Privacy notice
Version 2026-11-11.7 · PluraVox closed beta
PluraVox asks several AI models your question and gives you one merged answer. This notice explains, in plain words, what personal data we use, why, and how you can control it. It follows India's Digital Personal Data Protection Act, 2023.
Who is responsible
During the closed beta, PluraVox is run by its founder, before the company is formed. Once the company is registered, it will take over responsibility for your data, and we will update this notice and tell you.
Contact for privacy questions and complaints (grievance officer): see below.
What we collect and why
| Data | Why we use it | Where it's kept | How long |
|---|---|---|---|
| Your email address | To sign you in with a one-time code and to stop abuse (for example, one person making many accounts) | Supabase, on servers in Mumbai, India | Until you delete your account |
| Your questions and the answers (chat history) | To get answers from the AI models, and so your history is the same on all your devices | Saved to your account in Supabase, Mumbai, India. PluraVox encrypts each chat before storing it (AES-256), and only PluraVox server holds the key, so the database, its backups or a leak show scrambled text. Basic details such as when a chat was saved and how many questions it has are not encrypted. A copy is also kept in your browser. | Until you delete the chat (× in the sidebar) or your account; deleted chats can stay in our database backups for up to 7 days |
| Feedback you choose to send (👍/👎, "this flag was wrong", notes) | To improve answer quality | Our server. It includes the question and answer you rated, but not your email. | Up to 12 months |
| A record that you agreed to this notice | To show we asked for your consent, as the law requires | Our server, stored with your email scrambled (a one-way hash), not in readable form | Up to 3 years |
| Usage records: when you asked, the kind of question, which models answered, cost, speed and whether it worked. Not the question itself. | To run the service, control costs and spot problems | Our server, linked to a scrambled ID, not your email | Up to 12 months |
| Credits, if PluraVox charges for answers: your balance and a record of each change (welcome credits, credits added, what each answer cost) | To keep your balance correct and so you can see what you paid for | Supabase, Mumbai, India. Only PluraVox server can change it; you can see your own. | The balance is deleted with your account (any credits left are lost). The record of changes is kept, with your account removed from it, for our accounts and tax records. We also keep a scrambled code made from your email (a keyed one-way hash) so the same inbox can't claim the welcome credits twice. |
| Images you create: the description you typed and the image | To make the image and show it to you on all your devices | The image is kept privately in your account (Supabase Storage, Mumbai, India); only you can open it through PluraVox. Your description is saved with your chats (encrypted). | Until you delete the chat or your account |
| Safety record of image requests: when, what kind, whether it was allowed or refused, and the description (encrypted) | To prevent misuse (for example, pausing accounts that keep asking for prohibited images) and to respond to lawful requests | Our server, linked to a scrambled ID, not your email | 90 days. If you delete your account, records of allowed images are deleted at once; records of refused requests are kept for the rest of the 90 days. The owner can see which accounts had requests refused, to prevent misuse |
| If a request asks for sexual content involving children: the request (encrypted), the time, the account and its email, and the network address | Indian law (POCSO and the IT Rules) requires such attempts to be preserved and reported to the authorities | Our server; seen only by PluraVox's admins, to make the report | 180 days, also after the account is deleted |
| Answers you choose to share (Share → link): the question, PluraVox's answer, the key figures and where the AIs differed, and which AIs answered | To show the answer to anyone you send the link to | Supabase, Mumbai, India, not encrypted, because the link makes it public. It doesn't include your name, email or other chats. Search engines are asked not to list it. | Until you press Stop sharing or delete your account |
| Your email on the invite list or block list, if the owner adds it | To control who can use the closed beta | Our server (only the owner can see it) | Until the beta ends, or sooner if you ask |
| Your IP address | To limit how many requests one connection can make | Our server's memory only; not saved | About one hour |
We don't sell your data or show ads, and we don't use your chats to train AI models. The AI companies that answer your question handle what they receive under their own data policies.
Who else processes your data
- AI models. To answer, your question (and the last few messages of the chat, for context) goes through OpenRouter to the AI companies whose models answer it, such as Google, Anthropic, OpenAI, DeepSeek, Alibaba (Qwen), xAI (Grok) or Perplexity. Some of them process data outside India. Please don't put sensitive personal details in your questions.
- Supabase stores your sign-in account, your encrypted chat history, credits and shared answers (in Mumbai, India).
- Image models: to make an image, your description goes through OpenRouter to the image model (currently Google's Gemini image models) and a safety-check model (Anthropic's Claude). The finished image is also sent to the safety-check model before you see it.
- Fly.io runs PluraVox server, in Singapore. Your questions and answers pass through it while you use PluraVox; it keeps only the usage records described above, not your chats.
- Google (Gmail) currently delivers the sign-in code emails.
- Cloudflare may run a quick security check on the sign-in page to block bots.
Who can use PluraVox
PluraVox is for people aged 18 or older. If you're under 18, please don't sign up; we don't yet have the parental consent the law requires for children.
Your rights
- Withdraw consent and erase your data: open Account → Delete my account in the app. Your account, your saved chats, your images, your shared links, your credit balance and your usage records are deleted straight away (the record of credit changes is kept without your account, as explained above), and the chats on that device are cleared. Other devices where you're signed in are signed out within an hour. Feedback you sent isn't linked to your email, so we can't trace it back to you or delete it.
- See what we hold, or correct it: email the contact below.
- Nominate someone to exercise these rights if you die or can't: email the contact below.
- Complain: email the contact below. We aim to reply within 7 days. If you're not satisfied, you can complain to the Data Protection Board of India.
Contact
Grievance officer: see above
Changes
If we change this notice in a way that matters, we'll ask you to agree again the next time you sign in.