Privacy policy

What we collect, why, who else sees it, how long we keep it, and your rights.

Last updated: 11 November 2026

Plait is in a closed, invite-only beta. This policy covers the Plait website (plait.run), the hosted Plait service (app.plait.run), and the information the Plait desktop app and supervisor send to the hosted service. We wrote it to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

We never sell your personal data, and we do not use it for advertising.

Who we are

Plait is provided by Muon Core Ltd, a company registered in England and Wales under company number 09995817, with its registered office at 28 Angel Close, Dukinfield, England, SK16 4XA. In this policy, “we”, “us” and “our” mean Muon Core Ltd.

We are the controller of the personal data described in this policy. We are registered with the Information Commissioner’s Office (ICO) under reference C2085223.

For questions about privacy, or to exercise your rights, email [email protected].

When an organisation uses Plait

Plait is organised into workspaces that belong to an organisation. When an organisation uses Plait for its own work, it decides what goes into its workspace and who can see it. For that workspace content the organisation is the controller and we are its processor, under our Data Processing Agreement. If you are a member of someone else’s organisation and have a question about how it uses your information, ask that organisation first; we will help it respond.

What we collect and why

We collect only what we need to run Plait, keep it secure, and support you.

Sign-in and account details

You sign in through an external identity provider (Google, GitHub, Microsoft, or your organisation’s own single sign-on (OIDC)), or with a passkey you have added to your account. We never see or store a password. From your provider we receive your name, email address, the identifier the provider uses for you, and, if the provider shares one, your profile picture. We use these to create your account, sign you in, show who you are to people you work with, and contact you about the service. If you join through an invitation, we also receive your email address from the person who invited you.

Besides you, we may receive information about you from: your identity provider; the person who invited you; other members of your organisation, who may mention you or post information about you in a workspace; and integrations your organisation connects, such as Slack or GitHub, which may include your profile and messages that mention you.

Sign-in sessions and security records

When you sign in we record the time, your IP address and your browser’s user agent against your sign-in session. We use these to keep you signed in, to sign you out everywhere when you ask, and to detect and investigate misuse of accounts.

Workspace content

We store what you and your organisation put into Plait so the service works: messages and sessions, boards, tickets, goals, flows, agent configurations, knowledge documents, files, and the messages, results and records your agents produce. Agents run on executors (see below), and send their output back to the hosted service so it appears in your workspace.

Workspace content can contain personal data about you and about other people, depending on what is put into it. The organisation that owns the workspace is responsible for what it puts there.

No person at Muon Core looks at your workspace content except to help with a support request you have made (we will ask first), to investigate a security incident or a report of misuse, to fix an error that cannot be fixed any other way, or when the law requires it.

Executors and the desktop app

The Plait desktop app and the headless supervisor run on machines you control. They execute agent work in Docker containers on that machine. When you register an executor, the hosted service stores its name (by default, your computer’s hostname), its connection status and a record of the work dispatched to it.

The desktop app checks for updates by downloading a small update file from downloads.plait.run, and downloads updates from there or from GitHub. Those services see your IP address and user agent when it does. The desktop app does not send crash reports or usage analytics.

Connected integrations

You can connect services such as Slack, GitHub, Plane and others to your workspace. To do this we store the access tokens or keys those services issue, encrypted. Data then flows between Plait and that service at your direction: for example, a Slack message an agent replies to, or a GitHub pull request an agent opens. The connected service’s own privacy policy covers what it does with that data.

Email

We send service email from [email protected], such as invitations, welcome messages, notices when someone joins your organisation, and security notices when a sign-in method or passkey on your account changes. We do not send marketing email. If we ever want to, we will ask for your consent first.

Push notifications

If you turn on browser notifications, your browser gives us a push subscription address, which we store against your account. Notifications are delivered through your browser maker’s push service (for example Google, Mozilla, Apple or Microsoft). Their content is encrypted so the push service cannot read it. You can turn notifications off in your browser at any time.

Correspondence

When you email us, we keep the correspondence so we can help you and refer back to it later. If you give us feedback on the beta, we keep that too.

The plait.run website

The marketing website uses no cookies, analytics or trackers. It is served by Cloudflare, which processes your IP address to deliver the pages and protect the site from attack.

AI models and your provider accounts

Plait does not run AI models for you. When an agent works, it runs on your executor, on a machine you control, and calls the AI provider you have chosen (for example Anthropic or OpenAI) directly, using your own subscription or API key. Those calls do not pass through our servers, and the provider’s own terms and privacy policy apply to them. You choose what you send to your provider.

Your provider credentials are kept on your executor, not by us. If you sign in to a Claude or ChatGPT subscription from the Plait web app, our server completes the sign-in with that provider and passes the resulting tokens straight to your executor. We do not store them.

We do not use your content to train AI models.

Our lawful bases

UK GDPR requires us to have a lawful basis for each use of personal data. Ours are:

What we do	Lawful basis
Create your account, sign you in, store and show your workspace content, run integrations and executors you set up, send service email	Contract: necessary to provide the service you have signed up for (Article 6(1)(b)). Where an organisation has invited you and you have no contract with us yourself: legitimate interests, providing the service your organisation uses (Article 6(1)(f))
Record sign-in sessions, IP addresses and security events; prevent and investigate misuse; protect the service and other users	Legitimate interests: keeping Plait and its users secure (Article 6(1)(f))
Respond to your emails and support requests; learn from beta feedback to improve Plait	Legitimate interests: supporting users and improving the product (Article 6(1)(f))
Process the data of other people that appears in a workspace	On behalf of, and on the lawful basis chosen by, the organisation that owns the workspace
Send browser push notifications	Consent, given through your browser’s permission prompt, which you can withdraw at any time (Article 6(1)(a))
Keep records and respond to lawful requests from authorities	Legal obligation (Article 6(1)(c))

Where we rely on legitimate interests, we have weighed them against your rights and expectations. You can object to that processing (see Your rights).

You need to give us your name and email address, through your identity provider, to have an account. Without them we cannot provide the service. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

Our sub-processors, the companies that host and run parts of Plait for us, such as DigitalOcean (hosting and database) and Postmark (email). They may use your data only to provide their service to us. See the full list of sub-processors.
Other members of your organisation, who can see the workspace content you share with them, and your organisation’s administrators, who manage its members, integrations and executors.
Services you connect or choose: your identity provider when you sign in, the integrations you connect, and your AI provider, which your executor calls directly. You direct those transfers, and each service’s own terms apply.
Authorities, when the law requires it. We disclose data to law enforcement or other authorities only when legally required to. Where the law allows and it is practical, we will tell you first.
A buyer of our business. If Muon Core Ltd is sold or merges with another company, your data may transfer as part of that business. We will tell you before your data becomes subject to a different privacy policy.

International transfers

Our database and application servers are in London, United Kingdom (DigitalOcean’s lon1 region). Some of our providers are based in, or have staff or infrastructure in, the United States or elsewhere outside the UK: Cloudflare, Postmark and GitHub. When personal data goes outside the UK, we protect it with one of the following safeguards:

the UK–US data bridge (the UK Extension to the EU–US Data Privacy Framework), where the US recipient is certified under it;
the ICO’s International Data Transfer Agreement (IDTA), or the International Data Transfer Addendum to the EU Standard Contractual Clauses; or
a UK adequacy regulation for the destination country.

The safeguard for each provider is on the sub-processors page. You can ask us for a copy of the relevant safeguard by emailing [email protected].

How long we keep it

Account details and workspace content: for as long as your account or your organisation’s workspace is active.
Sign-in sessions: a session ends after 30 days without use, and after 90 days in any case. Ended sessions, with the IP address and browser details recorded for them, are deleted within an hour.
After you close your account or your organisation closes its workspace: we delete the data from our live systems within 30 days, and it ages out of our database backups within a further 7 days. Messages you posted in an organisation’s shared sessions are part of that organisation’s workspace and stay with it unless the organisation deletes them. When an organisation closes its workspace, everything in it is deleted on the same timetable.
Emails we send: 30 days in our own database, and 45 days in Postmark’s delivery records.
Search indexes are deleted along with the messages they were made from.
Executor records and push subscriptions: until you remove the executor or turn off notifications, or your account is closed.
Correspondence and beta feedback: for as long as we need it to support you, and no longer than 2 years after our last contact.

We may keep some data longer where the law requires it or where we need it to establish, exercise or defend a legal claim.

During the beta there is no self-service export or account deletion. To get a copy of your data or close your account, email [email protected].

How we protect it

All traffic to plait.run and app.plait.run is encrypted in transit with TLS. Our database is a managed service with encrypted storage and encrypted backups. Integration credentials are encrypted in the database. Access to production systems is limited to the people who need it to run the service. No system is perfectly secure; if you find a vulnerability, please report it to [email protected]. If a breach puts your rights at high risk, we will tell you without undue delay.

Your rights

Under UK GDPR you have the right to:

be informed about how we use your data, which is what this policy is for;
access your data and get a copy of it;
rectification: have inaccurate data corrected or incomplete data completed;
erasure: have your data deleted, in some circumstances;
restrict processing of your data, in some circumstances;
data portability: receive data you gave us in a structured, machine-readable format, or have it sent to another organisation;
object to processing we carry out on the basis of legitimate interests;
withdraw consent at any time, where we rely on consent, without affecting processing that happened before;
not be subject to decisions based solely on automated processing that have legal or similarly significant effects on you. We do not make such decisions.

To exercise any of these rights, email [email protected]. We will respond within one month, and there is no charge. We may need to confirm your identity first. Where your request concerns content in an organisation’s workspace, we may refer it to that organisation and help it respond.

Cookies and browser storage

The plait.run website sets no cookies.

The Plait web app at app.plait.run uses a small number of first-party cookies and browser storage entries. They are all needed to provide the service you have asked for, so under PECR they do not need your consent. We use no analytics, advertising or third-party cookies.

Name	What it does	How long it lasts
`plait_session`	Keeps you signed in.	Until you sign out, after 30 days without use, or after 90 days at most
`plait_flow…`	Ties a sign-in, or a passkey ceremony, to the browser that started it, to prevent sign-in forgery.	10 minutes
`plait_signup`	Holds an account sign-up that is in progress.	30 minutes
`plait_setup_grant`	Authorises the first-time setup of a Plait server.	15 minutes
`plait_connection_oauth_nonce`	Protects the step where you connect an integration, so it cannot be hijacked.	10 minutes
`plait_active_org`	Remembers the organisation you chose to work in, so the app opens it next time.	1 year

The web app also uses your browser’s local storage and session storage. It stores interface settings you choose, such as panel widths, collapsed sidebars, board filters, the last board you opened and whether you dismissed the notifications prompt. While you accept an invitation, it also holds the invitation token. Interface settings stay in your browser and are not sent to us. The invitation token is sent to us when you accept the invitation. Session storage holds the organisation you are working in for each browser tab, and is cleared when you close the tab.

You can delete cookies and site data in your browser settings. If you block the app’s cookies, you will not be able to sign in.

Children

Plait is for people aged 18 and over who are using it for work. We do not knowingly collect data from children.

Changes to this policy

We will update this policy when our practices change. When we do, we will change the date at the top of the page. If a change is significant, we will also email account holders before it takes effect.

Contact us and complaints

Muon Core Ltd, 28 Angel Close, Dukinfield, England, SK16 4XA. Email: [email protected].

If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection: ico.org.uk/make-a-complaint, telephone 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Parts of this policy are adapted from the 37signals policies by 37signals LLC, used under the Creative Commons Attribution 4.0 International licence. We have changed them substantially for Plait and for the law of England and Wales.