Privacy Policy

Plato Tribune ("we", "us", or "our") is a software-as-a-service platform that generates AI-powered SEO content clusters and automatically publishes them to our users' WordPress sites. We are committed to protecting your privacy and handling your personal data transparently and lawfully.

This policy applies to all visitors, account holders, and users of our website and application. By using Plato Tribune, you acknowledge that you have read and understood this policy.

Account data: your name and email address, provided when you register and authenticate through our identity provider.

Connected site credentials: the URL, username, and application password for the WordPress sites you connect. These credentials are encrypted at rest and used only to publish content on your behalf.

Usage and billing data: subscription plan, content generation activity, regeneration counts, and payment records processed through our payment provider, Stripe.

Technical data: log information, IP address, browser type, and similar metadata generated automatically when you interact with the service.

We use your data to operate and maintain the service, authenticate your account, generate and publish content to your connected WordPress sites, process subscriptions and payments, and provide customer support.

We also use aggregated, non-identifying usage data to monitor performance, prevent abuse, and improve our features. We do not sell your personal data to third parties.

Where the GDPR applies, we process your personal data on the following legal bases: performance of our contract with you (to provide the service), your consent (for optional cookies and communications), our legitimate interests (to secure and improve the platform), and compliance with legal obligations (such as tax and accounting records).

We share data with carefully selected sub-processors strictly as needed to deliver the service. These include Stripe for payment processing, Vercel for application hosting, our hosting and database providers (including MongoDB) for data storage, and our authentication provider (Keycloak) for identity management.

We also rely on third-party AI providers to generate content. Prompts and related inputs may be transmitted to these providers solely to produce your requested output. We require all sub-processors to maintain appropriate security and confidentiality safeguards.

We use cookies and similar technologies for authentication, preferences, and analytics. For full details about the categories of cookies we use and how to manage them, please see our Cookie Policy, available at /cookies.

We retain your personal data for as long as your account remains active and for as long as necessary to provide the service. After account closure, we delete or anonymize your data within a reasonable period, except where we are required to retain certain records to comply with legal, tax, or accounting obligations.

We implement appropriate technical and organizational measures to protect your data. Sensitive data, including your connected WordPress credentials, is encrypted at rest using industry-standard encryption. Access to production systems is restricted and monitored.

No method of transmission or storage is completely secure, but we work continuously to safeguard your information and to respond promptly to any incident.

Subject to applicable law, you have the right to access, correct, and delete your personal data, to restrict or object to its processing, and to request a portable copy of the data you provided to us.

You may exercise these rights by contacting us through our contact page. You also have the right to lodge a complaint with your local data protection authority.

Your data may be processed in countries outside your own, including by sub-processors located abroad. Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses to ensure an adequate level of protection.

Plato Tribune is not intended for individuals under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version with a revised date, and material changes will be communicated where appropriate.

If you have questions about this Privacy Policy or how we handle your data, please contact us through our contact page.