Privacy Policy

Last updated: October 1, 2026

Pluvius is run by Yung Kwong Lau, doing business as Pluvius, of 5659 Cornwall Place, Richmond, British Columbia V7C 5M7, Canada. If you have a question or a request about your information, write to hello@getpluvius.com. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA), and we honour the same rights for people elsewhere, including under the GDPR.

Information about you, our customer

When you create an account, we keep your email address and your login, so that we can sign you in with a one-time code or a password. To run your hunt, we keep your business website, what you sell and who you sell to, your preferences, and the companies you keep or skip, and we use them to improve your hunt for you. We keep the drafts you view and edit so that you can come back to them. If you tell Pluvius that a piece of its research is wrong, we keep that note with your account.

Payments are handled by Stripe. We never see or store your card number; we keep your Stripe customer ID and the status of your plan. When you write to us, we keep your message so that we can answer it and improve Pluvius. We also keep basic technical information, such as your IP address, your browser, the pages you use and any errors, to keep the service secure, to prevent abuse (the app's sign-in form uses Cloudflare's Turnstile check) and to fix problems. If you connect Telegram, we keep your Telegram chat ID to send you notifications there.

We email you when a hunt is ready and when a new company is waiting for you. Every one of those emails has a link to stop them in one click, and you can turn them back on in your account. Emails you need to use your account, such as sign-in codes, still arrive.

We use your information to provide Pluvius under our agreement with you, and for the security and improvement of the service.

Information about other businesses and the people who run them

To find companies for our customers, Pluvius reads public sources: news, company websites and public business listings. From them it may record a company's name, its website, what it recently did, and the name and role of a person who runs it, and sometimes a business email address that is published. It keeps a short quote from the source as evidence, with a link to it, not a copy of the article. We use this information only to show a relevant company to a customer who may want to contact it, and we do not sell it.

Where the GDPR applies, we rely on legitimate interests to do this: helping businesses make relevant contact with other businesses, using business information that is already public, while keeping what we hold to a minimum and making it easy to object.

If you are one of those people and you would like us to stop, write to hello@getpluvius.com. We will delete the information we hold about you and add your company's website to our block list, so that Pluvius does not find it again.

Who we share information with

We share information only with the service providers that run Pluvius, each under its own security and privacy terms. Supabase provides our database and sign-in. Hetzner provides our servers. Cloudflare hosts the website and runs the sign-in check. Stripe takes payments. Resend sends account emails, such as sign-in codes and notices. Telegram delivers notifications, if you connect it.

To read public pages and write drafts, Pluvius uses AI from Google (Gemini) and Anthropic (Claude). What it sends them is the public company information and your business description needed for each task. We use both on their paid business services, under which neither uses what we send, or what it returns, to train its models; each may keep it for a limited time to detect abuse. To find recent news and websites, Pluvius uses the search services Exa and Brave Search, which receive search queries, such as an industry and a place, and never your account details.

We do not sell personal information and we do not use it for advertising.

Where information is stored

Your information is stored and processed by the service providers above, in their data centres, which are in Canada, the United States and the European Union and may change as those providers add or move capacity. This means your information may be handled outside your province or country, where other laws apply. We choose providers that protect it by contract and by their own security.

How long we keep it

We keep your account information while your account is open. When you delete your account, your login and everything tied to it, including your profile, your settings, your hunts, the companies you kept, your drafts, the research notes you left and the record of the terms you accepted, is deleted at once and permanently, and your subscription is cancelled at the same time. We do not keep separate backup copies of our database, so deleted information is gone at once. What remains afterwards is the billing record that Stripe and we must keep for tax law, and public information about other companies, with its link to your account removed.

We keep public company information while it is useful to hunts, and we delete it on request, as described above. When you try the free demo, we keep the website you entered and the results it found, so that a repeat visit is fast; we reuse them for up to 90 days, and we delete them if you ask.

Your rights

You can ask to see, correct or delete your personal information, or ask how it has been used, by writing to hello@getpluvius.com, and we will answer within 30 days. You can also delete your account yourself in the app. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or the Information and Privacy Commissioner for British Columbia, or to your local authority if you are in the European Union or the United Kingdom.

Children

Pluvius is a service for businesses and is not meant for anyone under 18. We do not knowingly collect information from children. If we learn that we have, we delete it.

Security

Information is encrypted in transit. Access to our systems is limited to the people who run Pluvius. No system is perfect; if a breach affects you, we will tell you, and the regulator, as the law requires.

Cookies

We use only what is needed to sign you in and keep the site working, together with Cloudflare's security check. We use no advertising cookies and no tracking cookies, so there is nothing to accept or decline. Cloudflare also counts visits to this site, without cookies and without following you to other sites, so that we can see how many people visit and how fast the pages load.

Changes to this policy

If we change this policy in a meaningful way, we will tell customers by email or in the app before the change applies.

Contact

Yung Kwong Lau, doing business as Pluvius, 5659 Cornwall Place, Richmond, British Columbia V7C 5M7, Canada.
hello@getpluvius.com