Plumcot AI
Legal

Privacy Policy

Effective January 2026

Plumcot AI is the AI Workforce for construction that can be specialized in Preconstruction, Project Management, Field Supervision, and back office work. This policy explains what information we handle to do that, why, who helps us, and the choices you have.

1. Who we are

Plumcot AI is a product of SNY AI, Inc., a Delaware corporation with its principal place of business at 1134 Arden Forest Dr, Spring, TX 77379, USA ("Plumcot", "we", "us"). This policy covers our website and the Plumcot platform, including our AI employees, the account console and the review screens your team uses (together, the "Service").

When a business signs up, it decides what work its AI employees do and which documents and systems they use. For that business content we act on the customer's behalf, as a service provider or processor. For information about visitors to our website and the people who contact us, we decide how it is used.

2. Information we collect

Information you give us

  • Demo and contact requests. Your name, company, work email and anything you tell us about your team's challenges.
  • Account details. Your name and work email, your role in your company's account, and who invited you.
  • Support and correspondence. What you send us by email or in the product.

Business content our customers provide

  • Bid packages, drawings, spec books, addenda, estimating workbooks, email and other files your company uploads or makes available.
  • The work the AI employees produce from them, such as scope sheets, takeoffs, sub pricing, RFIs, submittals and reports, along with your team's reviews, edits, approvals and sign-offs.

Information created when you sign in

  • Microsoft sign-in. When you sign in with your work Microsoft account, we receive an ID token from Microsoft with your name, email address and the identifiers of your account and your organization's directory. We never see your Microsoft password.
  • Email sign-in links. If you sign in with a one-time link, we store the link's record only until it is used or expires.

Information collected automatically

  • Technical and usage information such as IP address, browser type, pages and screens used, timestamps and error reports.
  • Records of what each AI employee did on a run: the steps it took, how long each took, what it cost and whether it succeeded. We keep these to operate, monitor and audit the Service.
  • Audit records of account events, such as sign-ins, invitations, permission changes and connector consent.

3. How we use information

  • To provide the Service: running your AI employees, preparing work for your people to review, and writing approved work back to your systems.
  • To sign you in, keep your account secure, and keep each customer's data separate from every other customer's.
  • To monitor, troubleshoot and improve the reliability, accuracy and cost of the Service.
  • To respond to demo requests and support questions, and to send service and account messages.
  • To meet legal obligations, enforce our terms, and protect our customers, users and Plumcot.

We do not sell personal information, and we do not use it for targeted advertising.

4. AI processing

To do their work, our AI employees send relevant parts of your content to the AI models and document-processing services listed in section 5. These providers process it only to return a result to us.

  • We do not use your company's content to train AI models, ours or anyone else's.
  • Your content is not used to serve other customers.
  • AI output can be wrong. That is why the Service is built around a review gate: a person on your team checks, edits and signs off before work is sent or relied on.

5. Who we share it with

We share information only with service providers that help us run the Service, under contracts that limit what they may do with it, plus the limited cases below.

ProviderWhat they doLocation
Microsoft AzureHosting, database, file storage, document reading (Azure AI Document Intelligence and Content Understanding)United States
Microsoft 365 and Entra IDSign-in, and the files, mail and calendars your administrator connectsYour Microsoft 365 region
Temporal TechnologiesRunning and resuming AI employees' workflows reliablyUnited States

We may also share information:

  • within your company's account, with the people your administrators give access to;
  • when required by law, or to protect the rights, safety and security of our customers, users or Plumcot;
  • as part of a merger, acquisition or sale of assets, subject to this policy.

6. Cookies

The Service uses one strictly necessary cookie to keep you signed in. It is HttpOnly, Secure and SameSite=Lax, holds only a random session identifier, and expires after at most 7 days. We do not use advertising or cross-site tracking cookies. If we ever add analytics, we will update this section first.

7. How long we keep it

  • Business content and work product: for as long as your company's subscription is active, and then deleted within 30 days of a verified request or the end of the subscription, unless the law requires us to keep it longer.
  • Sign-in sessions: up to 7 days.
  • One-time sign-in links: deleted within 24 hours.
  • Service monitoring records: 35 days.
  • Demo requests and correspondence: as long as needed to respond and follow up, and no longer than 24 months without further contact.

8. Security

  • Data is encrypted in transit and at rest on Microsoft Azure.
  • Each customer's data is kept separate at the database level, so one account cannot read another's.
  • Plumcot connects to Microsoft 365 with a certificate rather than a shared password, and only with the permissions your administrator grants.
  • Access inside Plumcot is limited to the people who need it to run and support the Service.

No system is perfectly secure. If we learn of a breach that affects your information, we will notify you as the law requires.

9. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or limit certain processing. To make a request, email agent@plumcot.ai. We will verify the request and respond within the time the law allows.

If your information is part of a customer's business content, please contact that company's administrator. We will help them respond. Your Microsoft 365 administrator can disconnect Plumcot at any time.

10. Where data is processed

Plumcot is based in the United States, and we host the Service in Microsoft Azure's US East region. Some service providers may process data elsewhere, as listed in section 5. Where the law requires it, we use appropriate safeguards for those transfers.

11. Children

The Service is for businesses. It is not directed to children, and we do not knowingly collect information from anyone under 16.

12. Changes

We may update this policy. We will post the new version here with a new "last updated" date, and tell customers' administrators about material changes before they take effect.

13. Contact

SNY AI, Inc. (Plumcot AI)
1134 Arden Forest Dr, Spring, TX 77379, USA
agent@plumcot.ai