding any information we may collect from you across our website.
Introduction & Scope
Pluvia (the "Company", "we", "us," "our") is committed to protecting your privacy and ensuring transparency about how we collect, use, and protect your personal data. This Privacy Policy applies to:
- Our Application Programming Interface (API) service
- Pluvia Dashboard (web-based SaaS platform)
- Advisory (consulting, implementation, modeling)
- Our website (pluvia.ai)
- Any related services or features
This policy complies with:
- EU General Data Protection Regulation (GDPR)
- Singapore Personal Data Protection Act (PDPA)
- Data Protection Laws in Malaysia, Indonesia, Thailand, Vietnam, and Philippines
By using our services, you agree to this Privacy Policy. If you do not agree, please do not use our services.
Data we collect
Account & Registration Data
When you create a Pluvia account or subscribe to our services, we collect:
- Full name, email address, phone number
- Company name, industry, job title
- Billing address and payment information
- Username and password (encrypted)
- Account preferences and settings
API Usage Data
When you use Pluvia API, we automatically collect:
- API calls and query parameters (not stored beyond analytics)
- Geographic locations queried (latitude/longitude in requests)
- API response times and error logs
- Rate limiting and usage metrics
- Timestamps of API calls
- IP addresses and device information
Note: We do NOT store personal data contained in API request payloads unless explicitly provided for error diagnostics.
Dashboard Activity Data
When you use Pluvia Dashboard, we collect:
- Sites/regions you monitor
- Alert thresholds and configurations
- Report generation activity
- User login frequency and duration
- Features accessed and time spent
- Filters applied, data exports requested
- Team member access logs
- Device type and browser information
Weather & Environmental Data
When you use Pluvia Dashboard, we collect:
- Rainfall measurements, water levels, forecasts (aggregated, non-personal)
- Geographic coordinates of monitoring locations
- Sensor data integrated from third-party sources
- Historical climate data (publicly available sources)
This data is NOT personal data and is NOT subject to GDPR restrictions.
Communications Data
- Emails you send us (support inquiries, feedback)
- Chat or support tickets you submit
- Call recordings (if you authorize call recording)
- Meeting recordings (webinars, training sessions)
- Survey responses and feedback forms
Professional Services Data
For consulting, implementation, or custom modeling engagements:
- Project scope and requirements
- Data you provide for modeling (historical incident data, customer information)
- Communications and documentation
- Performance metrics and optimization results
- Client site data (weather-related only, not personal)
Third-Party Data
- Credit card information (processed via Stripe or equivalent party, not stored by Pluvia)
- Data from single sign-on (SSO) providers if you authenticate via Google, Microsoft, etc
- Information from data brokers for fraud prevention
Cookies & Tracking Technologies
- Session cookies (login, preferences)
- Analytics cookies (Zoho Analytics)
- Performance cookies (error tracking, load times)
- See Section 6 (Cookies) for opt-out options.
How We Use Your Data
We use the data we collect to provide, maintain, and improve our services, process payments, communicate with you, ensure security, and comply with legal obligations. [Placeholder — replace with the final "How We Use Your Data" copy.]
Data Sharing & Third Parties
We Do NOT Sell Your Data
Pluvia does NOT sell, rent, or trade your personal data to third parties.
Data Shared With Service Providers
We share data with trusted partners who process data on our behalf:
| Service | Purpose | Data Shared |
|---|---|---|
| Stripe or Equivalent | Payment processing | Name, email, billing address, card (encrypted) |
| Microsoft Azure | Cloud infrastructure | API logs, dashboard data (encrypted at rest) |
| Zoho Analytics | Website analytics | Anonymized usage patterns, page views |
| Zoho Desk | Customer support | Support tickets, inquiry history |
Data Shared With Your Team
- If you grant team members access to your Pluvia account:
- They can view your account data, API usage, sites monitored
- Account owner can revoke access at any time
Data Retention
Retention Periods
| Data Type | Retention Period | Reason |
|---|---|---|
| Account data | Until account deletion + 30 days | Service provision, backup |
| API logs | 90 days | Performance monitoring, troubleshooting |
| Dashboard activity | 24 months | User history, analytics |
| Billing records | 90 days | Tax/accounting compliance |
| Support tickets | 90 days | Legal/dispute resolution |
| Marketing emails | 90 days | Compliance with GDPR consent |
| Cookies | Per cookie settings (1 month - 2 years) | Session management, analytics |
| Weather data | 10+ years | Historical analysis, customer research |
Data Security
We apply industry-standard technical and organizational measures — encryption in transit and at rest, access controls, and monitoring — to protect your data. [Placeholder — replace with the final Data Security copy.]
International Data Transfers
Where data is transferred across borders, we rely on appropriate safeguards such as standard contractual clauses and adequacy decisions. [Placeholder — replace with the final International Data Transfers copy.]
Changes to This Privacy Policy
We may update this policy from time to time. Material changes will be communicated via email or an in-product notice, and the "current as of" date above will be updated. [Placeholder — replace with the final copy.]
Contact & Complaints
For privacy questions or complaints, contact us at contact@pluvia.ai. You also have the right to lodge a complaint with your local data protection authority. [Placeholder — replace with the final Contact & Complaints copy.]
Glossary
Definitions of key terms used in this policy (Personal Data, Processing, Controller, Processor, etc.). [Placeholder — replace with the final Glossary content.]
Your Privacy Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or port your data, and to object to or restrict processing. [Placeholder — replace with the final Your Privacy Rights copy.]
Special Provisions
Region-specific provisions (GDPR, PDPA, and Southeast Asia data protection laws) apply where relevant. [Placeholder — replace with the final Special Provisions copy.]
Acknowledgments
By using Pluvia, you acknowledge that you have read and understood this policy. [Placeholder — replace with the final Acknowledgments copy.]